Small and highly portable detection tests based on MITRE's ATT&CK.
-
Updated
Oct 26, 2020 - PowerShell
#
mitre-attack
Here are 67 public repositories matching this topic...
Scalable Automated Adversary Emulation Platform
hacking
cybersecurity
mitre
red-team
security-automation
security-testing
mitre-attack
adversary-emulation
caldera
mitre-corporation
-
Updated
Oct 26, 2020 - Python
Windows Events Attack Samples
-
Updated
Oct 23, 2020 - PowerShell
Web app that provides basic navigation and annotation of ATT&CK matrices
-
Updated
Oct 26, 2020 - TypeScript
Utilities for MITRE™ ATT&CK
-
Updated
Mar 17, 2020 - HTML
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
-
Updated
Oct 26, 2020 - Python
A Linux Auditd rule set mapped to MITRE's Attack Framework
-
Updated
Jul 8, 2020
An Active Defense and EDR software to empower Blue Teams
-
Updated
Oct 12, 2020 - C++
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
azure
detection
logging
cybersecurity
sysmon
threat-hunting
siem
security-tools
blue-team
mitre-attack
workbooks
sysmon-config
terraform-azure
kql
azure-sentinel
-
Updated
Aug 28, 2020 - HCL
Actionable analytics designed to combat threats
-
Updated
Oct 26, 2020 - Python
Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing
graylog
logging
dfir
sysmon
threat-hunting
threat-sharing
threatintel
netsec
sysinternals
graylog-plugin
threat-analysis
threat-intelligence
mitre-attack
-
Updated
Feb 20, 2019 - Batchfile
Shuffle: A general purpose security automation platform platform. We focus on accessibility for all.
security
integrations
automation
discord
openapi
cybersecurity
shuffle
agplv3
soar
workflow-editor
mitre-attack
-
Updated
Oct 26, 2020 - JavaScript
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
-
Updated
Oct 7, 2020 - PowerShell
Elemental - An ATT&CK Threat Library
-
Updated
Jun 6, 2020 - HTML
Test Blue Team detections without running any attack.
-
Updated
Oct 8, 2020 - C#
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
cybersecurity
red-team
ctid
mitre-attack
adversary-emulation
cyber-threat-intelligence
threat-informed-defense
-
Updated
Oct 26, 2020 - Python
MITRE ATT&CK Website
-
Updated
Oct 26, 2020 - Python
Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
-
Updated
Jun 12, 2020 - C
Scripts and a (future) library to improve users' interactions with the ATT&CK content
-
Updated
Oct 22, 2020 - Python
Detecting ATT&CK techniques & tactics for Linux
incident-response
red-team
blue-team
mitre-attack
defensive-security
security-operations
threathunting
linux-hunting
-
Updated
Oct 1, 2020 - Roff
A knowledge base of actionable Incident Response techniques
-
Updated
Oct 26, 2020 - Python
A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
-
Updated
Apr 29, 2020 - PowerShell
PCAP Samples for Different Post Exploitation Techniques
-
Updated
Sep 25, 2020
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
attack
graph
analysis
visualisation
transform
misp
maltego
pivoting
threat-intelligence
threat-intel
mitre-attack
misp-maltego
-
Updated
Jul 16, 2020 - Python
See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
-
Updated
Aug 15, 2020 - C#
Open Source - Common Findings DataBase (JSON & MD)
-
Updated
May 21, 2020 - JavaScript
attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage
-
Updated
Oct 12, 2020 - Python
Sigma2AttackNet - Mapper of Sigma Rules ➡️ MITRE ATT&CK
-
Updated
Sep 22, 2020 - C#
Tool to predict attacker groups from the techniques and software used
-
Updated
May 31, 2020 - Python
Improve this page
Add a description, image, and links to the mitre-attack topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the mitre-attack topic, visit your repo's landing page and select "manage topics."
I was wondering the benefit of using Modular File Management vs Single Config File Management? Why do you consider it easier to use multiple files and then compile? Trying to figure out what the best case is for my use case. Thanks. #