cyber-threat-intelligence

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Web app that provides basic navigation and annotation of ATT&CK matrices

Cyber Threat Intelligence Repository expressed in STIX 2.0

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Cortex: a Powerful Observable Analysis and Active Response Engine

Cyber Analytics Repository

Scripts and a (future) library to improve users' interactions with the ATT&CK content

MITRE ATT&CK Website

Security control framework mappings to MITRE ATT&CK provide a critically important resource for organizations to assess their security control coverage against real-world threats and provide a bridge for integrating ATT&CK-based threat information into the risk management process.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

Cortex Analyzers Repository

OASIS TC Open Repository: Python APIs for STIX 2

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

A python module for working with ATT&CK

STIX data representing MITRE ATT&CK

TAXII server implementation in Python from EclecticIQ

OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships

Suricata rules for network anomaly detection