mitre

There are 19 repositories under mitre topic.

redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
mitre mitre-attack
Language:C 9021
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera security-automation red-team mitre mitre-attack security-testing mitre-corporation cybersecurity hacking
Language:Python 5165
OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
threat-hunting sysmon hunting-campaigns hypothesis hunting dfir hunter mitre-attack-db mitre
Language:Python 3860
Incident-Playbook
austinsonger / Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
cybersecurity playbook cybersecurity-playbook incident-response incident-management incidents mitre-attack mitre contributions-welcome contributors-welcome catalog
1351
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 995
infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
detection-engineering splunk mitre awesome-list awesome cybersecurity threat-detection
548
Cyb3rWard0g / Invoke-ATTACKAPI
A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
powershell mitre-attack-db mitre
Language:PowerShell 361
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation microsoft microsoft-azure-security powershell security cloud-security mitre red-team security-testing azuread cloud-administration microsoft365 identity-access-management microsoft-graph ttp entra-id
Language:PowerShell 329
redcanaryco / chain-reactor
Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
linux mitre mitre-attack adversary-simulation elf security security-testing
Language:C 282
op7ic / EDR-Testing-Script
Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads
edr mitre att security-audit security edr-solutions incident-response
Language:Batchfile 278
mitre / caldera-ot
MITRE Caldera™ for OT Plugins & Capabilities
adversary-emulation bacnet caldera cybersecurity dnp3 mitre mitre-attack mitre-corporation modbus operational-technology ot profinet
174
mitre / saf
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
mitre-corporation mitre-saf compliance security security-automation devsecops json security-automation-framework mitre
Language:TypeScript 125
mvelazc0 / attack2jira
attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage
mitre-attack detection-engineering mitre attack-coverage
Language:Python 110
Yamato-Security / hayabusa-rules
Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
windows dfir event log analysis sigma hayabusa mitre attack
Language:Python 108
blueteam0ps / AllthingsTimesketch
This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
mitre mitre-attack timesketch plaso forensics triage rapid node-red
Language:Shell 82
jimmy-ly00 / Ransomware-PoC
A simple, fully python ransomware PoC using AES-CTR and RSA. Supports Windows, Linux and macOS
ransomware mitre mitre-attack t1486 ta0040 data-encrypted-for-impact python python3 wastedlocker python-ransomware-poc ransomware-poc
Language:Python 82
mitre-visualizer
qeeqbox / mitre-visualizer
🧬 Mitre Interactive Network Graph (APTs, Malware, Tools, Techniques & Tactics)
mitre network-graph advanced-persistent-threat malware tool attack technique tactic
Language:Python 80
rtfmkiesel / loldrivers-client
Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io
drivers golang vulnerabilities windows mitre
Language:Go 75
sickcodes / security
Collection of CVEs from Sick Codes, or collaborations on https://sick.codes security research & advisories.
security vulnerabilities advisories cve mitre cwe bugs
Language:Shell 73
Kart1keya / Hachi
This tool maps a file's behavior on MITRE ATT&CK matrix.
defcon27 defcon mitre mitre-attack malware-analysis malware-research malware-detection
Language:YARA 55
mitre / engage
MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.
cybersecurity mitre-corporation mitre deception cyber-deception cyberdefense active-defense mitre-attack
51
OWASP / cwe-tool
A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.
cwe cwe-discovery json cli owasp cve vulnerabilities mitre
Language:JavaScript 49
stevespringett / CPE-Parser
A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST
nist mitre cpe nvd java library
Language:Java 44
m3n0sd0n4ld / uCVE
uCVE is a tool written in GO that allows to extract CVE's related to a specific software and version, obtaining a report in HTML format with the result and/or exporting it to the pentesting report.
cve go golang hacking-tool mitre nist report reporting vulnerabilities
Language:Go 32
svch0stz / TheThreatHuntLibrary
Library of threat hunts to get any user started!
hunting mitre hypothesis threat-hunting threathunting cybersecurity
Language:Python 32
OWASP / cwe-sdk-javascript
A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC
cwe cve owasp mitre vulnerabilities
Language:JavaScript 30
cyentific-rni / SAG
An elevated STIX representation of the MITRE ATT&CK Groups knowledge base
mitre-attack mitre stix2
23
gmatuz / npm-initial-access
Easy to extend initial access scenario to help with EDR testing on Linux and Mac
redteaming pentesting edr cybersecurity tooling testing edr-testing red-team red-teaming mitre-attack mitre
Language:Shell 23
atc-project / atc-mitigation
Actionable analytics designed to combat threats based on MITRE's ATT&CK.
mitre-attack mitre blueteam blueteaming soc cybersecurity
21
motherhack3r / mitre
MITRE package gives you an approach to cybersecurity data sets.
mitre mitre-shield data-driven-security
Language:R 19
shadawck / mitrecve
Get all cve corresponding to a specific keyword or a list of keywords from the mitre database (https://cve.mitre.org/)
mitre mitre-attack security api cli cve dependencies mitre-api cve-scanning cve-search security-tools security-scanner
Language:Python 15
nu11pointer / cybersec
CYBERSEC - A Cybersecurity Discord Bot
bot ctf ctftime cve cybersec cybersecurity discord hacking infosec malware memes offsec resources virustotal writeups nvd mitre nist python3 discord-bot
Language:Python 13
zshehri / MITRE_EDR_Eval
Parsing MITRE EDR Evaluation results
mitre attack edr
Language:Shell 12
marirs / capa-rs
File Capability Extractor
capabilities file-capabilities capa rust rust-lang rust-library mitre mbc malware-analysis reverse-engineering aslr control-flow-graph seh
Language:Rust 11
mitre-cyber-academy / ctf-scoreboard-archive
Repository for the Deprecated MITRE Capture the Flag scoreboard.
ctf-scoreboard scoreboard ruby rails mitre ctf-platform ctf-framework
Language:Ruby 11
r-net-tools / net.security
Security R package with a set of utils to analyse the different industry standards (MITRE and NIST).
r security cve cwe cpe capec oval sard nist mitre attck
Language:R 11

mitre

redcanaryco / atomic-red-team

mitre / caldera

OTRF / ThreatHunter-Playbook

austinsonger / Incident-Playbook

nshalabi / ATTACK-Tools

infosecB / awesome-detection-engineering

Cyb3rWard0g / Invoke-ATTACKAPI

vectra-ai-research / MAAD-AF

redcanaryco / chain-reactor

op7ic / EDR-Testing-Script

mitre / caldera-ot

mitre / saf

mvelazc0 / attack2jira

Yamato-Security / hayabusa-rules

blueteam0ps / AllthingsTimesketch

jimmy-ly00 / Ransomware-PoC

qeeqbox / mitre-visualizer

rtfmkiesel / loldrivers-client

sickcodes / security

Kart1keya / Hachi

mitre / engage

OWASP / cwe-tool

stevespringett / CPE-Parser

m3n0sd0n4ld / uCVE

svch0stz / TheThreatHuntLibrary

OWASP / cwe-sdk-javascript

cyentific-rni / SAG

gmatuz / npm-initial-access

atc-project / atc-mitigation

motherhack3r / mitre

shadawck / mitrecve

nu11pointer / cybersec

zshehri / MITRE_EDR_Eval

marirs / capa-rs

mitre-cyber-academy / ctf-scoreboard-archive

r-net-tools / net.security