mitre-attack

There are 60 repositories under mitre-attack topic.

kubescape
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
best-practice devops kubernetes mitre-attack nsa security vulnerability-detection
Language:Go 10401
redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
mitre mitre-attack
Language:C 10101
RedTeam-Tools
A-poc / RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
cheatsheet cybersecurity enumeration hacking linux mitre-attack payload penetration-testing pentest pentest-tools red-team red-team-tools redteam resources security-tools tools windows
6249
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing
Language:Python 5815
olafhartong / sysmon-modular
A repository of sysmon configuration modules
dfir mitre-attack modular security-tools sysmon threat-hunting
Language:PowerShell 2709
sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
dataset detection-engineering dfir evtx mitre-attack threat-hunting windows-security winlogbeat
Language:HTML 2295
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation
Language:TypeScript 2049
Certified-Kubernetes-Security-Specialist
walidshaari / Certified-Kubernetes-Security-Specialist
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
apparmor certification cks ckss exam-objectives falco kernel-hardening kube-bench kube-hunter kubernetes kubernetes-security mitre-attack open-policy-agent os-footprint pod pod-security-policy policy seccomp security trivy
Language:AGS Script 2018
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection security aws-security azure-security kubernetes-security gcp-security
Language:Go 1898
Shuffle
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
agplv3 automation cybersecurity discord hacktoberfest integrations mitre-attack openapi orchestration orchestrator orchestrator-gui security security-automation security-orchestrator shuffle soar workflow-editor
Language:Shell 1808
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
adversary-emulation adversary-emulation-plans ctid cyber-threat-intelligence cybersecurity mitre-attack red-team threat-informed-defense
Language:C 1792
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1726
Incident-Playbook
austinsonger / Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
catalog contributions-welcome contributors-welcome cybersecurity cybersecurity-playbook incident-management incident-response incidents mitre mitre-attack playbook
1428
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
architecture cert csirt detection incident-response management mitre-attack purpleteam risk-management siem sirp soa soar soc tip ttp
1304
BLUESPAWN
ION28 / BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
active-defense anti-virus blue-team edr mitre-attack security security-tools threat-hunting windows
Language:C++ 1249
olafhartong / ThreatHunting
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
dfir mitre-attack splunk threat-hunting
1142
sentinel-attack
netevert / sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
azure azure-sentinel blue-team cybersecurity detection kql logging mitre-attack security-tools siem sysmon sysmon-config terraform-azure threat-hunting workbooks
1062
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 1015
atomic-threat-coverage
atc-project / atomic-threat-coverage
Actionable analytics designed to combat threats
incidentresponse mitre-attack threat-model threatdetection threathunting threatintelligence
Language:Python 977
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 941
DataDog / KubeHound
Tool for building Kubernetes attack paths
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 813
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 788
bfuzzy / auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
attack-detection auditd linux mitre-attack threat-hunting
778
atc-react
atc-project / atc-react
A knowledge base of actionable Incident Response techniques
amitt dfir incident-response mitre-attack response-playbooks thehive
Language:Python 628
mitre-attack / attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:Python 585
center-for-threat-informed-defense / attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
ctid cyber-threat-intelligence cybersecurity mitre-attack threat-informed-defense
Language:TypeScript 574
mdecrevoisier / EVTX-to-MITRE-Attack
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
evtx mitre-attack redteam siem threat-hunting
545
mitre-attack / attack-website
MITRE ATT&CK Website
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation
Language:HTML 503
mitre-attack / mitreattack-python
A python module for working with ATT&CK
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:Python 501
center-for-threat-informed-defense / attack-control-framework-mappings
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cti ctid cyber-threat-intelligence cybersecurity mitre-attack nist800-53 risk-management security-controls threat-informed-defense
Language:Python 488
center-for-threat-informed-defense / tram
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
ctid cyber-threat-intelligence cybersecurity mitre-attack threat-informed-defense
Language:Jupyter Notebook 464
SlimKQL / Hunting-Queries-Detection-Rules
KQL Queries. Microsoft Defender, Microsoft Sentinel
azure defender defenderxdr kql microsoft mitre-attack sentinel threatdetection threathunting
Language:HTML 420
OpenCTI-Platform / connectors
OpenCTI Connectors
cybersecurity cti threat-intelligence misp mitre-attack
Language:Python 405
center-for-threat-informed-defense / security-stack-mappings
🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
aws azure cloud gcp mitre-attack security
Language:Python 379
sbousseaden / PCAP-ATTACK
PCAP Samples for Different Post Exploitation Techniques
detection mitre-attack pcap-files pcapng threat-hunting
351
olafhartong / ATTACKdatamap
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
dfir mitre-attack siem threat-detection threat-hunting
Language:PowerShell 350

mitre-attack

kubescape / kubescape

redcanaryco / atomic-red-team

A-poc / RedTeam-Tools

mitre / caldera

olafhartong / sysmon-modular

sbousseaden / EVTX-ATTACK-SAMPLES

mitre-attack / attack-navigator

walidshaari / Certified-Kubernetes-Security-Specialist

DataDog / stratus-red-team

Shuffle / Shuffle

center-for-threat-informed-defense / adversary_emulation_library

mikeroyal / Digital-Forensics-Guide

austinsonger / Incident-Playbook

cyb3rxp / awesome-soc

ION28 / BLUESPAWN

olafhartong / ThreatHunting

netevert / sentinel-attack

nshalabi / ATTACK-Tools

atc-project / atomic-threat-coverage

mikeroyal / Open-Source-Security-Guide

DataDog / KubeHound

ion-storm / sysmon-config

bfuzzy / auditd-attack

atc-project / atc-react

mitre-attack / attack-scripts

center-for-threat-informed-defense / attack-flow

mdecrevoisier / EVTX-to-MITRE-Attack

mitre-attack / attack-website

mitre-attack / mitreattack-python

center-for-threat-informed-defense / attack-control-framework-mappings

center-for-threat-informed-defense / tram

SlimKQL / Hunting-Queries-Detection-Rules

OpenCTI-Platform / connectors

center-for-threat-informed-defense / security-stack-mappings

sbousseaden / PCAP-ATTACK

olafhartong / ATTACKdatamap