mitre-attack

There are 58 repositories under mitre-attack topic.

kubescape
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
best-practice devops kubernetes mitre-attack nsa security vulnerability-detection
Language:Go 10249
redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
mitre mitre-attack
Language:C 9805
RedTeam-Tools
A-poc / RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
cheatsheet cybersecurity enumeration hacking linux mitre-attack payload penetration-testing pentest pentest-tools red-team red-team-tools redteam resources security-tools tools windows
6031
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing
Language:Python 5663
olafhartong / sysmon-modular
A repository of sysmon configuration modules
dfir mitre-attack modular security-tools sysmon threat-hunting
Language:PowerShell 2664
sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
dataset detection-engineering dfir evtx mitre-attack threat-hunting windows-security winlogbeat
Language:HTML 2252
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation
Language:TypeScript 2007
Certified-Kubernetes-Security-Specialist
walidshaari / Certified-Kubernetes-Security-Specialist
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
apparmor certification cks ckss exam-objectives falco kernel-hardening kube-bench kube-hunter kubernetes kubernetes-security mitre-attack open-policy-agent os-footprint pod pod-security-policy policy seccomp security trivy
Language:AGS Script 1997
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
adversary-emulation aws aws-security azure-security cloud-native-security cloud-security detection-engineering gcp-security kubernetes-security mitre-attack purple-team security threat-detection
Language:Go 1830
Shuffle
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
automation cybersecurity openapi shuffle security workflow-editor integrations mitre-attack agplv3 discord soar hacktoberfest security-orchestrator orchestration security-automation orchestrator orchestrator-gui
Language:Shell 1750
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
adversary-emulation adversary-emulation-plans ctid cyber-threat-intelligence cybersecurity mitre-attack red-team threat-informed-defense
Language:C 1725
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1658
Incident-Playbook
austinsonger / Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
cybersecurity playbook cybersecurity-playbook incident-response incident-management incidents mitre-attack mitre contributions-welcome contributors-welcome catalog
1405
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
cert csirt detection soc siem sirp soa soar tip architecture incident-response management mitre-attack purpleteam risk-management ttp
1243
BLUESPAWN
ION28 / BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
active-defense anti-virus blue-team edr mitre-attack security security-tools threat-hunting windows
Language:C++ 1239
olafhartong / ThreatHunting
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
dfir mitre-attack splunk threat-hunting
1138
sentinel-attack
netevert / sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
azure azure-sentinel blue-team cybersecurity detection kql logging mitre-attack security-tools siem sysmon sysmon-config terraform-azure threat-hunting workbooks
Language:HCL 1061
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 1012
atomic-threat-coverage
atc-project / atomic-threat-coverage
Actionable analytics designed to combat threats
incidentresponse mitre-attack threat-model threatdetection threathunting threatintelligence
Language:Python 972
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 919
DataDog / KubeHound
Tool for building Kubernetes attack paths
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 785
bfuzzy / auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
attack-detection auditd linux mitre-attack threat-hunting
778
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 775
atc-react
atc-project / atc-react
A knowledge base of actionable Incident Response techniques
incident-response response-playbooks dfir thehive mitre-attack amitt
Language:Python 614
mitre-attack / attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:Python 582
center-for-threat-informed-defense / attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
ctid cyber-threat-intelligence cybersecurity mitre-attack threat-informed-defense
Language:TypeScript 556
mdecrevoisier / EVTX-to-MITRE-Attack
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
mitre-attack siem evtx threat-hunting redteam
528
mitre-attack / attack-website
MITRE ATT&CK Website
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation
Language:HTML 490
center-for-threat-informed-defense / attack-control-framework-mappings
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cti ctid cyber-threat-intelligence cybersecurity mitre-attack nist800-53 risk-management security-controls threat-informed-defense
Language:Python 485
mitre-attack / mitreattack-python
A python module for working with ATT&CK
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:Python 470
center-for-threat-informed-defense / tram
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
ctid cyber-threat-intelligence cybersecurity mitre-attack threat-informed-defense
Language:Jupyter Notebook 453
OpenCTI-Platform / connectors
OpenCTI Connectors
cybersecurity cti threat-intelligence misp mitre-attack
Language:Python 382
center-for-threat-informed-defense / security-stack-mappings
🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
aws azure cloud gcp mitre-attack security
Language:Python 380
olafhartong / ATTACKdatamap
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
dfir mitre-attack threat-hunting threat-detection siem
Language:PowerShell 350
sbousseaden / PCAP-ATTACK
PCAP Samples for Different Post Exploitation Techniques
threat-hunting pcap-files pcapng detection mitre-attack
344
Elemental-attack / Elemental
Elemental - An ATT&CK Threat Library
atomicredteam attack-defense attack-detection mitre-attack sigma-rules threat-intelligence
Language:HTML 315

mitre-attack

kubescape / kubescape

redcanaryco / atomic-red-team

A-poc / RedTeam-Tools

mitre / caldera

olafhartong / sysmon-modular

sbousseaden / EVTX-ATTACK-SAMPLES

mitre-attack / attack-navigator

walidshaari / Certified-Kubernetes-Security-Specialist

DataDog / stratus-red-team

Shuffle / Shuffle

center-for-threat-informed-defense / adversary_emulation_library

mikeroyal / Digital-Forensics-Guide

austinsonger / Incident-Playbook

cyb3rxp / awesome-soc

ION28 / BLUESPAWN

olafhartong / ThreatHunting

netevert / sentinel-attack

nshalabi / ATTACK-Tools

atc-project / atomic-threat-coverage

mikeroyal / Open-Source-Security-Guide

DataDog / KubeHound

bfuzzy / auditd-attack

ion-storm / sysmon-config

atc-project / atc-react

mitre-attack / attack-scripts

center-for-threat-informed-defense / attack-flow

mdecrevoisier / EVTX-to-MITRE-Attack

mitre-attack / attack-website

center-for-threat-informed-defense / attack-control-framework-mappings

mitre-attack / mitreattack-python

center-for-threat-informed-defense / tram

OpenCTI-Platform / connectors

center-for-threat-informed-defense / security-stack-mappings

olafhartong / ATTACKdatamap

sbousseaden / PCAP-ATTACK

Elemental-attack / Elemental