mitre-attack

There are 57 repositories under mitre-attack topic.

kubescape
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
best-practice devops kubernetes mitre-attack nsa security vulnerability-detection
Language:Go 10157
redcanaryco / atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
mitre mitre-attack
Language:C 9620
RedTeam-Tools
A-poc / RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
cheatsheet cybersecurity enumeration hacking linux mitre-attack payload penetration-testing pentest pentest-tools red-team red-team-tools redteam resources security-tools tools windows
5863
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera security-automation red-team mitre mitre-attack security-testing mitre-corporation cybersecurity hacking
Language:Python 5537
olafhartong / sysmon-modular
A repository of sysmon configuration modules
dfir mitre-attack modular security-tools sysmon threat-hunting
Language:PowerShell 2634
sbousseaden / EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
threat-hunting evtx windows-security mitre-attack detection-engineering dataset winlogbeat dfir
Language:HTML 2211
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
cti cyber-threat-intelligence mitre-attack mitre-corporation cybersecurity
Language:TypeScript 1983
Certified-Kubernetes-Security-Specialist
walidshaari / Certified-Kubernetes-Security-Specialist
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
apparmor certification cks ckss exam-objectives falco kernel-hardening kube-bench kube-hunter kubernetes kubernetes-security mitre-attack open-policy-agent os-footprint pod pod-security-policy policy seccomp security trivy
Language:AGS Script 1981
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection security aws-security azure-security kubernetes-security gcp-security
Language:Go 1781
Shuffle
Shuffle / Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
automation cybersecurity openapi shuffle security workflow-editor integrations mitre-attack agplv3 discord soar hacktoberfest security-orchestrator orchestration security-automation orchestrator orchestrator-gui
Language:Shell 1699
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
adversary-emulation adversary-emulation-plans ctid cyber-threat-intelligence cybersecurity mitre-attack red-team threat-informed-defense
Language:C 1678
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1613
Incident-Playbook
austinsonger / Incident-Playbook
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
cybersecurity playbook cybersecurity-playbook incident-response incident-management incidents mitre-attack mitre contributions-welcome contributors-welcome catalog
1398
BLUESPAWN
ION28 / BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
active-defense windows security security-tools blue-team mitre-attack anti-virus edr threat-hunting
Language:C++ 1232
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
cert csirt detection soc siem sirp soa soar tip architecture incident-response management mitre-attack purpleteam risk-management ttp
1182
olafhartong / ThreatHunting
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
dfir mitre-attack splunk threat-hunting
1129
sentinel-attack
netevert / sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
azure azure-sentinel blue-team cybersecurity detection kql logging mitre-attack security-tools siem sysmon sysmon-config terraform-azure threat-hunting workbooks
Language:HCL 1053
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 1009
atomic-threat-coverage
atc-project / atomic-threat-coverage
Actionable analytics designed to combat threats
mitre-attack threat-model threathunting incidentresponse threatintelligence threatdetection
Language:Python 966
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 899
bfuzzy / auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
attack-detection auditd linux mitre-attack threat-hunting
779
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 767
DataDog / KubeHound
Tool for building Kubernetes attack paths
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 750
atc-react
atc-project / atc-react
A knowledge base of actionable Incident Response techniques
incident-response response-playbooks dfir thehive mitre-attack amitt
Language:Python 605
mitre-attack / attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
cybersecurity cyber-threat-intelligence mitre-corporation cti mitre-attack python
Language:Python 582
center-for-threat-informed-defense / attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
cybersecurity ctid mitre-attack cyber-threat-intelligence threat-informed-defense
Language:TypeScript 545
mdecrevoisier / EVTX-to-MITRE-Attack
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
mitre-attack siem evtx threat-hunting redteam
502
mitre-attack / attack-website
MITRE ATT&CK Website
cybersecurity mitre-corporation cyber-threat-intelligence mitre-attack cti
Language:HTML 487
center-for-threat-informed-defense / attack-control-framework-mappings
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cti cyber-threat-intelligence mitre-attack cybersecurity nist800-53 security-controls ctid threat-informed-defense risk-management
Language:Python 481
mitre-attack / mitreattack-python
A python module for working with ATT&CK
cybersecurity cyber-threat-intelligence mitre-corporation cti mitre-attack python
Language:Python 446
center-for-threat-informed-defense / tram
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
ctid cyber-threat-intelligence cybersecurity mitre-attack threat-informed-defense
Language:Jupyter Notebook 434
center-for-threat-informed-defense / security-stack-mappings
🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
mitre-attack cloud aws azure security gcp
Language:Python 379
OpenCTI-Platform / connectors
OpenCTI Connectors
cybersecurity cti threat-intelligence misp mitre-attack
Language:Python 367
olafhartong / ATTACKdatamap
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
dfir mitre-attack threat-hunting threat-detection siem
Language:PowerShell 348
sbousseaden / PCAP-ATTACK
PCAP Samples for Different Post Exploitation Techniques
detection mitre-attack pcap-files pcapng threat-hunting
342
Elemental-attack / Elemental
Elemental - An ATT&CK Threat Library
sigma-rules mitre-attack atomicredteam attack-defense attack-detection threat-intelligence
Language:HTML 313

mitre-attack

kubescape / kubescape

redcanaryco / atomic-red-team

A-poc / RedTeam-Tools

mitre / caldera

olafhartong / sysmon-modular

sbousseaden / EVTX-ATTACK-SAMPLES

mitre-attack / attack-navigator

walidshaari / Certified-Kubernetes-Security-Specialist

DataDog / stratus-red-team

Shuffle / Shuffle

center-for-threat-informed-defense / adversary_emulation_library

mikeroyal / Digital-Forensics-Guide

austinsonger / Incident-Playbook

ION28 / BLUESPAWN

cyb3rxp / awesome-soc

olafhartong / ThreatHunting

netevert / sentinel-attack

nshalabi / ATTACK-Tools

atc-project / atomic-threat-coverage

mikeroyal / Open-Source-Security-Guide

bfuzzy / auditd-attack

ion-storm / sysmon-config

DataDog / KubeHound

atc-project / atc-react

mitre-attack / attack-scripts

center-for-threat-informed-defense / attack-flow

mdecrevoisier / EVTX-to-MITRE-Attack

mitre-attack / attack-website

center-for-threat-informed-defense / attack-control-framework-mappings

mitre-attack / mitreattack-python

center-for-threat-informed-defense / tram

center-for-threat-informed-defense / security-stack-mappings

OpenCTI-Platform / connectors

olafhartong / ATTACKdatamap

sbousseaden / PCAP-ATTACK

Elemental-attack / Elemental