mitre · GitHub Topics

redcanaryco / atomic-red-team

Atomic Red Team是一个开源测试框架，可以测试用户的威胁检测能力

mitre mitre-attack

C 10.66 k

19 小时前

mitre / caldera

Automated Adversary Emulation Platform

adversary-emulation caldera security-automation red-team mitre mitre-attack security-testing mitre-corporation Cybersecurity Hacking

Python 6.2 k

1 个月前

OTRF / ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

threat-hunting sysmon hunting-campaigns hypothesis hunting dfir hunter mitre-attack-db mitre

Python 4.24 k

1 年前

rabbitstack / fibratus

Adversary tradecraft detection, protection, and hunting

Windows windows-kernel Instrumentation Python Go 安全 edr adversary blueteam etw mitre

Go 2.35 k

1 天前

opencve / opencve

Open-source CVE monitoring and alerting platform

Common Vulnerabilities and Exposures (CVE)vulnerabilities 安全 nvd Python Django mitre Cybersecurity vulnerability-management

Python 2.03 k

1 个月前

austinsonger / Incident-Playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

Cybersecurity playbook cybersecurity-playbook incident-response incident-management incidents mitre-attack mitre contributions-welcome contributors-welcome catalog

1.47 k

1 年前

nshalabi / ATTACK-Tools

Utilities for MITRE™ ATT&CK

mitre-attack mitre adversary-emulation redteaming redteam

HTML 1.03 k

1 年前

infosecB / awesome-detection-engineering

#Awesome#Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying m...

detection-engineering splunk mitre Awesome Lists Cybersecurity threat-detection

991

2 个月前

vectra-ai-research / MAAD-AF

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

adversary-emulation Microsoft PowerShell 安全 cloud-security mitre red-team security-testing azuread microsoft365 microsoft-graph ttp

PowerShell 398

9 个月前

Cyb3rWard0g / Invoke-ATTACKAPI

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API

PowerShell mitre-attack-db mitre

PowerShell 369

6 年前

redcanaryco / chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

Linux mitre mitre-attack adversary-simulation elf 安全 security-testing

C 314

2 个月前

op7ic / EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

edr mitre 安全 incident-response

Batchfile 307

4 年前

mitre / caldera-ot

MITRE Caldera™ for OT Plugins & Capabilities

adversary-emulation bacnet caldera Cybersecurity mitre mitre-attack mitre-corporation modbus

212

7 个月前

Yamato-Security / hayabusa-rules

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

Windows dfir event log analysis sigma mitre attack

Python 182

4 天前

mitre / saf

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline se...

mitre-corporation compliance 安全 security-automation devsecops JSON mitre

TypeScript 153

4 天前