squ1ddy Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-control-framework-mappings

Security control framework mappings to MITRE ATT&CK provide a critically important resource for organizations to assess their security control coverage against real-world threats and provide a bridge for integrating ATT&CK-based threat information into the risk management process.

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

attack-workbench-frontend

An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository contains an Angular-based web application providing the user interface for the ATT&CK Workbench application.

categorized-adversary-ttps

Merge of two major cyber adversary datasets, MITRE ATT&CK and ETDA/ThaiCERT Threat Actor Cards, enabling victim/motivation-adversary-technique pivoting.

code-whisperer

collector

⚖Open Source Toolkit for Conducting Quantitative Risk Assessment Interviews

controlcompass.github.io

Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques

crewai

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

crewai-examples

cti-blueprints

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

cyber-adversary-heatmaps

Intelligence around common attacker behaviors (MITRE ATT&CK TTPs), in the form of ATT&CK Navigator "layer" json files.

cyber-threat-profiling

A library of reference materials, tools, and other resources to aid threat profiling, threat quantification, and cyber adversary defense

docxtosource

A multi-platform application that is able to generate dotnet source code based on OpenXml based documents.

evaluator

⚖Open Source Toolkit for Quantitative Risk Assessment

genai-stack

Langchain + Docker + Neo4j + Ollama

gpt-pilot

The first real AI developer

insider-threat-ttp-kb

The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.

nmap-scada

nse scripts for scada identification

opcua-exploit-framework

Advanced OPC-UA framework for vulnerability research & exploitation

ossem-dm

OSSEM Detection Model

program-engineer-gpt

Interact directly with code repositories in a chat or automate the development of your code based just on a project description

riskblox

RiskBloX is a Risk Management open-source tool with two offerings. An ATT&CK Assessment leveraging Mitre ATT&CK resources. A Business Impact Risk Assessment (BIRA) against Risk Areas to determine the impact to the business if a risk is realised.

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

threatsmanager

Threats Manager Platform Core libraries and SDK

top-attack-techniques

Top ATT&CK Techniques provides defenders with a systematic approach to prioritizing ATT&CK techniques.

tram

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

vectr

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

verispy

Python parser for VERIS json data