CERTCC / SSVCLinks
Stakeholder-Specific Vulnerability Categorization
☆163Updated this week
Alternatives and similar repositories for SSVC
Users that are interested in SSVC are comparing it to the libraries listed below
Sorting:
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).☆78Updated last year
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆209Updated this week
- CISA CSAF Security Advisories☆84Updated last week
- ☆47Updated this week
- Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…☆73Updated this week
- ☆121Updated last week
- The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…☆162Updated this week
- ☆16Updated 2 years ago
- Advisories, guidance, best practice documents and more issued by members of the EU CSIRTs network, a network composed of EU Member States…☆90Updated last week
- Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology☆86Updated last month
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆191Updated last week
- Documentation on the Cyber Defense Matrix☆24Updated 2 years ago
- OWASP Foundation Web Respository☆31Updated 2 years ago
- Dorothy is a tool to test security monitoring and detection for Okta environments☆186Updated last year
- Core model including reused documentation☆98Updated 3 months ago
- Global Security Database Tools☆44Updated last year
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆77Updated 2 weeks ago
- VulnCheck's official command line tool☆139Updated 2 weeks ago
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆176Updated 9 months ago
- Autoconfigured ELK Stack That Contains All EPSS and NVD CVE Data☆52Updated 2 months ago
- ☆48Updated 2 years ago
- 🖇️ STRIDE vs. ASVS equivalence table☆76Updated last year
- Exploit Prediction Scoring System (EPSS)☆30Updated 3 years ago
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆201Updated 4 months ago
- ☆87Updated 10 months ago
- OASIS TC Open Repository: A GitHub repository for management of non-normative information about the work of the CSAF Technical Committee,…☆21Updated last week
- Repository for the Open Information Security Risk Universe☆64Updated 3 years ago
- A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain☆95Updated 7 months ago
- Controls Assessment Specification☆70Updated 5 months ago
- ☆19Updated last month