TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structured intelligence. Using the DeepSeek LLM, it extracts MITRE ATT&CK techniques, IOCs, threat actors, and generates contextual summaries.
☆58Jun 21, 2025Updated last year
Alternatives and similar repositories for TTPMapper
Users that are interested in TTPMapper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆22Apr 10, 2025Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated last month
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆47Jan 22, 2025Updated last year
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆45Jun 28, 2025Updated last year
- All the principles of the AI modular structure that generates malicious code fragments sold on the dark web☆71Apr 30, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- This is a repository to experiment with MCP for security☆51Jan 22, 2025Updated last year
- AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK☆235Jul 18, 2026Updated 3 weeks ago
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 8 months ago
- ☆11Jun 12, 2023Updated 3 years ago
- Mappings Editor is an interactive, web-based tool created by the Center for Threat-Informed Defense for creating mappings of security cap…☆16May 15, 2026Updated 2 months ago
- Follow the trail of breadcrumbs left behind by any user on a computer or mounted disk image.☆31Aug 28, 2025Updated 11 months ago
- VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data …☆158Dec 26, 2025Updated 7 months ago
- Turn a supported list of filetypes (e.g. .docx) into a markdown structured text file. Also optionally defangs indicators and extract text…☆12Aug 3, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- A CTI program management and production platform built around MISP☆33Updated this week
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆233Mar 28, 2025Updated last year
- This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their…☆29Nov 20, 2024Updated last year
- Exfiltrate data over audio output from remote desktop sessions - Covert channel PoC☆67Dec 2, 2024Updated last year
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated 11 months ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- sl0ppy-PrivescTaskCreator.ps1☆41Oct 8, 2025Updated 10 months ago
- A malicious KeePass plugin to exfiltrate the master key.☆17Oct 25, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Attack/Defense services for the CyberChallenge.IT 2024 National Competition @ Turin, Italy☆13Jul 18, 2024Updated 2 years ago
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆151Sep 21, 2024Updated last year
- Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via PyMC…☆47Dec 10, 2025Updated 8 months ago
- Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.☆84Jul 31, 2026Updated 2 weeks ago
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆39Jul 20, 2026Updated 3 weeks ago
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆38Mar 24, 2025Updated last year
- Payload Generation Workflow☆41Jul 18, 2025Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 9 months ago
- Educational reverse shell command generator for authorized lab testing.☆19Jan 30, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Single source of truth for GenAI and agentic AI security incidents, mapped to OWASP LLM Top 10, OWASP Agentic Top 10 (ASI), NIST AI RMF, …☆28Aug 1, 2026Updated last week
- A simplistic but fast Web Content Scanner written in nodejs.☆11Jun 5, 2025Updated last year
- Hybrid Forensic Artifact Parser — Windows Registry + macOS artifacts☆20Jun 3, 2026Updated 2 months ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated 10 months ago
- A series of functions to parse Teamviewer logs to answer specific questions☆10Jul 17, 2022Updated 4 years ago
- Code Repository for: AIRTBench: Measuring Autonomous AI Red Teaming Capabilities in Language Models☆105Apr 26, 2026Updated 3 months ago
- KQL queries for Microsoft Defender Advanced Hunting organized around the TTPs of the MITRE ATT&CK framework.☆23Nov 7, 2024Updated last year