Alternatives and similar repositories for CyberBattleSim:

Users that are interested in CyberBattleSim are comparing it to the libraries listed below

• Azure / SimuLand
  Understand adversary tradecraft and improve detection strategies
  ☆707Updated 2 years ago
• mandiant / ThreatPursuit-VM
  Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysi…
  ☆1,257Updated last year
• cisagov / Sparrow
  Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 en…
  ☆1,417Updated 2 years ago
• cisagov / CHIRP
  A DFIR tool written in Python.
  ☆1,046Updated 3 years ago
• nsacyber / Mitigating-Web-Shells
  Guidance for mitigation web shells. #nsacyber
  ☆971Updated last year
• austinsonger / Incident-Playbook
  GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
  ☆1,443Updated 8 months ago
• microsoft / msticpy
  Microsoft Threat Intelligence Security Tools
  ☆1,830Updated last week
• rabobank-cdc / DeTTECT
  Detect Tactics, Techniques & Combat Threats
  ☆2,128Updated 2 months ago
• mandiant / sunburst_countermeasures
  ☆560Updated last year
• mandiant / red_team_tool_countermeasures
  ☆2,658Updated last year
• mitre-attack / attack-navigator
  Web app that provides basic navigation and annotation of ATT&CK matrices
  ☆2,091Updated 3 weeks ago
• cisagov / cset
  Cybersecurity Evaluation Tool
  ☆1,532Updated this week
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,142Updated 2 months ago
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,086Updated this week
• thalesgroup-cert / Watcher
  Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
  ☆899Updated this week
• sophos / SOREL-20M
  Sophos-ReversingLabs 20 million sample dataset
  ☆651Updated 3 years ago
• cisagov / RedEye
  RedEye is a visual analytic tool supporting Red & Blue Team operations
  ☆2,704Updated last year
• center-for-threat-informed-defense / adversary_emulation_library
  An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
  ☆1,844Updated last year
• mitre-attack / car
  Cyber Analytics Repository
  ☆929Updated 11 months ago
• netevert / sentinel-attack
  Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
  ☆1,065Updated 4 months ago
• OTRF / Security-Datasets
  Re-play Security Events
  ☆1,629Updated last year
• mdecrevoisier / Microsoft-eventlog-mindmap
  Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
  ☆1,066Updated 6 months ago
• mitre / cti
  Cyber Threat Intelligence Repository expressed in STIX 2.0
  ☆1,827Updated 4 months ago
• cisagov / log4j-scanner
  log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vul…
  ☆1,279Updated 2 years ago
• ukncsc / SME
  ☆436Updated 3 years ago
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆1,845Updated last week
• mitre-attack / mitreattack-python
  A python module for working with ATT&CK
  ☆531Updated 2 months ago
• OTRF / OSSEM
  Open Source Security Events Metadata (OSSEM)
  ☆1,260Updated 2 years ago
• MichaelKoczwara / Awesome-CobaltStrike-Defence
  Defences against Cobalt Strike
  ☆1,282Updated 2 years ago
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,510Updated 8 months ago