Alternatives and similar repositories for Cyber-Defence

Users that are interested in Cyber-Defence are comparing it to the libraries listed below

• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆370Updated 6 years ago
• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆476Updated 4 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆257Updated 5 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆288Updated 8 years ago
• praetorian-inc / purple-team-attack-automation
  Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
  ☆726Updated 5 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆390Updated 6 years ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆259Updated 2 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆271Updated last year
• beahunt3r / Windows-Hunting
  ☆348Updated 4 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆211Updated 5 years ago
• JPCERTCC / ToolAnalysisResultSheet
  Tool Analysis Result Sheet
  ☆356Updated 8 years ago
• endgameinc / RTA
  ☆1,091Updated 6 years ago
• Elemental-attack / Elemental
  Elemental - An ATT&CK Threat Library
  ☆320Updated 3 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆237Updated 8 months ago
• mandiant / flare-wmi
  ☆427Updated 2 years ago
• bhdresh / Dejavu
  DejaVU - Open Source Deception Framework
  ☆423Updated 4 months ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆352Updated 5 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆448Updated 6 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆471Updated 6 years ago
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆759Updated last year
• cylance / CyBot
  Open Source Threat Intelligence Chat Bot
  ☆322Updated 5 years ago
• felixweyne / imaginaryC2
  Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …
  ☆447Updated 3 years ago
• SekoiaLab / Fastir_Collector
  ☆519Updated 4 years ago
• JavelinNetworks / HoneypotBuster
  ☆284Updated 8 years ago
• nshalabi / ATTACK-Tools
  Utilities for MITRE™ ATT&CK
  ☆1,045Updated 3 months ago
• MalwareArchaeology / ATTACK
  MITRE ATT&CK Windows Logging Cheat Sheets
  ☆346Updated 7 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆333Updated 9 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆464Updated 4 months ago
• mandiant / ShimCacheParser
  ☆280Updated 2 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆550Updated 2 years ago