Alternatives and similar repositories for Cyber-Defence

Users that are interested in Cyber-Defence are comparing it to the libraries listed below

• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆370Updated 6 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆257Updated 5 years ago
• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆476Updated 4 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆290Updated 8 years ago
• praetorian-inc / purple-team-attack-automation
  Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
  ☆727Updated 5 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆391Updated 6 years ago
• beahunt3r / Windows-Hunting
  ☆348Updated 4 years ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆259Updated 2 years ago
• Elemental-attack / Elemental
  Elemental - An ATT&CK Threat Library
  ☆320Updated 3 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆237Updated 9 months ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆271Updated last year
• bhdresh / Dejavu
  DejaVU - Open Source Deception Framework
  ☆425Updated 5 months ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆448Updated 6 years ago
• endgameinc / RTA
  ☆1,093Updated 6 years ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆355Updated 5 years ago
• mandiant / flare-wmi
  ☆431Updated 2 years ago
• JPCERTCC / ToolAnalysisResultSheet
  Tool Analysis Result Sheet
  ☆356Updated 8 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆211Updated 5 years ago
• SekoiaLab / Fastir_Collector
  ☆518Updated 4 years ago
• mandiant / ShimCacheParser
  ☆280Updated 2 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆464Updated 5 months ago
• cylance / CyBot
  Open Source Threat Intelligence Chat Bot
  ☆322Updated 5 years ago
• JavelinNetworks / HoneypotBuster
  ☆283Updated 8 years ago
• felixweyne / imaginaryC2
  Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …
  ☆447Updated 3 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆388Updated this week
• GoFetchAD / GoFetch
  GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
  ☆633Updated 8 years ago
• diogo-fernan / ir-rescue
  A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
  ☆484Updated 4 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆243Updated 7 years ago
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆760Updated last year
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆218Updated 5 years ago