praetorian-inc / purple-team-attack-automation
Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs
☆721Updated 5 years ago
Alternatives and similar repositories for purple-team-attack-automation:
Users that are interested in purple-team-attack-automation are comparing it to the libraries listed below
- ☆1,067Updated 5 years ago
- A curated list of awesome resources related to Mitre ATT&CK™ Framework☆595Updated 5 years ago
- An information security preparedness tool to do adversarial simulation.☆1,117Updated 5 years ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,145Updated last year
- A collection of red team and adversary emulation resources developed and released by MITRE.☆497Updated 3 years ago
- Tool Analysis Result Sheet☆347Updated 7 years ago
- A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework☆351Updated 4 years ago
- Utilities for MITRE™ ATT&CK☆1,021Updated 9 months ago
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆562Updated 3 months ago
- Actionable analytics designed to combat threats☆982Updated 2 years ago
- Virtual Machine for Adversary Emulation and Threat Hunting☆1,263Updated last month
- Detecting ATT&CK techniques & tactics for Linux☆258Updated 4 years ago
- Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries☆446Updated 3 years ago
- Information released publicly by NCC Group's Cyber Incident Response Team☆477Updated 3 years ago
- A Python package to interact with the Mitre ATT&CK Framework☆475Updated last year
- Elemental - An ATT&CK Threat Library☆318Updated 2 years ago
- Re-play Security Events☆1,628Updated last year
- A PowerShell script to interact with the MITRE ATT&CK Framework via its own API☆367Updated 6 years ago
- CASCADE Server☆266Updated 2 years ago
- Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.☆348Updated 3 years ago
- Open Source Security Events Metadata (OSSEM)☆1,259Updated 2 years ago
- Data from a BRAWL Automated Adversary Emulation Exercise☆204Updated 4 years ago
- A set of Zeek scripts to detect ATT&CK techniques.☆580Updated 8 months ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆790Updated last year
- DFIRTrack - The Incident Response Tracking Application☆492Updated 6 months ago
- Scripts and a (future) library to improve users' interactions with the ATT&CK content☆585Updated last year
- Deception based detection techniques mapped to the MITRE’s ATT&CK framework☆289Updated 7 years ago
- DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.☆552Updated 3 years ago
- DejaVU - Open Source Deception Framework☆409Updated 2 years ago
- A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.☆456Updated 4 months ago