Intelligence around common attacker behaviors (MITRE ATT&CK TTPs), in the form of ATT&CK Navigator "layer" json files.
☆37Aug 12, 2022Updated 4 years ago
Alternatives and similar repositories for Cyber-Adversary-Heatmaps
Users that are interested in Cyber-Adversary-Heatmaps are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Merge of two major cyber adversary datasets, MITRE ATT&CK and ETDA/ThaiCERT Threat Actor Cards, enabling victim/motivation-adversary-tech…☆55Jul 31, 2022Updated 4 years ago
- Generate portable TTP intelligence from a web-based report☆31Oct 24, 2022Updated 4 years ago
- Pritunl Access Control System☆11Jul 28, 2026Updated 3 months ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆142Feb 25, 2024Updated 2 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆14Apr 18, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Firepit - STIX Columnar Storage☆17Jun 5, 2024Updated 2 years ago
- A Real-time Event Correlation platform☆16Jan 30, 2017Updated 9 years ago
- Attack Tool Timing and Reporting - Structured Attack Logging Format☆23Nov 4, 2022Updated 4 years ago
- ☆28Jun 2, 2023Updated 3 years ago
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆69Sep 29, 2026Updated last month
- Tools related to work with Attack Flow (https://github.com/center-for-threat-informed-defense/attack-flow)☆45Jun 6, 2022Updated 4 years ago
- Virtual machines that are set up with a variety of known vulnerabilities.☆17Mar 1, 2022Updated 4 years ago
- YARA, SIGMA, SNORT Rules based on Malware Analysis☆17Apr 23, 2025Updated last year
- A tool to automate memory dump processing using Volatility, including optional Splunk integration.☆11Jul 29, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- The CWE Calculator enables software development teams to score and prioritize discovered weaknesses empirically based on data in the Nati…☆14Jul 16, 2024Updated 2 years ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated last year
- Collaborative, web-based case management for incident response☆26Jan 23, 2024Updated 2 years ago
- simple webapp for converting sigma rules into siem queries using the pySigma library☆50Sep 1, 2023Updated 3 years ago
- Common Exercise Format - CEXF☆11Aug 15, 2024Updated 2 years ago
- ☆21Oct 30, 2020Updated 6 years ago
- This repository regroups the Yara Rules for the Unprotect Project☆26Nov 19, 2020Updated 5 years ago
- A web API for various cyber threat intelligence frameworks, including MITRE ATT&CK, CWE, ATLAS...☆23Oct 26, 2026Updated last week
- SDK for Python (devo-sdk). Send events to Devo and make queries.☆27Sep 25, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆82Apr 27, 2024Updated 2 years ago
- A vSphere deployment of GOADv2 BETA Testing (v0.1)☆26Dec 22, 2023Updated 2 years ago
- ATT&CK Remote Threat Hunting Incident Response☆203Dec 8, 2024Updated last year
- OpenCSPM Community Controls☆14May 18, 2021Updated 5 years ago
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆54Jul 20, 2023Updated 3 years ago
- UI based on react awesome query builder to visualize rule building on rule engine☆29Apr 29, 2022Updated 4 years ago
- OSSEM Detection Model☆182Oct 11, 2022Updated 4 years ago
- APT hub, It help's research to collect information and data on the latest APT activities. It collects data on APT profiles, IOCs(1 yr), a…☆56Mar 11, 2025Updated last year
- Create a graphology Graph from cypher queries☆12Nov 1, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.☆27Dec 14, 2021Updated 4 years ago
- Learn how to get more out of publicly available threat reports to help improve the security posture of your organization! TLP: White Thre…☆15Jun 5, 2023Updated 3 years ago
- YAIDS - Yara-Based IDS - Yara as an Intrusion Detection System / Yet Another Intrusion Detection System - An Intrusion Detection System (…☆27Oct 20, 2022Updated 4 years ago
- Continuous External Attack Surface Discovery & Vulnerability Scanning Across AWS Organizations — Python CDK☆15Mar 6, 2026Updated 8 months ago
- Tool to download, install, and run macOS capable command & control servers (i.e., C2s with macOS payloads/clients) as docker containers f…☆19Dec 29, 2020Updated 5 years ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Elemental - An ATT&CK Threat Library☆319Dec 8, 2022Updated 3 years ago