Alternatives and similar repositories for rcATT:

Users that are interested in rcATT are comparing it to the libraries listed below

• fhightower / ioc-finder
  Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security relate…
  ☆165Updated last year
• li-zhenyuan / Knowledge-enhanced-Attack-Graph
  AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports
  ☆148Updated last year
• aptnotes / tools
  Tools to interact with APTnotes reporting/index.
  ☆99Updated 4 years ago
• mitre-attack / tram
  Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.
  ☆348Updated 3 years ago
• ksatvat / EXTRACTOR
  ☆75Updated last year
• unfetter-discover / unfetter-insight
  Unfetter Insight performs natural language processing and analysis for text data to determine and convert to CTI Stix data automatically.
  ☆19Updated 6 years ago
• KaiLiu-Leo / TTPDrill-0.5
  TTPDrill focuses on developing automated and context-aware analytics of cyber threat intelligence to accurately learn attack patterns (TT…
  ☆26Updated 4 years ago
• oasis-open / cti-stix-visualization
  OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
  ☆146Updated 2 months ago
• ALFA-group / BRON
  "Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyb…
  ☆92Updated 7 months ago
• FiveDirections / OpTC-data
  ☆100Updated 4 years ago
• ehsanaghaei / SecureBERT
  SecureBERT is a domain-specific language model to represent cybersecurity textual data.
  ☆83Updated 7 months ago
• center-for-threat-informed-defense / attack_to_cve
  🚨ATTENTION🚨 The CVE mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as…
  ☆234Updated 10 months ago
• Mhackiori / STIXnet
  A Novel and Modular Solution for Extracting All STIX Objects in CTI Reports
  ☆24Updated last year
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆69Updated 4 years ago
• jackaduma / ThreatReportExtractor
  Extracting Attack Behavior from Threat Reports
  ☆76Updated last year
• center-for-threat-informed-defense / tram
  TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE AT…
  ☆471Updated 3 months ago
• aptresearch / datasets
  ☆21Updated 3 years ago
• IS5882 / Open-CyKG
  ☆80Updated 2 years ago
• sophos / yaraml_rules
  Security ML models encoded as Yara rules
  ☆213Updated last year
• OTRF / detection-hackathon-apt29
  Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets
  ☆134Updated 4 years ago
• cmu-sei / cyobstract
  A tool to extract structured cyber information from incident reports.
  ☆80Updated 6 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆100Updated 3 years ago
• aiforsec / CyNER
  Cyber Security concepts extracted from unstructured threat intelligence reports using Named Entity Recognition
  ☆97Updated last year
• stratosphereips / zeek_anomaly_detector
  A completely automated anomaly detector Zeek network flows files (conn.log).
  ☆75Updated 6 months ago
• aiforsec22 / IEEEEuroSP23
  ☆25Updated last year
• InQuest / iocextract
  Defanged Indicator of Compromise (IOC) Extractor.
  ☆518Updated 5 months ago
• armbues / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆433Updated last year
• basel-a / SMET
  SMET : Semantic Mapping of CVE to ATT&CK and its Application to Cybersecurity
  ☆44Updated 5 months ago
• Kart1keya / Hachi
  This tool maps a file's behavior on MITRE ATT&CK matrix.
  ☆57Updated 4 years ago
• vmapps / attack2neo
  Import Mitre Att&ck into Neo4j database
  ☆34Updated 2 years ago