Alternatives and similar repositories for dbir

Users that are interested in dbir are comparing it to the libraries listed below

• center-for-threat-informed-defense / public-resources
  Collection of resources related to the Center for Threat-Informed Defense
  ☆76Updated last year
• pan-unit42 / playbook_viewer
  ☆175Updated last year
• bambenek / research
  ☆100Updated 4 years ago
• d3fend / d3fend
  Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology
  ☆87Updated 3 months ago
• mitre-attack / attack-datasources
  This content is analysis and research of the data sources currently listed in ATT&CK.
  ☆411Updated 2 years ago
• mitre / cascade-server
  CASCADE Server
  ☆272Updated 2 years ago
• center-for-threat-informed-defense / attack-workbench-rest-api
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆49Updated this week
• HASecuritySolutions / Presentations
  ☆133Updated last year
• swimlane / soc-faker
  A python package for use in generating fake data for SOC and security automation.
  ☆170Updated 7 months ago
• center-for-threat-informed-defense / attack_to_veris
  🚨ATTENTION🚨 The VERIS mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here …
  ☆72Updated last year
• sfakiana / SANS-CTI-Summit-2021
  Resources for SANS CTI Summit 2021 presentation
  ☆103Updated last year
• mitre / attack-navigator
  Web app that provides basic navigation and annotation of ATT&CK matrices
  ☆58Updated 5 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆75Updated 5 years ago
• center-for-threat-informed-defense / caldera_pathfinder
  Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translatin…
  ☆126Updated 7 months ago
• center-for-threat-informed-defense / attack-workbench-frontend
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆389Updated this week
• k-bailey / detection-engineering-maturity-matrix
  ☆98Updated 3 years ago
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆249Updated 4 years ago
• center-for-threat-informed-defense / attack_to_cve
  🚨ATTENTION🚨 The CVE mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as…
  ☆242Updated last year
• carlota / showmethemoney
  These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…
  ☆73Updated 3 weeks ago
• vz-risk / veris
  Vocabulary for Event Recording and Incident Sharing (VERIS)
  ☆622Updated 7 months ago
• siriussecurity / mitre-attack-mapping
  Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.
  ☆58Updated 5 years ago
• vz-risk / VCDB
  VERIS Community Database
  ☆643Updated last week
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 5 years ago
• OTRF / SimuLand
  Cloud Templates and scripts to deploy mordor environments
  ☆129Updated 4 years ago
• JPMinty / MindMaps
  Collection of created MindMaps
  ☆151Updated last year
• cisagov / cyber.dhs.gov
  A site for CISA directives
  ☆166Updated last year
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆240Updated 7 months ago
• TactiKoolSec / OTHF
  Open Threat Hunting Framework
  ☆121Updated 2 years ago
• oasis-open / cti-documentation
  OASIS TC Open Repository: GitHub Pages site for STIX and TAXII
  ☆104Updated 2 weeks ago
• Insider-Threat / Insider-Threat
  Creating a resource to help build and manage an Insider Threat program.
  ☆99Updated 9 months ago