Alternatives and similar repositories for dbir

Users that are interested in dbir are comparing it to the libraries listed below

• mitre-attack / attack-datasources
  This content is analysis and research of the data sources currently listed in ATT&CK.
  ☆411Updated last year
• center-for-threat-informed-defense / public-resources
  Collection of resources related to the Center for Threat-Informed Defense
  ☆76Updated last year
• swimlane / soc-faker
  A python package for use in generating fake data for SOC and security automation.
  ☆170Updated 5 months ago
• center-for-threat-informed-defense / attack-workbench-frontend
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆370Updated this week
• vz-risk / veris
  Vocabulary for Event Recording and Incident Sharing (VERIS)
  ☆610Updated 4 months ago
• vz-risk / VCDB
  VERIS Community Database
  ☆637Updated 6 months ago
• pan-unit42 / playbook_viewer
  ☆173Updated last year
• mitre / cascade-server
  CASCADE Server
  ☆272Updated 2 years ago
• center-for-threat-informed-defense / attack-workbench-rest-api
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆48Updated last week
• center-for-threat-informed-defense / insider-threat-ttp-kb
  The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…
  ☆143Updated last month
• mitre / attack-navigator
  Web app that provides basic navigation and annotation of ATT&CK matrices
  ☆58Updated 5 years ago
• carlota / showmethemoney
  These are files that a new CISO or someone introducing security to an organization can leverage to bridge the gap between security and th…
  ☆72Updated 9 months ago
• HASecuritySolutions / Presentations
  ☆133Updated last year
• center-for-threat-informed-defense / attack_to_veris
  🚨ATTENTION🚨 The VERIS mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here …
  ☆72Updated last year
• center-for-threat-informed-defense / caldera_pathfinder
  Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translatin…
  ☆126Updated 4 months ago
• JPMinty / MindMaps
  Collection of created MindMaps
  ☆150Updated last year
• elastic / dorothy
  Dorothy is a tool to test security monitoring and detection for Okta environments
  ☆184Updated last year
• k-bailey / detection-engineering-maturity-matrix
  ☆96Updated 2 years ago
• d3fend / d3fend
  Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology
  ☆86Updated last week
• Insider-Threat / Insider-Threat
  Creating a resource to help build and manage an Insider Threat program.
  ☆71Updated 6 months ago
• cisagov / cyber.dhs.gov
  A site for CISA directives
  ☆164Updated last year
• sfakiana / SANS-CTI-Summit-2021
  Resources for SANS CTI Summit 2021 presentation
  ☆103Updated last year
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆223Updated 4 months ago
• center-for-threat-informed-defense / attack-control-framework-mappings
  🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept…
  ☆494Updated last year
• bambenek / research
  ☆101Updated 4 years ago
• threat-hunting / awesome-threat-intelligence
  A curated list of Awesome Threat Intelligence resources
  ☆47Updated 7 years ago
• opencybersecurityalliance / stix-shifter
  This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return resul…
  ☆248Updated 3 weeks ago
• curated-intel / Log4Shell-IOCs
  A collection of intelligence about Log4Shell and its exploitation activity.
  ☆183Updated 3 years ago
• sublime-security / sublime-rules
  Sublime rules for email attack detection, prevention, and threat hunting.
  ☆316Updated this week
• sans-blue-team / sec530-wiki
  ☆55Updated 4 years ago