atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

atomic-threat-coverage

Automatically generated actionable analytics designed to combat threats based on MITRE's ATT&CK.

att-ck-cn

ATT&CK实操

attack

MITRE ATT&CK Windows Logging Cheat Sheets

attack-navigator-cn

Web app that provides basic navigation and annotation of ATT&CK matrices

attack-python-client

Python Script to access ATT&CK content available in STIX via a public TAXII server

attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

attack-to-elk

This program exports MITRE ATT&CK framework in ELK dashboard

attack-tools

Utilities for MITRE™ ATT&CK

attck_empire

Generate ATT&CK Navigator layer file from PowerShell Empire agent logs

auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

awesome-attack

Awesome Projects Related to ATT&CK

car

Cyber Analytics Repository

caret

CARET - A tool for viewing cyber analytic relationships

cti-cn

Cyber Threat Intelligence Repository expressed in STIX 2.0

cybermenace

A one stop shop hunting app in Splunk that can ingest Zeek, Suricata, Sysmon, and Windows event data to find malicious indicators of compromise relating to the MITRE ATT&CK Matrix.

dettect

Detect Tactics, Techniques & Combat Threats

edr-testing-script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter payloads

elemental

Elemental - An ATT&CK Threat Library

empire

Empire is a PowerShell and Python post-exploitation agent.

eqllib

litmus_test

Detecting ATT&CK techniques & tactics for Linux

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

malwaredb

Modest experiment on collecting analysis of malware matching MITRE ATT&CK techniques

mate

Mitre Att&ck Technique Emulation

metta

An information security preparedness tool to do adversarial simulation.

mitre-attack-mapping

Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

ossem

Open Source Security Events Metadata (OSSEM)

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs