A curated list of awesome resources related to Mitre ATT&CK™ Framework
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
Small and highly portable detection tests based on MITRE's ATT&CK.
翻译 - 基于MITRE的ATT&CK的小型便携式检测测试。
GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]
翻译 - 事件响应流程和手册 |目标:将剧本映射到 MITRE 攻击技术
A Linux Auditd rule set mapped to MITRE's Attack Framework
Projects for security students and professionals
Python wrapper for the Mitre ATT&CK framework API
Python module to interact with the MITRE attack framework via the MITRE API
MITRE ATT&CK in CSV form
Web app that provides basic navigation and annotation of ATT&CK matrices
Scripts and a (future) library to improve users' interactions with the ATT&CK content
MITRE ATT&CK Website
This content is analysis and research of the data sources currently listed in ATT&CK.
Cyber Analytics Repository
ATT&CK Evaluations website (DEPRECATED)
A set of Zeek scripts to detect ATT&CK techniques.
Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.
翻译 - 威胁报告ATT&CK™映射(TRAM)是一种工具,可帮助分析师将完成的报告映射到ATT&CK。
Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances in the results.
STIX data representing MITRE ATT&CK
Web app that provides basic navigation and annotation of ATT&CK matrices
翻译 - Web应用程序,提供ATT&CK矩阵的基本导航和注释
A python module for working with ATT&CK
Utilities for MITRE™ ATT&CK
翻译 - MITER™ATT&CK的实用程序
MITRE ATT&CK Windows Logging Cheat Sheets
Mapping the MITRE ATT&CK Matrix with Osquery
Automated Adversary Emulation Platform
翻译 - 自动化对手仿真