#mitre-attack (23 Repositories)
Ranked open-source repositories tagged with #mitre-attack, scored by pull request acceptance likelihood and maintainer engagement velocity.
30.5%
66.4h
23 repositories tagged #mitre-attack
kubescape/kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
beenuar/AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
OpenCTI-Platform/connectors
OpenCTI Connectors
DataDog/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
mitre-attack/attack-website
MITRE ATT&CK Website
Shuffle/Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
mrwadams/attackgen
AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.
vectra-ai-research/Halberd
Halberd : Multi-Cloud Agentic Attack Tool
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Galeax/CVE2CAPEC
Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.
mitre-attack/mitreattack-python
A python module for working with ATT&CK
Mafifrizi/ARES
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
redcanaryco/chain-reactor
Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
Elemental-attack/Elemental
Elemental - An ATT&CK Threat Library
S3N4T0R-0X0/BEAR-C2
BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.
olafhartong/ATTACKdatamap
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
mthcht/Purpleteam
Purpleteam scripts simulation & Detection - trigger events for SOC detections
center-for-threat-informed-defense/adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
nshalabi/ATTACK-Tools
Utilities for MITRE™ ATT&CK
sbousseaden/EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
mdecrevoisier/EVTX-to-MITRE-Attack
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
olafhartong/sysmon-modular
A repository of sysmon configuration modules
ION28/BLUESPAWN
An Active Defense and EDR software to empower Blue Teams