A scraper that uses MITRE to search vulnerabilities and STIX/TAXII (X-Force Threat Intel) to fetch severity scoring.

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

Syncs the mitre CVE JSON dumps to a PostgreSQL DB using Quartz and Kafka and exposes a rest API for running full text searches against the DB.

Obtain actionable identifiers from MITRE ATT&CK framework based on provided parameters.

Automated Adversary Emulation Platform

Secure Coding in Python

Utilities for MITRE™ ATT&CK

ttpnav is a Python library that simplifies navigating MITRE ATT&CK data, enabling users to effortlessly retrieve comprehensive information about specific techniques with a single query. It provides details on mitigations, detections, procedure examples, groups, and related software/tools, streamlining cybersecurity analysis.

RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.

GitHub Action for SAF CLI

Small and highly portable detection tests based on MITRE's ATT&CK.

Kubernetes cluster security

The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simplifies tracking of security readiness against ATT&CK® tactics and techniques, offering a customizable, user-friendly interface for SOC analysts.

Caldera for OT Plugin

DNSSEC

Examples of exploring synthetic healthcare data from the Agency for Healthcare Research and Quality in the United States Department of Health and Human Services, and MITRE Corporation.

General purpose Java Library

A Tarot collection with MITRE ATT&CK Tactics

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.