mitre 开源项目推荐（211 个）

redcanaryco /atomic-red-team

基于 MITRE ATT&CK 的小型、高度便携的检测测试。

OTRF /ThreatHunter-Playbook

一个社区驱动的开源项目，共享检测逻辑、对手间谍技术和资源，以提高检测开发的效率。

opencve /opencve

漏洞情报平台

austinsonger /Incident-Playbook

目标：事件响应剧本映射到MITRE攻击战术和技术。[贡献者友好]

infosecB /awesome-detection-engineering

检测工程是网络安全防御计划的一项战术功能，涉及检测控制的设计、实施和操作，目标是在恶意或未经授权的活动对个人或组织产生负面影响之前主动识别该活动。

nshalabi /ATTACK-Tools

Utilities for MITRE™ ATT&CK

vectra-ai-research /MAAD-AF

MAAD 攻击框架——一款用于简单、快速且有效的 M365 和 Entra ID（Azure AD）安全测试的攻击工具。

Cyb3rWard0g /Invoke-ATTACKAPI

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API

redcanaryco /chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

op7ic /EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

mitre /caldera-ot

MITRE Caldera™ for OT Plugins & Capabilities

Yamato-Security /hayabusa-rules

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.

mitre /saf

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

PatrickGallucci /threat-model-templates

Templates for the Microsoft Threat Modeling Tool

jimmy-ly00 /Ransomware-PoC

A simple, fully python ransomware PoC using AES-CTR and RSA. Supports Windows, Linux and macOS

blueteam0ps /AllthingsTimesketch

This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.

mvelazc0 /attack2jira

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage

qeeqbox /mitre-visualizer

🧬 Mitre Interactive Network Graph (APTs, Malware, Tools, Techniques & Tactics)

sickcodes /security

Collection of CVEs from Sick Codes, or collaborations on https://sick.codes security research & advisories.

a2awais /Threat-Hunting

Threat Hunting queries of multiple platforms