ctid
Here are 24 public repositories matching this topic...
Language:All
Sort:Most stars
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
- Updated
Jan 5, 2024 - C
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
- Updated
Mar 20, 2025 - TypeScript
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
- Updated
Apr 3, 2024 - Python
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
- Updated
Mar 20, 2025 - Jupyter Notebook
🚨ATTENTION🚨 The CVE mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
- Updated
Apr 3, 2024
CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.
- Updated
Mar 20, 2025 - TypeScript
The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.
- Updated
Sep 4, 2024 - Python
Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.
- Updated
Apr 25, 2024 - Python
Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques to focus on first.
- Updated
Mar 11, 2025 - Vue
ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, context menus, and ATT&CK Navigator integration.
- Updated
Nov 4, 2024 - JavaScript
🚨ATTENTION🚨 The VERIS mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
- Updated
Apr 3, 2024 - Python
Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as well as a blueprint for how others can create and use cloud analytics effectively.
- Updated
Apr 25, 2023 - HCL
Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help detect real-world adversary behaviors in their environments.
- Updated
Mar 20, 2025 - Python
TIE is a machine learning model for inferring associated MITRE ATT&CK techniques from previously observed techniques.
- Updated
Mar 19, 2025 - TypeScript
Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research includes a scoring model, methodology, and worked examples.
- Updated
Mar 20, 2025 - Makefile
Sightings Ecosystem gives cyber defenders visibility into what adversaries actually do in the wild. With your help, we are tracking MITRE ATT&CK® techniques observed to give defenders real data on technique prevalence.
- Updated
Mar 20, 2025 - Python
ATT&CK Sync is a Center for Threat-Informed Defense project that aims to improve the ability for organizations to consume MITRE ATT&CK® version updates into their internal systems and processes.
- Updated
Mar 7, 2025 - Python
The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activities associated with its practice.
- Updated
Mar 20, 2025 - Makefile
Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a methodology for creating technique collections.
- Updated
Feb 27, 2024 - Makefile
The CWE Calculator enables software development teams to score and prioritize discovered weaknesses empirically based on data in the National Vulnerability Database (NVD).
- Updated
Jul 16, 2024 - Python
Improve this page
Add a description, image, and links to thectid topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with thectid topic, visit your repo's landing page and select "manage topics."