DShield Sensor Log Collection with ELK

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.

OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, severity scoring, SVG/HTML reports & MITRE Navigator layers. DevSecOps & CI/CD ready.

A Python script to generate MITRE ATT&CK Navigator layers from TTPs

MCP server that maps Tenable Security Center findings to the MITRE ATT&CK framework, then lets you ask your LLM (Claude Code) to analyze exposure by specific tactic or technique in plain language — and optionally open the results as an interactive ATT&CK Navigator matrix in a local web viewer.

Tactics and Techniques used by Iraninan APT groups for MITRE

Proactive threat hunting methodologies, detection engineering, MITRE ATT&CK mappings, and adversary behavior analysis for cyber defense

Python toolchain that maps MITRE ATT&CK techniques to D3FEND defenses and builds ATT&CK Navigator coverage layers from STIX data.

Detection-as-code pipeline with measured precision/recall against OTRF captures. 20 Sigma rules, multi-SIEM (SPL/EQL/KQL), ATT&CK coverage, two logsource baselines. By Aadarsh Kadam.

Describe an industral plant in YAML, model as graph, trace how attacker could reach OT.

A utility to extract MITRE ATT&CK Techniques from a file, pdf, or URL and create ATT&CK Navigator layer from the result.

Deterministic .NET workbench for synthetic security-alert triage: ATT&CK mapping, safe dry-run playbooks, detection testing against fixtures, and an HTTP API — CLI + xUnit tests.