Adversary Emulation
3 projects
APTSimulatorA Windows Batch script toolset that simulates Advanced Persistent Threat (APT) attack indicators to test security monitoring and detection capabilities.
Atomic Red TeamA library of portable detection tests mapped to the MITRE ATT&CK framework for security testing.
CalderaAn automated cyber security platform for adversary emulation, red teaming, and incident response built on the MITRE ATT&CK framework.
All-In-One Tools
6 projects
FLARE VMA collection of software installation scripts for Windows that automates the setup and maintenance of a reverse engineering environment on a virtual machine.
Fleet device managementOpen-source platform for IT and security teams to manage and secure thousands of computers across diverse environments.
grrAn incident response framework for remote live forensics with Python client-server architecture.
MatanoAn open source, serverless security data lake for AWS that normalizes logs, enables detection-as-code, and supports petabyte-scale threat hunting.
MozDefAn open-source security incident response platform that automates and coordinates enterprise defense workflows.
VelociraptorAn endpoint visibility and collection tool using the Velociraptor Query Language (VQL) for host-based state information gathering.