Mitre Attack

Atomic Red TeamC

A library of portable detection tests mapped to the MITRE ATT&CK framework for security testing.

CalderaPython

An automated cyber security platform for adversary emulation, red teaming, and incident response built on the MITRE ATT&CK framework.

CapaPython

An open-source tool that detects capabilities in executable files like malware, identifying behaviors such as backdoor installation or network communication.

capaPython

An open-source tool that detects capabilities in executable files like malware, identifying behaviors such as backdoor installation or network communication.

Awesome Threat Detection and Hunting

A curated list of awesome open-source tools, detection rules, datasets, and resources for threat detection and hunting.

ThreatHunter-PlaybookPython

A community-driven open-source project that structures threat hunting workflows using MITRE ATT&CK, Jupyter notebooks, and AI-augmented planning.

sysmon-modularPowerShell

A modular repository of Sysmon configuration modules for customizable endpoint detection and logging.

Windows Events Attack SamplesHTML

A collection of 200 Windows EVTX event log samples mapped to MITRE ATT&CK techniques for detection testing and threat hunting.

ShuffleJavaScript

An open-source security automation platform (SOAR) built for security professionals, focusing on collaboration and resource sharing.

KQL Advanced Hunting Queries & Analytics RulesPython

A collection of ready-to-use KQL queries for threat hunting, detection, and analytics in Microsoft Defender for Endpoint and Azure Sentinel.

Splunk Security ContentPython

An open-source repository of security detections, analytic stories, and response playbooks mapped to MITRE ATT&CK for Splunk Enterprise Security.