Threat Modeling

Infosec_ReferenceCSS

A comprehensive, free information security reference covering techniques, tools, tactics, and resources for learning and professional development.

Awesome Threat ModellingDockerfile

A curated list of threat modeling resources including books, courses, videos, tools, tutorials, and examples for learning and practicing threat modeling.

Common Threat Matrix for CI/CD Pipeline

An ATT&CK-like threat matrix mapping adversary tactics and techniques specific to CI/CD pipeline security.

owasp-threat-dragon-desktopCSS

A free, open-source, cross-platform desktop application for threat modeling with system diagramming and automated threat generation.

threatclGo

A DevOps-first CLI tool for documenting threat models using HashiCorp Configuration Language (HCL).

GitHub Actions Attack Diagram

A security research diagram mapping attack paths to exploit GitHub Actions misconfigurations for red team engagements.

Security Card Games

A curated list of security card games and tabletop exercises for training and discussion.

SDLC Infrastructure Threat Framework (SITF)HTML

A framework for analyzing and defending against supply chain attacks targeting Software Development Lifecycle infrastructure.

Awesome Threat Modeling

A curated collection of threat modeling resources, including methodologies, tools, books, and conference talks.

Raindance ProjectGCC Machine Description

A methodology and toolset for creating reusable attack maps to integrate security threat modeling into software development workflows.

CumulusTeX

A card game for threat modeling cloud and devOps systems through gamification.