MITRE ATT&CK and CAPEC Datasets in STIX 2.0
This repository contains the MITRE ATT&CK® and CAPEC™ datasets expressed in STIX 2.0. See USAGE or USAGE-CAPEC for information on using this content with python-stix2. If you are looking for ATT&CK represented in STIX 2.1, please see the attack-stix-data GitHub repository. Both MITRE/CTI (this repository) and attack-stix-data will be maintained and updated with new ATT&CK releases for the foreseeable future, but the data model of attack-stix-data includes quality-of-life improvements not found on MITRE/CTI. Please see the attack-stix-data USAGE document for more information on the improved data model of that repository.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A library of Amazon S3 attack scenarios with mitigation strategies.
A threat intelligence platform that collects, analyzes, and operationalizes threat data from multiple sources to help organizations identify and respond to security threats.
A collection of Yara rules for the Burp Yara-Scanner extension to identify malicious software on websites.
Repository for detection content with various types of rules and payloads.
A threat intelligence dissemination layer for open-source security tools with STIX-2 support and plugin-based architecture.
Knowledge base workflow management dashboard for YARA rules and C2 artifacts.
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
Maldatabase is a threat intelligence platform providing malware datasets and threat intelligence feeds for malware data science and threat intelligence.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.