ThreatModel SDK Logo

ThreatModel SDK

0
Free
Visit Website

The ThreatModel SDK is a minimalistic Java library that provides a basic vendor-neutral object model along with the ability to parse reports generated from common threat modeling tools. The intent of the ThreatModel SDK is to represent threat model data in a normalized way, regardless of approach, tool, or vendor. The primary purpose of the SDK is to facilitate the automation of threat model data by exfiltrating threat intelligence from the model so that identified threats can be automatically added to a team's backlog or defect tracking system. The goal of this project is NOT to graphically represent threat model data through user interfaces. Supported Threat Modeling Tools: Microsoft Threat Modeling Tool 2016. Usage Example: // Threat model file to open File file = new File("/path/to/threatmodel.tm7"); // Creates a normalized, vendor-neutral ThreatModel object ThreatModel threatModel = ThreatModelFactory .parse(file, ThreatModelingTool.MICROSOFT_THREAT_MODELING_TOOL_2016); // Java Bean conventions Threat threat = new Threat(); threat.setName("XSS"); threat.setRisk(risk); // Fluent interface Threat threat = new Threat()

FEATURES

ALTERNATIVES

A curated list of resources for learning about deploying, managing, and hunting with Microsoft Sysmon.

Real-time, container-based file scanning system for threat hunting and incident response.

CIFv3 is the next version of the Cyber Intelligence Framework, developed against Ubuntu16, encouraging users to transition from CIFv2.

A visualization tool for threat analysis that organizes APT campaign information and visualizes relations of IOC.

CyBot is a free and open source threat intelligence chat bot with a community-driven plugin framework.

AbuseIPDB offers tools and APIs to report and check abusive IPs, enhancing network security.

Python APIs for serializing and de-serializing STIX2 JSON content with higher-level APIs for common tasks.

An IOC tracker written in Python that queries Google Custom Search Engines for various cybersecurity indicators and monitors domain status using Google Safe Browsing APIs.