Discover mitre/icap Open Source project

Cyber Threat Intelligence Repository expressed in STIX 2.0

4,455

cti

1,716

HTTP-Proxy-Servlet

Smiley's HTTP Proxy implemented as a Java servlet

Adversarial Threat Landscape for AI Systems

1,456

advmlthreatmatrix

1,038

multiscanner

Modular file scanning/analysis framework

cascade-server

heimdall2

Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.

Data from a BRAWL Automated Adversary Emulation Exercise

201

brawl-public-game-001

188

caldera-ot

MITRE Caldera™ for OT Plugins & Capabilities

185

saf

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

118

inspec_tools

Search relevance evaluation toolkit

quaerite

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark v1.1.0

aws-foundations-cis-baseline

Online and batch-based concept and data drift detection algorithms to monitor and maintain ML performance.

menelaus

stockpile

Automatically assess and score software repositories for supply chain risk.

PowerShell

hipcheck

Rust

engage

MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.

vulcan

A web application to streamline the development of STIGs from SRGs

sandcat

CARET - A tool for viewing cyber analytic relationships

caret

pydecipher: unfreeze and deobfuscate your frozen python code

pydecipher

device-admin-sample

A Security Results Viewer for the web with storage, teams and history

heimdall-legacy

DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications

heimdall_tools

A fast, open source, HL7 FHIR server

fhir-server

cpsa

Cryptographic Protocol Shapes Analyzer

Scilab

tmnt

Algorithms for training state-of-the-art neural topic models

Translate STIX 2 Patterning Queries

stix2patterns_translator

A FUSE interface to the NCBI Sequence Read Archive (SRA)

vulnerable-mobile-apps

fusera

sparklyr.nested

A sparklyr extension for nested data

d3fend

Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology

atomic

Open Source software from The MITRE Corporation

mitre.github.io

CSS

emasser

emasser is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise Mission Assurance Support Service (eMASS) by leveraging its representational state transfer (REST) application programming interface (API).

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

cis-aws-foundations-hardening

HCL

response

A CALDERA plugin for autonomous incident response

(WIP) An ansible playbook to harden a docker host to the CIS CE Benchmark requirements

ansible-cis-docker-ce-hardening

Heimdall Lite 2.0 is a JavaScript based security results viewer and review tool supporting multiple security results formats, such as: InSpec, SonarQube, OWASP-Zap and Fortify which you can load locally, from S3 and other data sources.

heimdall-lite

Advanced desktop search/corpus exploration prototype

rhapsode

STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3

nginx-stigready-baseline

Caldera plugin to deploy "humans" to emulate user behavior on systems

human

emb3d

caldera-agent

A dashboard framework for visualizing complex data sets on T1V multi-panel displays

OpenHealthDashboard

A face quality plugin for the BIQT framework.

biqt-face

training

This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense

emu

A web front-end providing a REST-ful API to mount and unmount forensic disk images

thumbtack

CICAT

SystemInspector is a script to pull a majority of the security-relevant files and settings from a system.

SystemInspector

Shell

adversary

(WIP) A set of training material and guides for using inspec

inspec_training_courses

ROS Global Path Planner Plugin based on the F-RRT* algorithm from this paper: https://doi.org/10.1016/j.eswa.2021.115457

Fast-RRT-Star

ilpyt: imitation learning library with modular, baseline implementations in Pytorch

ilpyt

callisto

(WIP) CIS Microsoft Azure Foundations Benchmark

microsoft-azure-cis-foundations-baseline

A patient matching test harness to support PCOR

ptmatch

access

Microsoft Windows Server 2019 STIG InSpec Profile

microsoft-windows-server-2019-stig-baseline

InSpec profile for Microsoft Windows 10, against DISA's Microsoft Windows 10 Security Technical Implementation Guide (STIG) Version 1, Release 19

microsoft-windows-10-stig-baseline

Ansible configurations for distributed MultiScanner installations

multiscanner-ansible

Shell

policynet

Exploration of the U.S. rulesets as a network

InSpec Profile to validate the secure configuration of aws-rds-infrastructure-cis-baseline, against CIS's Amazon Web Services Three-tier Web Architecture Benchmark V1.0.0

aws-rds-infrastructure-cis-baseline

A micro InSpec baseline to check for insecure or public s3 buckets in your VPC

aws-s3-baseline

An iris quality plugin for the BIQT framework.

biqt-iris

Publicly accessible version of the FiGHT website.

FiGHT

Easily scan with multiple yara rules from different sources.

yararules-python

KeyTerms centralized terminology management tool

keyterms

Assembly-based binary pattern search!

pickled-canary

Rust

ps_pc_props

PowerShell Utilities for Security Situational Awareness

PowerShell

microsoft-windows-server-2016-stig-baseline

An InSpec Profile for evaluating a Windows 2016 server to the DISA STIGs

InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (STIG) Version 1 Release 1.

canonical-ubuntu-16.04-lts-stig-baseline

The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) Application Programming Interface (API) specification and executables.

emass_client

A Mongo-based version of Heimdall (Deprecated)

heimdall-mongo

A CALDERA Plugin Template

skeleton

fhir-exercises

The Mental Wellness Index is a framework and dashboard tool that provides a picture of community-level mental wellness for each zip code in the nation

hse-mwi

Standalone tool for converting DISA Checklists to eMASS POA&M Excel spreadsheets.

ckl2POAM

Server side components to support electronic clinical quality measure calculation

ecqm

demodocus

Project dedicated to extending the capabilities of automated accessibility testing tools to include testing interactive web content.

Web application to provide an interface for clinical quality measure calculation

ecqm-frontend

mock

compass

saf-training-lab-environment

The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE Security Automation Framework Training Classes.

Shell

FMACM

An aircraft and control model for Flight Deck Interval Management MOPS testing by RTCA SC-186 members.

(WIP) canonical-ubuntu-18.04-lts-stig-baseline

canonical-ubuntu-18.04-lts-stig-baseline

Experimental CPSA -- the Cryptographic Protocol Shapes Analyzer experimental version

cpsaexp

Scilab

gocat

Simplified go-cat agent for caldera

caltack

Plugin that serves the ATT&CK website alongside CALDERA.

ARLIN is a research library written in Python that provides explainability outputs and vulnerability detection for DRL models, specifically designed to increase model assurance and identify vulnerabilities and potential points of failure within a trained model. https://mitre.github.io/arlin/

arlin

A high-speed lidar based mapping package for use with large scale robotics such as autonomous vehicles.

mitre_fast_layered_map

Insulates package authors from worrying about how to collect user credentials

caldera-crater

credentials

biqt

The core engine of the BIQT framework.

stixmarx

Data Markings API for STIX 1.x

CQL to ELM translator packaged as a microservice.

cql-translation-service

(wip) InSpec run from serverless environments (lambda)

serverless-inspec-deprecated

HCL

scorecard_app

Scorecard for a FHIR Patient Record -- SMART on FHIR App