MITRE ATT&CK

attack-arsenal

A collection of red team and adversary emulation resources developed and released by MITRE.

attack-datasources

This content is analysis and research of the data sources currently listed in ATT&CK.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

attack-stix-data

STIX data representing MITRE ATT&CK

attack-website

MITRE ATT&CK Website

bzar

A set of Zeek scripts to detect ATT&CK techniques.

car

Cyber Analytics Repository

mitreattack-python

A python module for working with ATT&CK

tram

Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.

mitre-attack/attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

mitre-attack/car

Cyber Analytics Repository

mitre-attack/attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

mitre-attack/bzar

A set of Zeek scripts to detect ATT&CK techniques.

mitre-attack/attack-website

MITRE ATT&CK Website

mitre-attack/attack-arsenal

A collection of red team and adversary emulation resources developed and released by MITRE.

mitre-attack/mitreattack-python

A python module for working with ATT&CK

mitre-attack/attack-datasources

This content is analysis and research of the data sources currently listed in ATT&CK.

mitre-attack/attack-stix-data

STIX data representing MITRE ATT&CK

mitre-attack/tram

Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.

mitre-attack/joystick

Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances in the results.

mitre-attack/attack-evals

ATT&CK Evaluations website (DEPRECATED)

mitre-attack/evals_caldera

A CALDERA plugin for ATT&CK Evaluations Round 1

mitre-attack/caret

CARET - A tool for viewing cyber analytic relationships

mitre-attack/attack-workbench-taxii-server

An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository contains a TAXII 2.1 API integration for the ATT&CK Workbench application.

mitre-attack/attack-datasources-stix-beta

Mock STIX data demonstrating the new data source representation

mitre-attack/attack-data-model

ATT&CK Data Model (ADM): A TypeScript library for structured interaction with MITRE ATT&CK datasets. Uses Zod schemas, TypeScript types, and ES6 classes to provide a type-safe, object-oriented interface for STIX 2.1 formatted ATT&CK data. Features parsing, validation, and serialization capabilities.

mitre-attack/attack-archives

Previous ATT&CK releases as seen at https://attack.mitre.org/resources/previous-versions/

mitre-attack/attack-workbench-deployment