EVTX-to-MITRE-Attack
Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
AI summary
Log indicators
Provides Windows log event indicators mapped to MITRE ATT&CK tactic and techniques
- stars
- 532
- forks
- 89
- watching
- 26
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
AI attack analysis tool
A framework to help security analysts understand and prepare for adversarial machine learning attacks on AI systems
mitre/cti1.8K
Threat intel data
A repository providing threat intelligence data in STIX format for security analysis and automation
Attack log repository
A repository of Windows Event log samples associated with various attack and post-exploitation techniques.
Windows log collector
Provides an advanced Splunk configuration for collecting Windows log data relevant to threat detection, incident response, and forensic analysis.
Audit maps
Provides detailed mindmaps on Microsoft auditing capacities and event logs for security and monitoring
SIEM adapter
Converts detection rules and IOCs to be usable with a proprietary SIEM product
Event log repair tool
Tool to repair Windows Event Log files (.evt) acquired during forensic investigations
Threat intel integrator
An integration tool for Maltego to leverage MISP threat intelligence and the MITRE ATT&CK dataset
Adversary simulator
Utilities for simulating adversary behavior in the context of threat intelligence and security analysis
Vulnerability scanner
Automated attack synthesis tool for discovering vulnerabilities in CPU architecture and cryptographic protocols
Event log parser
Tool to parse Event Viewer logs and extract useful information
Network simulator
Automates testing of cybersecurity detection and response capabilities in a controlled network environment
Attack map
A comprehensive resource for understanding and visualizing the relationships between different types of cyber attacks and their tactics, techniques, and procedures.
EVTX files
A collection of sample event log files used for testing and development of threat detection rules
Attack simulator
A portable set of tests mapped to the MITRE ATT&CK framework for evaluating security environments.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions EVTX-to-MITRE-Attack.
