15 open source projects by OTRF

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

Building environments to replicate small networks and deploy applications

Azure Sentinel2Go is an open source project developed to expedite the deployment of an Azure Sentinel lab.

Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets

A collection of notebooks built for defensive and offensive operations.

Re-play Adversarial Techniques

Open Source Security Events Metadata (OSSEM)

Python Script to access ATT&CK content available in STIX via a public TAXII server

OSSEM Data Dictionaries

A repo to document API functions mapped to security events across diverse platforms

The Infosec Community Definitive Guide to Jupyter Notebooks

Re-play Security Events

No description, website, or topics provided.

Cloud Templates and scripts to deploy mordor environments

Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity