mitre-d3fend

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

An open-source knowledge base of defensive countermeasures to protect AI/ML systems. Features interactive views and maps defenses to known threats from frameworks like MITRE ATLAS, MAESTRO, and OWASP.

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

容器安全遥测归一化引擎，针对 MITRE ATT&CK T1059.013 — Container CLI/API 检测场景。

A domain-specific template (.tb7) for the Microsoft Threat Modeling Tool that automatically identifies space-domain cyber threats when users build Data Flow Diagrams of satellite and ground system architectures.

Academic research on unified offensive/defensive taxonomies and high-dimensional vector database security.

Open Cyber Defense Operations Engineering repository for detection, Threat Hunting, DFIR, Incident Response, Cyber Deception, Validation, and Security Automation.

Client-side navigator that maps relationships across CVE, CWE, CAPEC, ATT&CK and D3FEND. Enter any security framework ID and instantly traverse the full chain: from vulnerability to weakness to attack pattern to technique to defense.

Map ransomware-relevant MITRE ATT&CK techniques to MITRE D3FEND defensive patterns and Platform0-style control tests, with a small data model, resolver CLI, and example kill chain.

Two expert crosswalks of the same security frameworks, both published by NIST, agree on 19% of their pairs. A measurement of how much framework crosswalks can be trusted, and a candidate DORA crosswalk that carries its own uncertainty.

7-layer OSI network security stack in C using raw sockets on a Raspberry Pi Zero 2 W. Implements MITRE D3FEND defensive techniques at every layer. Includes full MITRE ATT&CK attack simulation.

A collection of hands-on labs simulating Security Operations Center (SOC) workflows: detection engineering, log analysis, incident response, threat hunting, and network defense. Built to practice and demonstrate practical blue-team skills using industry-standard tools.