attack-navigator

A Python script to generate MITRE ATT&CK Navigator layers from TTPs

MCP server that maps Tenable Security Center findings to the MITRE ATT&CK framework, then lets you ask your LLM (Claude Code) to analyze exposure by specific tactic or technique in plain language — and optionally open the results as an interactive ATT&CK Navigator matrix in a local web viewer.

Purple-team detection-engineering lab with ML-assisted Sigma/YARA rule generation, and coverage/FP/evasion scoring.

Tactics and Techniques used by Iraninan APT groups for MITRE

Proactive threat hunting methodologies, detection engineering, MITRE ATT&CK mappings, and adversary behavior analysis for cyber defense

Python toolchain that maps MITRE ATT&CK techniques to D3FEND defenses and builds ATT&CK Navigator coverage layers from STIX data.

Detection-as-code pipeline with measured precision/recall against OTRF captures. 20 Sigma rules, multi-SIEM (SPL/EQL/KQL), ATT&CK coverage, two logsource baselines. By Aadarsh Kadam.

Claimed vs detection-backed MITRE ATT&CK coverage on real data: official CIS v8, NIST 800-53 (+800-53B baselines) and CTID framework mappings joined with SigmaHQ rules and their log sources; cross-framework auto-mapping, SPOFs, set-cover recommender, heatmap UI

A utility to extract MITRE ATT&CK Techniques from a file, pdf, or URL and create ATT&CK Navigator layer from the result.

A Zero Trust overlay network in Flask with detection-as-code , every service behind one gate, every request logged with trace_id correlation, three Sigma rules validated against atomic ATT&CK attacks.

Threat intelligence analysis mapping documented ICS malware to MITRE ATT&CK for ICS v19.2 to identify techniques that recur across attacks on industrial systems.