Purple-Team-Automation

Purple-Team-Automation Автоматизированная проверка правил обнаружения Sigma в рамках purple-team, построенных в detection-as-code-repo, с использованием MITRE Caldera для выполнения цепочки атаки на доступ к учётным данным Active Directory против существующей лаборатории домена, и тепловой карты...

ATTACKdatamap - A Datasource Assessment On An Event Level To Show Potential Coverage Or The MITRE ATT&CK Framework

A datasource assessment on an event level to show potential coverage of the "MITRE ATT&CK" framework. This tool is developed by me and has no affiliation with "MITRE" nor with its great "ATT&CK" team, it is developed with the intention to ease the mapping of data sources to assess one's potential...