A set of Bro/Zeek scripts that detect ATT&CK-based adversarial activity and raise notices
All security tools
2,963 results · page 18
An open source format for storing digital evidence and data, with a C/C++ library for creating, reading, and manipulating AFF4 images.
Generates randomized C2 profiles for Cobalt Strike to evade detection.
C3 is a framework for creating custom C2 channels, integrating with existing offensive toolkits.
A Python library for interacting with TAXII servers
Free software for extracting Microsoft cabinet files, supporting all features and formats of Microsoft cabinet files and Windows CE installation files.
A tool for extracting common indicators of compromise from a block of text.
A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.
Automated vulnerability discovery tool for Cake PHP framework with limited false positives.
Caldera is a cybersecurity framework by MITRE for automated security assessments and adversary emulation.
CalypsoAI is a platform that provides centralized security, observability, and control for deploying and scaling large language models and generative AI across an enterprise.
A list of services and how to claim (sub)domains with dangling DNS records.
Define and validate YARA rule metadata with CCCS YARA Specification.
A tool for detecting capabilities in executable files, providing insights into a program's behavior and potential malicious activities.
Detect capabilities in executable files and identify potential behaviors.
A web-based tool for analyzing captured network traffic data, allowing for visualization and filtering of packet captures in an intuitive interface.
Malware sandbox for executing malicious files in an isolated environment with advanced features.
CAPEC™ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.
A security framework for process isolation and sandboxing based on capability-based security principles.
A disassembly framework with support for multiple hardware architectures and clean API.
CapTipper is a python tool to analyze, explore, and revive HTTP malicious traffic.
Carbon Black is a cloud-native endpoint security platform that provides protection against advanced threats through behavior-based threat detection, real-time visibility, and automated resp…
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
Incident response platform for automating alert handling and incident response procedures.
Load more tools
Showing 432 of 2,963