-
MITRE ATT&CK Data Sources List attack.mitre.org
Data source objects added to MITRE ATT&CK as part of v10.
-
MITRE ATT&CK attack.mitre.org
The foundational framework of adversary tactics, techniques, and procedures based on real-world observations.
-
CTI Analyst Field Manual | Andrey Pautov 1200km.com
Practical CTI-to-detection reference covering evidence labels, source reliability, ATT&CK mapping gates, hunting hypotheses, and detection backlog workflow.
-
Suricata-Check suricata-check.teuwen.net
A command-line utility to provide feedback on Suricata rules. It can detect issues such as covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.
-
Stamus Lateral Movement Detection Rules stamus-networks.com
Suricata ruleset to detect lateral movement.
-
sidallocation.org sidallocation.org
Sid Allocation working group, list of SID ranges.
-
EveBox Rules rules.evebox.org
Suricata Rule Browser, indexes many free rulesets, including rules from the Suricata Ruleset Index.
-
PAW Patrules pawpatrules.fr
Another free (CC BY-NC-SA) collection of rules for the Suricata engine.
-
NF IDS rules networkforensic.dk
-
NF Scanners IDS Rules networkforensic.dk
-
NF SCADA IDS Rules networkforensic.dk
-
InfluxDB Suricata Input Plugin github.com
Input Plugin for Telegraf to collect and forward Suricata stats logs (included out of the box in recent Telegraf releases).
-
Quantum Insert detection for Suricata github.com
Suricata rules accompanying Fox-IT's QUANTUM 2015 blog/BroCon talk.
-
CDMCS github.com
Cyber Defence Monitoring Course: Rule-based Threat Detection.
-
3CORESec NIDS - Sinkholes dtection.io
Suricata ruleset focused on a curated list of public malware sinkholes (free).
-
3CORESec NIDS - Lateral Movement dtection.io
Suricata ruleset focusing on lateral movement techniques (paid).
-
Lawmaker 3coresec.com
Suricata IDS rule and fleet management system.
-
Elevation of Privilege (EOP) by Microsoft web.archive.org
A card game based on Microsoft's threat modeling framework "STRIDE" (Spoofing, Tampering etc.). The card deck is available as PDF from Microsoft. Adam Shostack, the author of EoP has also a git repo for EoP.
-
Security Cards securitycards.cs.washington.edu
A card game encouraging to think broadly and creatively about computer security threats. Four dimensions are covered: Human Impact, Adversary's Motivations, Adversary's Resources, Adversary's Methods.
-
Tabletop Simulations to Improve Your Information Security Program redcanary.com
Red Canary's write-up about tabletop exercises for information security programs.
-
Game On: Tabletop Games to Teach Cyber and Information Security Concepts linkedin.com
List of tabletop games to teach cyber and information security concepts.
-
Crypto Go cryptogogame.com
An educational card game designed to teach up to date symmetric cryptography. Crypto Go deck consists of cards representing modern cryptographic tools.
-
Cornucopia cornucopia.owasp.org
OWASP® Cornucopia is a threat modeling tool in the form of a card game to assist software development teams identify security requirements in Agile, conventional and formal development processes. It's based on OWASP's Top 10, ASVS/MASVS/MASTG, CAPEC and SAFECode. The card…
-
Backdoors & Breaches blackhillsinfosec.com
An incident response card game. It helps you conduct incident response tabletop exercises and learn attack tactics, tools, and methods.
-
Tabletop Security Games & Cards adam.shostack.org
List of security card games created and maintained by Adam Shostack.
-
Know your risks aca.edu.au
Learn what information is safe to share online and understand the risks. Learn about whether to share, not share or be cautious with different pieces of information.
-
WeakPass weakpass.com
Collection of large wordlists.
-
-
-
-
-
-
Twitter twitter.com
.
-
Twitter twitter.com
.
-
Twitter twitter.com
.
-
Twitter twitter.com
.
-
Crunch sourceforge.net
Crunch is a wordlist generator where you can specify a standard character set or a character set you specify. Crunch can generate all possible combinations and permutations.
-
-
Password Cracking Using Probabilistic Context-Free Grammars (2009) researchgate.net
-
Packet Storm Wordlists packetstormsecurity.com
A substantial collection of different wordlists in multiple languages.
-
Online Hash Crack onlinehashcrack.com
Cloud password recovery service.
-
-
UNHash - Methods for better password cracking media.ccc.de
-
-
PGMaP: Password Generation Based On Mask Prediction (2026) linkinghub.elsevier.com
-
Rocktastic labs.nettitude.com
Includes many permutations of passwords and patterns that have been observed in the wild.
-
-
-
Smashing Hashes with Token Swapping Attacks jakewnuk.com
-
Optimizing Wordlists with Masks jakewnuk.com
- next page of items loading…
