Skip to content

@OTRF Open Threat Research Forge

Change the repository type filter

All

    Repositories list

    30 repositories

    • ATTACK-Python-Client

      Public
      Python Script to access ATT&CK content available in STIX via a public TAXII server
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •116•558•2•0•Updated Dec 21, 2024Dec 21, 2024

    • OSSEM-DD

      Public
      OSSEM Data Dictionaries
      Python
      •
      MIT License
      •19•59•10•0•Updated Aug 19, 2024Aug 19, 2024

    • GenAI-Security-Adventures

      Public
      Jupyter Notebook
      •
      MIT License
      •13•100•1•1•Updated Jun 2, 2024Jun 2, 2024

    • MEAN

      Public
      Microsoft Entra ID Administration LLM-based Autonomous Agent
      Jupyter Notebook
      •
      MIT License
      •1•8•0•0•Updated Apr 30, 2024Apr 30, 2024

    • Security-Datasets

      Public
      Re-play Security Events
      PowerShell
      •
      MIT License
      •240•1.6k•6•3•Updated Mar 20, 2024Mar 20, 2024

    • infosec-jupyterthon

      Public template
      A community event for security researchers to share their favorite notebooks
      Jupyter Notebook
      •
      GNU General Public License v3.0
      •24•107•0•1•Updated Feb 15, 2024Feb 15, 2024

    • ThreatHunter-Playbook

      Public
      A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
      dfirsysmonthreat-huntinghuntinghuntermitrehypothesishunting-campaignsmitre-attack-db
      Python
      •
      MIT License
      •813•4.1k•6•3•Updated Feb 15, 2024Feb 15, 2024

    • Blacksmith

      Public
      Building environments to replicate small networks and deploy applications
      PowerShell
      •
      GNU General Public License v3.0
      •72•317•2•0•Updated Nov 17, 2023Nov 17, 2023

    • Blog-Website

      Public
      Official OTR Blog Website
      5•2•1•0•Updated Nov 4, 2023Nov 4, 2023

    • Microsoft-Sentinel2Go

      Public
      Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.
      PowerShell
      •
      GNU General Public License v3.0
      •138•554•2•0•Updated Oct 13, 2023Oct 13, 2023

    • OSSEM

      Public
      Open Source Security Events Metadata (OSSEM)
      Python
      •
      MIT License
      •215•1.2k•14•3•Updated Feb 27, 2023Feb 27, 2023

    • BHEU22-ADFS

      Public
      Writing Your Own Ticket to the Cloud Like APT: A Deep-dive to AD FS Attacks, Detections, and Mitigations
      MIT License
      •4•12•0•0•Updated Dec 9, 2022Dec 9, 2022

    • OSSEM-DM

      Public
      OSSEM Detection Model
      Python
      •
      MIT License
      •44•171•11•1•Updated Oct 11, 2022Oct 11, 2022

    • SANS-BlueTeamSummit-2022

      Public
      Repo to track SANS BlueTeam Summit Presentation
      Jupyter Notebook
      •6•23•0•0•Updated Oct 4, 2022Oct 4, 2022

    • OSSEM-CDM

      Public
      OSSEM Common Data Model
      MIT License
      •15•55•16•1•Updated Sep 20, 2022Sep 20, 2022

    • Set-AuditRule

      Public
      Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
      PowerShell
      •
      GNU General Public License v3.0
      •23•88•1•0•Updated Feb 2, 2022Feb 2, 2022

    • sigma

      Public
      Generic Signature Format for SIEM Systems
      Python
      •2.2k•14•0•0•Updated Oct 27, 2021Oct 27, 2021

    • 2021-OceanLotus-workshop

      Public
      HCL
      •
      MIT License
      •4•18•26•0•Updated Aug 4, 2021Aug 4, 2021

    • openhunt

      Public
      Python
      •7•33•3•0•Updated Jun 22, 2021Jun 22, 2021

    • OSSEM-DD-MASK

      Public
      An extension of the OSSEM-DD repository.
      GNU General Public License v3.0
      •1•1•0•0•Updated May 11, 2021May 11, 2021

    • SimuLand

      Public
      Cloud Templates and scripts to deploy mordor environments
      Shell
      •
      GNU General Public License v3.0
      •22•128•1•0•Updated Mar 3, 2021Mar 3, 2021

    • infosec-jupyter-book

      Public
      The Infosec Community Definitive Guide to Jupyter Notebooks
      Dockerfile
      •
      GNU General Public License v3.0
      •30•119•2•0•Updated Oct 17, 2020Oct 17, 2020

    • notebooks-forge

      Public
      A collection of notebooks built for defensive and offensive operations.
      Jupyter Notebook
      •
      GNU General Public License v3.0
      •25•77•2•0•Updated Oct 13, 2020Oct 13, 2020

    • detection-hackathon-apt29

      Public
      Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets
      Jupyter Notebook
      •
      GNU General Public License v3.0
      •41•133•49•0•Updated Oct 12, 2020Oct 12, 2020

    • workshop-ekoparty-bluespace-2020

      Public
      Materiales para enseñar lo básico de Jupyter Notebooks y análisis de data con Pandas
      Dockerfile
      •1•3•0•0•Updated Sep 29, 2020Sep 29, 2020

    • Community-Presentations

      Public
      Slides
      1•1•0•0•Updated Sep 29, 2020Sep 29, 2020

    • bloodhound-notebook

      Public
      BloodHound Cypher Queries Ported to a Jupyter Notebook
      Python
      •
      GNU General Public License v3.0
      •9•53•0•0•Updated Jun 20, 2020Jun 20, 2020

    • OSL

      Public
      A refreshed version of Hyde for Jekyll 3.x and 4.x
      CSS
      •
      Other
      •770•1•0•0•Updated May 27, 2020May 27, 2020

    • bloodhound-notebooks

      Public
      Notebooks created to attack and secure Active Directory environments
      Jupyter Notebook
      •
      GNU General Public License v3.0
      •9•27•0•0•Updated Nov 18, 2019Nov 18, 2019

    • API-To-Event

      Public
      A repo to document API functions mapped to security events across diverse platforms
      GNU General Public License v3.0
      •18•74•0•0•Updated Nov 1, 2019Nov 1, 2019