DeTTECT vs tram

DeTTECT

Detect Tactics, Techniques & Combat Threats (by rabobank-cdc)

Suggest topics

Source Code

Suggest alternative

Edit details

tram

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®. (by center-for-threat-informed-defense)

ctid cyber-threat-intelligence threat-informed-defense mitre-attack Cybersecurity

Source Code

ctid.mitre-engenuity.org

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

DeTTECT		tram
	Project
4	Mentions	3
1,955	Stars	391
1.9%	Growth	5.9%
8.3	Activity	7.9
13 days ago	Latest Commit	3 months ago
SCSS	Language	Jupyter Notebook
GNU General Public License v3.0 only	License	Apache License 2.0

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

DeTTECT

Posts with mentions or reviews of DeTTECT. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-02-04.

Automated Mapping From Snort/Suricata Rules to MITRE ATT&CK
2 projects | /r/cybersecurity | 4 Feb 2023

Look at dett&ct (https://github.com/rabobank-cdc/DeTTECT) and dettectinator (https://github.com/siriussecurity/dettectinator) The latter already has suricata support.
GitHub - rabobank-cdc/DeTTECT: Detect Tactics, Techniques & Combat Threats
1 project | /r/blueteamsec | 30 Nov 2022
Does anyone have experience changing orthodontists during braces treatment?
1 project | /r/auckland | 20 Dec 2021

If you plan to use. https://github.com/rabobank-cdc/DeTTECT
Tool for MITRE Mapping
3 projects | /r/blueteamsec | 1 Dec 2021

tram

Posts with mentions or reviews of tram. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-12-01.

MITRE ATT&CK Labeled CTI reports
1 project | /r/cybersecurity | 29 Dec 2021

Check out TRAM https://github.com/center-for-threat-informed-defense/tram/
Tool for MITRE Mapping
3 projects | /r/blueteamsec | 1 Dec 2021
TRAM: Advancing Research into Automated TTP Identification in Threat Reports.
2 projects | /r/blueteamsec | 5 Oct 2021

I think you may be looking at the wrong repo: https://github.com/center-for-threat-informed-defense/tram/issues. Did you read the article? It’s basically about how it was created in 2019 but they’ve just redesigned and reworked it, that’s what the article is about.

What are some alternatives?

When comparing DeTTECT and tram you can also consider the following projects:

caldera - Automated Adversary Emulation Platform

Go-MISPFeedGenerator - Golang implementation of PyMISP-feedgenerator

dettectinator - Dettectinator - The Python library to your DeTT&CT YAML files.

adversary_emulation_library - An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

caldera_pathfinder - Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.

attack-control-framework-mappings - 🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

tram - Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.