EVTX-to-MITRE-Attack Alternatives

Similar projects and alternatives to EVTX-to-MITRE-Attack based on common topics and language

evtx-hunter

2 137 0.0 Python EVTX-to-MITRE-Attack VS evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
SIGMA-detection-rules

2 265 6.4 EVTX-to-MITRE-Attack VS SIGMA-detection-rules

Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
SysmonConfigPusher

2 91 0.0 C# EVTX-to-MITRE-Attack VS SysmonConfigPusher

Pushes Sysmon Configs
EVTX-ATTACK-SAMPLES

1 2,126 0.0 HTML EVTX-to-MITRE-Attack VS EVTX-ATTACK-SAMPLES

Windows Events Attack Samples
Purpleteam

1 120 8.3 PowerShell EVTX-to-MITRE-Attack VS Purpleteam

Purpleteam scripts simulation & Detection - trigger events for SOC detections
RedTeam-Tools

2 5,144 5.8 EVTX-to-MITRE-Attack VS RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better EVTX-to-MITRE-Attack alternative or higher similarity.

Suggest an alternative to EVTX-to-MITRE-Attack

EVTX-to-MITRE-Attack reviews and mentions

Posts with mentions or reviews of EVTX-to-MITRE-Attack. We have used some of these posts to build our list of alternatives and similar projects.

Mapping MITRE ATT&CK with Window Event Log IDs
1 project | /r/netsecstudents | 19 May 2022

Direct GitHub link bc ads. Like I commented last time I saw this project, I think it's a good starting point, but an important note: These mappings are 1:1. You should not limit your correlations to 1:1, but rather one ATT&CK term to many event IDs. Each technique can often be mapped to many, many different event IDs. And analysis / alerting on these events needs to be context aware, looking at other events before and after. When we approached this problem (mapping ATT&CK to detection logic) we realized there was almost never a scenario where event IDs could map 1:1 with the ATT&CK Matrix.

1 project | /r/blueteamsec | 16 May 2022

Source Github Link no ads.

Stats

Basic EVTX-to-MITRE-Attack repo stats

Mentions

Stars

476

Activity

3.7

Last Commit

about 2 months ago

mdecrevoisier/EVTX-to-MITRE-Attack is an open source project licensed under Creative Commons Zero v1.0 Universal which is not an OSI approved license.