rabbitstack / fibratus

Security sensor for realtime threat detection and protection

DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

beenuar / AiSOC

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

OpenAEV-Platform / openaev

Open Adversarial Exposure Validation Platform

mrwadams / attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

DataDog / KubeHound

Tool for building Kubernetes attack paths

mvelazc0 / BadZure

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and configurable, traversable attack paths.

armourinfosec / Enterprise-Windows-Infrastructure-Security

An Obsidian-based knowledge base for Windows Server administration and defensive hardening.

Adversarial-Detection-Engineering / adeskills

Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-team scoping tooling.

joshuagodwin7929 / Purple-Team-Automation

Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.

Blackfrost-AI / Cyber-Frost-Harness

Native red, blue, and purple security-agent harness for CYBER-FROST

M-med / Active-Directory-Simulation-Attack-

A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.

JoasASantos / NeuroPurple

The AI Autonomous SOC & Purple-Team Engine

Krishita17 / PhantomTap

A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.