mitre/cti

STIX data representing MITRE ATT&CK

Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving to other types of threats.

A repository of curated datasets from various attacks

Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.

A python module for working with ATT&CK

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Interesting APT Report Collection And Some Special IOCs

A collection of companies that disclose adversary TTPs after they have been breached

Sophos-originated indicators-of-compromise from published reports