Linux权限维持

常见的攻击行为监测特征及方法，涵盖端点和流量，未包含PowerShell和Sysmon。预祝运营生活愉快！

ATT&CK实操

xxl-job内存马

User Feedback Space of #MitreAssistant

Analysis of techniques used by Conti ransomware affiliates from their leaked manuals.

Security R package with a set of utils to analyse the different industry standards (MITRE and NIST).

Link RSIT with ATT&CK

SpringBoot java backend for ATT&CK graph knowledge stored in neo4j database.

Main Sigma Rule Repository

Cyber Analytics Repository

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.