The MITRE Corporation

All

485 repositories

saf
Public
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
mitre mitre-corporation mitre-saf security-automation-framework security json compliance security-automation devsecops
TypeScript
•
Other
•40•147•110•13•Updated Mar 14, 2025Mar 14, 2025
heimdall2
Public
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
mitre-saf
TypeScript
•
Other
•64•218•271•56•Updated Mar 14, 2025Mar 14, 2025
saf-site-backend
Public
Strapi backend for the SAF site
JavaScript
•
Other
•4•5•5•15•Updated Mar 13, 2025Mar 13, 2025
tir
Public
LM + MITRE SAF project
Vue
•
Other
•1•7•12•47•Updated Mar 13, 2025Mar 13, 2025
tir-docs
Public
Documentation for the TIR project
JavaScript
•
Other
•1•1•13•0•Updated Mar 13, 2025Mar 13, 2025
azure-foundations-cis-baseline
Public
InSpec profile to validate an Azure cloud environment to the standards of the CIS Azure Foundations Benchmark
Ruby
•
Other
•2•1•0•0•Updated Mar 13, 2025Mar 13, 2025
redhat-enterprise-linux-8-stig-baseline
Public
RHEL 8.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL8.
Ruby
•
Other
•3•1•15•3•Updated Mar 13, 2025Mar 13, 2025
saf_action
Public
GitHub Action for SAF CLI
mitre mitre-corporation mitre-inspec mitre-saf
Shell
•
Other
•1•7•6•1•Updated Mar 13, 2025Mar 13, 2025
tmnt
Public
Algorithms for training state-of-the-art neural topic models
Python
•
Apache License 2.0
•11•32•1•1•Updated Mar 13, 2025Mar 13, 2025
hipcheck
Public
Automatically assess and score software repositories for supply chain risk.
supply-chain-security
Rust
•
Apache License 2.0
•9•102•58•3•Updated Mar 13, 2025Mar 13, 2025
saf-training
Public
This repository contains several courses to learn about using and developing SAF capabilities
JavaScript
•
Other
•4•10•8•2•Updated Mar 13, 2025Mar 13, 2025
saf-lambda-function
Public template
(WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC
aws-lambda serverless mitre aws-security security-automation mitre-corporation aws-la mitre-saf security-automation-framework saf-cli
JavaScript
•
Other
•4•4•4•0•Updated Mar 13, 2025Mar 13, 2025
inspec-profile-update-action
Public
Automatically update InSpec profiles using the latest version of DISA STIGs and CIS Benchmarks.
HTML
•
Other
•2•8•10•2•Updated Mar 13, 2025Mar 13, 2025
homebrew-saf
Public
Ruby
•1•1•0•1•Updated Mar 12, 2025Mar 12, 2025
emasser
Public
eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise Mission Assurance Support Service (eMASS) by leveraging its representational state transfer (REST) application programming interface (API).
auditing disa security-automation emass mitre-saf emasser ruby
Ruby
•
Other
•12•37•1•2•Updated Mar 12, 2025Mar 12, 2025
caldera
Public
Automated Adversary Emulation Platform
hacking cybersecurity mitre red-team security-automation security-testing mitre-attack adversary-emulation caldera mitre-corporation
Python
•
Apache License 2.0
•1.1k•5.9k•69•8•Updated Mar 12, 2025Mar 12, 2025
google-chrome-v2r6-stig-baseline
Public
(WIP) Google Chrome Windows Security Technical Implementation Guide
saf mitre lockheed-martin mitre-corporation mitre-saf
Ruby
•
Other
•3•3•0•0•Updated Mar 11, 2025Mar 11, 2025
emu
Public
This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
adversary-emulation caldera caldera-plugin
Python
•
Apache License 2.0
•12•30•2•1•Updated Mar 11, 2025Mar 11, 2025
stockpile
Public
A CALDERA plugin
caldera caldera-plugin
PowerShell
•
Apache License 2.0
•47•75•0•3•Updated Mar 11, 2025Mar 11, 2025
dnp3
Public
Caldera for OT Plugin
C++
•
Apache License 2.0
•2•2•0•0•Updated Mar 11, 2025Mar 11, 2025
ts-inspec-objects
Public
Typescript objects for InSpec profiles
TypeScript
•
Other
•2•3•7•5•Updated Mar 11, 2025Mar 11, 2025
vulcan
Public
A web application to streamline the development of STIGs from SRGs
disa compliance inspec stig srg mitre-corporation mitre-inspec compliance-automation
Ruby
•
Other
•20•71•76•3•Updated Mar 8, 2025Mar 8, 2025
aws-rds-crunchy-data-postgresql-stig-baseline
Public
InSpec profile to validate the secure configuration of AWS RDS hosted Crunchy Data PostgreSQL against DISA's Crunchy Data PostgreSQL STIG Version 3 Release 1.
Ruby
•
Other
•2•3•3•0•Updated Mar 8, 2025Mar 8, 2025
codi
Public
Community and Clinical Data Initiative
codi
JavaScript
•
Apache License 2.0
•1•2•0•0•Updated Mar 6, 2025Mar 6, 2025
crunchy-data-postgresql-stig-baseline
Public
InSpec profile for Crunchy Data PostgreSQL Security Technical Implementation Guide :: Version 3, Release: 1 Benchmark Date: 24 Jul 2024
Ruby
•
Other
•4•7•9•3•Updated Mar 6, 2025Mar 6, 2025
canonical-ubuntu-22.04-lts-stig-baseline
Public
(WIP) InSpec profile to validate the secure configuration of Ubuntu 22.04, against DISA's Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 1
Ruby
•
Other
•1•0•1•2•Updated Mar 6, 2025Mar 6, 2025
redhat-enterprise-linux-9-stig-baseline
Public
RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.
validation redhat inspec mitre mitre-saf redhat9
Ruby
•
Other
•4•6•4•2•Updated Mar 6, 2025Mar 6, 2025
salsa
Public
A generic framework for on-demand, incrementalized computation. Inspired by adapton, glimmer, and rustc's query system.
Rust
•
Apache License 2.0
•164•0•0•1•Updated Mar 4, 2025Mar 4, 2025
thumbtack
Public
A web front-end providing a REST-ful API to mount and unmount forensic disk images
forensics
Python
•
Apache License 2.0
•7•23•2•4•Updated Mar 4, 2025Mar 4, 2025
seal_lib
Public
Rust
•
Apache License 2.0
•1•0•0•0•Updated Mar 3, 2025Mar 3, 2025