The MITRE Corporation

All

466 repositories

saf
Public
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
mitre mitre-corporation mitre-saf security-automation-framework security json compliance security-automation devsecops
TypeScript
•
Other
•38•135•110•20•Updated Dec 26, 2024Dec 26, 2024
heimdall2
Public
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
mitre-saf
TypeScript
•
Other
•59•210•263•54•Updated Dec 26, 2024Dec 26, 2024
inspec-profile-update-action
Public
Automatically update InSpec profiles using the latest version of DISA STIGs and CIS Benchmarks.
HTML
•
Other
•1•8•8•2•Updated Dec 26, 2024Dec 26, 2024
microsoft-365-foundations-cis-baseline
Public
InSpec profile to validate an M365 account to the standards of the CIS Microsoft 365 Foundations Benchmark.
Ruby
•
Other
•1•1•1•1•Updated Dec 25, 2024Dec 25, 2024
o365_example_baseline
Public
Office 365 example profile to test train-pwsh and inspec-pwsh.
Ruby
•
Other
•0•0•0•0•Updated Dec 25, 2024Dec 25, 2024
train-pwsh
Public
An Inspec transport to connect to a persistent Powershell session
Ruby
•
Other
•0•0•1•0•Updated Dec 25, 2024Dec 25, 2024
tir
Public
LM + MITRE SAF project
Vue
•
Other
•0•6•12•43•Updated Dec 25, 2024Dec 25, 2024
ts-inspec-objects
Public
Typescript objects for InSpec profiles
TypeScript
•
Other
•1•3•12•11•Updated Dec 25, 2024Dec 25, 2024
thumbtack
Public
A web front-end providing a REST-ful API to mount and unmount forensic disk images
forensics
Python
•
Apache License 2.0
•6•22•2•5•Updated Dec 24, 2024Dec 24, 2024
hipcheck
Public
Automatically assess and score software repositories for supply chain risk.
supply-chain-security
Rust
•
Apache License 2.0
•6•85•49•4•Updated Dec 24, 2024Dec 24, 2024
caldera
Public
Automated Adversary Emulation Platform
hacking cybersecurity mitre red-team security-automation security-testing mitre-attack adversary-emulation caldera mitre-corporation
Python
•
Apache License 2.0
•1.1k•5.8k•54•7•Updated Dec 23, 2024Dec 23, 2024
saf-training
Public
This repository contains several courses to learn about using and developing SAF capabilities
JavaScript
•
Other
•4•8•13•2•Updated Dec 23, 2024Dec 23, 2024
AI4SWE
Public
Supplemental Materials for the ArchAITecture Research Program
Apache License 2.0
•1•0•0•0•Updated Dec 21, 2024Dec 21, 2024
playbook
Public
HTML
•3•4•0•1•Updated Dec 21, 2024Dec 21, 2024
inspec-pwsh
Public
A resource pack for Inspec that should be used with train-pwsh
Ruby
•
Other
•0•0•1•0•Updated Dec 20, 2024Dec 20, 2024
vulcan
Public
A web application to streamline the development of STIGs from SRGs
disa compliance inspec stig srg mitre-corporation mitre-inspec compliance-automation
Ruby
•
Other
•18•67•71•6•Updated Dec 19, 2024Dec 19, 2024
mitre-saf
Public
Landing Page Content/Builder for MITRE Security Automation Framework
Vue
•
Other
•406•28•24•2•Updated Dec 19, 2024Dec 19, 2024
saf-site-backend
Public
Strapi backend for the SAF site
JavaScript
•
Other
•3•5•5•11•Updated Dec 18, 2024Dec 18, 2024
redhat-enterprise-linux-8-stig-baseline
Public
RHEL 8.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL8.
Ruby
•
Other
•2•1•13•2•Updated Dec 18, 2024Dec 18, 2024
tir-docs
Public
Documentation for the TIR project
JavaScript
•
Other
•0•1•0•4•Updated Dec 17, 2024Dec 17, 2024
fieldmanual
Public
Caldera Documentation Plugin
caldera caldera-plugin
Python
•13•7•0•2•Updated Dec 16, 2024Dec 16, 2024
magma
Public
MITRE Caldera's user interface plugin powered by VueJS
CSS
•
Apache License 2.0
•9•3•4•0•Updated Dec 16, 2024Dec 16, 2024
sample-oracle-mysql-ee-5.7-cis-overlay
Public
Overlay for the baseline InSpec profile at https://github.com/mitre/oracle-mysql-ee-5.7-cis-baseline with modifications based on provided requirements.
Ruby
•0•1•1•1•Updated Dec 12, 2024Dec 12, 2024
keycloak-custom-policies
Public
An event listener for Keycloak for email notification
Java
•28•3•0•1•Updated Dec 12, 2024Dec 12, 2024
ubi8-hardening-demo
Public
Sample code for a Packer template for building a STIG-hardened container
Smarty
•1•2•0•1•Updated Dec 12, 2024Dec 12, 2024
mongodb-enterprise-advanced-3-stig-baseline
Public
InSpec profile for the MongoDB Enterprise Advanced DISA STIG
profile disa inspec stig inspec-profile mitre-corporation mongodb-enterprise disa-stig
Ruby
•
Other
•4•4•2•3•Updated Dec 12, 2024Dec 12, 2024
aws-s3-baseline
Public
A micro InSpec baseline to check for insecure or public s3 buckets in your VPC
aws security s3 s3-bucket inspec aws-security microprofile s3-bucket-leak mitre-corporation s3-security
Ruby
•
Other
•5•14•1•2•Updated Dec 12, 2024Dec 12, 2024
canonical-ubuntu-20.04-lts-stig-baseline
Public
InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 6.
ubuntu stig stig-compliant mitre-corporation mitre-inspec ubuntu2004 mitre-saf
Ruby
•4•7•18•4•Updated Dec 12, 2024Dec 12, 2024
tmnt
Public
Algorithms for training state-of-the-art neural topic models
Python
•
Apache License 2.0
•10•32•1•1•Updated Dec 12, 2024Dec 12, 2024
nginx-stigready-baseline
Public
STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3
nginx security disa inspec stig srg mitre-corporation stigs mitre-saf
Ruby
•
Other
•8•21•5•1•Updated Dec 12, 2024Dec 12, 2024