The MITRE Corporation

All

493 repositories

hipcheck
Public
Automatically assess and score software repositories for supply chain risk.
supply-chain-security
Rust
•
Apache License 2.0
•9•104•55•10•Updated Apr 4, 2025Apr 4, 2025
crunchy-data-postgresql-16-stig-baseline
Public
Crunchy Data Postgres 16 Security Technical Implementation Guide :: Version 1, Release: 1 Benchmark Date: 13 Jun 2024
Ruby
•
Other
•0•0•1•0•Updated Apr 4, 2025Apr 4, 2025
microsoft-windows-11-stig-baseline
Public
Inspec validation profile for Microsoft Windows 11 Security Technical Implementation Guide :: Version 2, Release 2 :: Benchmark Date: 15 Nov 2024
Ruby
•
Other
•0•0•1•0•Updated Apr 4, 2025Apr 4, 2025
azure-foundations-cis-baseline
Public
Inspec validation profile for CIS Microsoft Azure Foundations Benchmark v3.0.0 - 09-05-2024
Ruby
•
Other
•2•1•1•0•Updated Apr 4, 2025Apr 4, 2025
saf-training
Public
This repository contains several courses to learn about using and developing SAF capabilities
JavaScript
•
Other
•4•11•8•2•Updated Apr 4, 2025Apr 4, 2025
canonical-ubuntu-24.04-lts-stig-baseline
Public
(WIP) InSpec profile to validate the secure configuration of Ubuntu 22.04, against DISA's Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 1
Ruby
•
Other
•0•0•1•0•Updated Apr 4, 2025Apr 4, 2025
heimdall2
Public
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
mitre-saf
TypeScript
•
Other
•65•218•271•56•Updated Apr 4, 2025Apr 4, 2025
saf
Public
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
mitre mitre-corporation mitre-saf security-automation-framework security json compliance security-automation devsecops
TypeScript
•
Other
•40•148•112•9•Updated Apr 4, 2025Apr 4, 2025
ts-inspec-objects
Public
Typescript objects for InSpec profiles
TypeScript
•
Other
•2•3•7•5•Updated Apr 4, 2025Apr 4, 2025
tir-docs
Public
Documentation for the TIR project
JavaScript
•
Other
•1•1•13•0•Updated Apr 3, 2025Apr 3, 2025
caldera
Public
Automated Adversary Emulation Platform
hacking cybersecurity mitre red-team security-automation security-testing mitre-attack adversary-emulation caldera mitre-corporation
Python
•
Apache License 2.0
•1.1k•6k•67•7•Updated Apr 3, 2025Apr 3, 2025
canonical-ubuntu-22.04-lts-stig-baseline
Public
(WIP) InSpec profile to validate the secure configuration of Ubuntu 22.04, against DISA's Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 1
Ruby
•
Other
•1•1•1•3•Updated Apr 3, 2025Apr 3, 2025
inspec-profile-update-action
Public
Automatically update InSpec profiles using the latest version of DISA STIGs and CIS Benchmarks.
HTML
•
Other
•2•8•10•2•Updated Apr 3, 2025Apr 3, 2025
saf-site-backend
Public
Strapi backend for the SAF site
JavaScript
•
Other
•4•5•5•18•Updated Apr 2, 2025Apr 2, 2025
pickled-canary
Public
Assembly-based binary pattern search!
Java
•
Apache License 2.0
•4•14•0•1•Updated Apr 2, 2025Apr 2, 2025
playbook
Public
HTML
•4•4•0•2•Updated Apr 1, 2025Apr 1, 2025
tmnt
Public
Algorithms for training state-of-the-art neural topic models
Python
•
Apache License 2.0
•11•33•1•1•Updated Mar 31, 2025Mar 31, 2025
redhat-enterprise-linux-9-stig-baseline
Public
RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.
validation redhat inspec mitre mitre-saf redhat9
Ruby
•
Other
•3•6•4•3•Updated Mar 30, 2025Mar 30, 2025
redhat-enterprise-linux-8-stig-baseline
Public
RHEL 8.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL8.
Ruby
•
Other
•3•2•14•2•Updated Mar 28, 2025Mar 28, 2025
aws-rds-crunchy-data-postgresql-stig-baseline
Public
InSpec profile to validate the secure configuration of AWS RDS hosted Crunchy Data PostgreSQL against DISA's Crunchy Data PostgreSQL STIG Version 3 Release 1.
Ruby
•
Other
•2•3•3•0•Updated Mar 28, 2025Mar 28, 2025
kube-secure-scanner
Public
A flexible, security-focused framework for scanning containers in Kubernetes environments with multiple scanning engines and comprehensive security controls.
Shell
•
Other
•0•0•2•0•Updated Mar 27, 2025Mar 27, 2025
codi
Public
Community and Clinical Data Initiative
codi
JavaScript
•
Apache License 2.0
•1•2•0•0•Updated Mar 27, 2025Mar 27, 2025
aws-rds-crunchy-data-postgresql-16-stig-baseline
Public
InSpec profile to validate the secure configuration of AWS RDS hosted Crunchy Data PostgreSQL against DISA's Crunchy Data PostgreSQL 16 STIG.
Ruby
•
Other
•0•0•0•1•Updated Mar 26, 2025Mar 26, 2025
ironbank_release_action
Public
GitHub Action to automate releases on to Iron Bank
Other
•0•0•0•0•Updated Mar 24, 2025Mar 24, 2025
sandcat
Public
A CALDERA plugin
caldera caldera-plugin
Go
•
Apache License 2.0
•38•66•6•3•Updated Mar 24, 2025Mar 24, 2025
tir
Public
LM + MITRE SAF project
Vue
•
Other
•1•7•12•49•Updated Mar 23, 2025Mar 23, 2025
emasser
Public
eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise Mission Assurance Support Service (eMASS) by leveraging its representational state transfer (REST) application programming interface (API).
auditing disa security-automation emass mitre-saf emasser ruby
Ruby
•
Other
•12•39•1•1•Updated Mar 21, 2025Mar 21, 2025
heimdall2-helm
Public
A helm chart for MITRE SAF's Heimdall 2.
Smarty
•
BSD 3-Clause "New" or "Revised" License
•5•2•4•0•Updated Mar 21, 2025Mar 21, 2025
fieldmanual
Public
Caldera Documentation Plugin
caldera caldera-plugin
Python
•13•7•0•2•Updated Mar 21, 2025Mar 21, 2025
vulcan-helm
Public
A helm chart for MITRE SAF Vulcan
security-automation mitre-corporation mitre-saf security-automation-framework
Shell
•
Other
•3•1•0•0•Updated Mar 18, 2025Mar 18, 2025