Skills tagged "MITRE ATT&CK"

apt29-cozy-bear - Emulate APT29’s cloud-centric espionage TTPs
APT29 adversary emulation MITRE ATT&CK cloud identity
★ 5,625 · Updated 2026-10-06
Maps APT29’s ATT&CK techniques to Decepticon emulation tooling for authorized red-team exercises.
⚙ Emulate APT29 TTPs ⚙ Map TTPs to Decepticon tooling ⚙ Exercise blue-cell defenses
c2-alternative-channels - Use alternative channels for command and control
command and control Discord Telegram DNS-over-HTTPS
★ 3 · Updated 2026-10-04
Implements command-and-control channels using Discord, Telegram, DNS-over-HTTPS, blockchain contracts, and email or cloud dead drops.
⚙ Relay commands through Discord ⚙ Poll Telegram bot commands ⚙ Tunnel data through DoH
c2-alternative-channels - Alternative channels for command and control
command-and-control Discord Telegram blockchain
★ 5,625 · Updated 2026-10-04
Uses Discord, Telegram, DNS-over-HTTPS, blockchain, email, and cloud services as command-and-control channels.
⚙ Configure Discord webhook C2 ⚙ Poll Telegram bot commands ⚙ Tunnel data through DoH
roth-detection-engineering - Apply portable Sigma and YARA detection engineering
detection engineering Sigma YARA SIEM
★ 666 · Updated 2026-10-02
Create portable Sigma and YARA detection rules using Florian Roth's methodology, including testing, metadata, false-positive documentation, and SIEM conversion.
⚙ Write portable Sigma rules ⚙ Create YARA rules ⚙ Convert Sigma to SIEM queries
red-team - Plan Authorized Red Team Attack Paths
red team offensive security MITRE ATT&CK attack path analysis
★ 0 · Updated 2026-09-30
Plans authorized red team engagements using MITRE ATT&CK techniques, kill-chain phases, scoring, choke-point analysis, OPSEC assessment, and crown-jewel targeting.
⚙ Build attack plans ⚙ Score techniques by effort ⚙ Order kill-chain phases
building-attack-pattern-library-from-cti-reports - Build ATT&CK Attack Pattern Libraries from CTI Reports
attack-pattern CTI reports MITRE ATT&CK STIX
★ 4 · Updated 2026-09-28
Parse CTI reports, map adversary behaviors to MITRE ATT&CK techniques, create a searchable STIX 2.1 attack-pattern library, and generate detection templates.
⚙ Parse CTI reports ⚙ Extract adversary behaviors ⚙ Map ATT&CK technique IDs
attack-ent-t1574-001-dll - MITRE ATT&CK T1574.001 DLL Analysis
MITRE ATT&CK T1574.001 DLL threat hunting
★ 29 · Updated 2026-05-28
Analyze MITRE ATT&CK T1574.001 DLL technique for TTP triage, detection engineering, hunting, and defensive operations
⚙ analyze ATT&CK technique ⚙ map TTPs to evidence ⚙ provide detection guidance