Mitre Attack Python Packages

mitreattack-python

A python module for working with ATT&CK

shuffle-sdk

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

industrialxpl-forge

The World's Largest OT/ICS/SCADA Security Assessment Framework. Python-First. 976+ modules, 150+ vendors, 50 protocols, MITRE ATT&CK for ICS 82%, SAST/LLM, 26 ICS malware TTPs.

arango-cve-processor

A small python script that enriches Vulnerability STIX Objects with other intel

mitrecve

Get all cve corresponding to a specific keyword or a list of keywords from the mitre database (https://cve.mitre.org/)

1200km-aidebug

AI-assisted malware reverse-engineering debugger with ATT&CK, YARA, IOC, and report output.

sigmalint-cli

ESLint-style linter for Sigma detection rules. Validates against Sigma 2.1.0, scores rules across six quality dimensions, emits stable rule IDs.

arango-cti-processor

A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format.

cepheus-engine

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

misp-maltego

Maltego transform for interacting with a MISP Threat Sharing community and with MITRE ATT&CK.

sh-guard

Semantic shell command safety classifier for AI coding agents — AST-based risk scoring in under 100 microseconds

threatmap

IaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and Kubernetes.

threatlens-cli

Log Analysis & Threat Hunting CLI

secopstm

A STRIDE threat analysis framework with MITRE ATT&CK integration.

openagentontology

Auto-generate a governance ontology, Trust Profile, and signed badge for any agent, MCP server, repo, OpenAPI, Rego, or workflow. The OpenTelemetry for agent governance.

demal

Encode and decode MAL (Meta Attack Language) to and from JSON.

mitre-attackctl

A fast, batteries-included CLI companion for MITRE ATT&CK® TTPs

sentinelforge

Autonomous AI Cyber Defense Agent Framework — LangGraph-powered SOC automation with constitutional safety guardrails

ttpnav

A package to navigate MITRE ATT&CK data easily.

shuffle-app-sdk

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.