Mitre Attack Python Packages

mitreattack-python

A python module for working with ATT&CK

shuffle-sdk

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

arango-cve-processor

A small python script that enriches Vulnerability STIX Objects with other intel

mitrecve

Get all CVE corresponding to a specific keyword or list of keywords from the MITRE database.

misp-maltego

Maltego transform for interacting with a MISP Threat Sharing community and with MITRE ATT&CK.

arango-cti-processor

A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format.

sh-guard

Semantic shell command safety classifier — AST-based risk scoring for AI coding agents

secopstm

OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, severity scoring, SVG/HTML reports & MITRE Navigator layers. DevSecOps & CI/CD ready.

threatmap

Static IaC threat modeler using STRIDE, MITRE, and PASTA

threatlens-cli

Offline log analysis and threat hunting CLI. Parses EVTX, JSON, Syslog, and CEF logs, runs Sigma rules, detects multi-stage attacks, and produces alerts mapped to MITRE ATT&CK.

demal

Encode and decode MAL (Meta Attack Language) to and from JSON.

mitre-attackctl

A fast, batteries-included CLI companion for MITRE ATT&CK® TTPs.

ttpnav

A package to navigate MITRE ATT&CK data easily.

shuffle-app-sdk

The SDK used for Shuffle