Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, severity scoring, SVG/HTML reports & MITRE Navigator layers. DevSecOps & CI/CD ready.

My PhD thesis in Computer Science and related resources: "An Ontological Approach to Security Modeling" (Free University of Bozen-Bolzano)

Express IaC resources as d3fend graphs.

Project Raven D3FEND Defender Edition — CDP-grounded, D3FEND OWL v1.0 canonical, defender-only. Engineering package for OpenAI Cybersecurity Grant submission.

An Ontological Analysis and Redesign of the D3FEND Cybersecurity Model

754 structured cybersecurity skills for AI agents. Mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF. Works with Claude Code, GitHub Copilot, Codex, Cursor, Gemini and 20+ platforms. Apache 2.0.

Security Knowledge Graph Triples

Correlates CVEs across 8 security frameworks (CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, APT Groups). Interactive web interface with dark/light theme. Automated via GitHub Actions.

A collection of tools & guides for the planning and implementation of MITRE D3FEND. This repository is independent research and is not an official nor a sanctioned MITRE D3FEND resource.

Browser game for practicing MITRE ATT&CK technique mapping and D3FEND countermeasures, built on the official datasets.

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

A local-first home cyber hygiene audit app with D3FEND-informed defensive guidance. Part of the Blanzy Labs AI app family.

Archi-D3FEND test

A collection of Large Language Model (LLM) prompts helpful for various cybersecurity tasks.

Python toolchain that maps MITRE ATT&CK techniques to D3FEND defenses and builds ATT&CK Navigator coverage layers from STIX data.

Splunk BOTSv3 SOC investigation - CoinMiner drive-by attack on Frothly Brewing with full MITRE ATT&CK, NIST CSF, NIST 800-53, and CIS Controls v8 framework mappings.

AI security skills grounded in mid-2026 threat reality, not stale framework documentation