d3fend

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, severity scoring, SVG/HTML reports & MITRE Navigator layers. DevSecOps & CI/CD ready.

My PhD thesis in Computer Science and related resources: "An Ontological Approach to Security Modeling" (Free University of Bozen-Bolzano)

Express IaC resources as d3fend graphs.

Project Raven D3FEND Defender Edition — CDP-grounded, D3FEND OWL v1.0 canonical, defender-only. Engineering package for OpenAI Cybersecurity Grant submission.

An Ontological Analysis and Redesign of the D3FEND Cybersecurity Model

Security Knowledge Graph Triples

754 structured cybersecurity skills for AI agents. Mapped to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF. Works with Claude Code, GitHub Copilot, Codex, Cursor, Gemini and 20+ platforms. Apache 2.0.

Defensive, local Burp Suite extension mapping existing findings to CWE, OWASP Web/API/Mobile/MASVS/ASVS/GenAI, MITRE ATT&CK/D3FEND/ATLAS/AADAPT/F3 and CVSS 4.0, with explainable confidence and local JSON/CSV/Markdown/SARIF exports.

Correlates CVEs across 8 security frameworks (CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, APT Groups). Interactive web interface with dark/light theme. Automated via GitHub Actions.

Archi-D3FEND test

A local-first home cyber hygiene audit app with D3FEND-informed defensive guidance. Part of the Blanzy Labs AI app family.

Browser game for practicing MITRE ATT&CK technique mapping and D3FEND countermeasures, built on the official datasets.

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

A collection of tools & guides for the planning and implementation of MITRE D3FEND. This repository is independent research and is not an official nor a sanctioned MITRE D3FEND resource.

Behavioural anomaly detection on AWS CloudTrail with a human-gated SOAR containment playbook. Per-principal IAM baselines in DynamoDB, six-step Step Functions response, mapped to ATT&CK for Cloud and D3FEND. All Terraform.

A collection of Large Language Model (LLM) prompts helpful for various cybersecurity tasks.

Python toolchain that maps MITRE ATT&CK techniques to D3FEND defenses and builds ATT&CK Navigator coverage layers from STIX data.

Splunk BOTSv3 SOC investigation - CoinMiner drive-by attack on Frothly Brewing with full MITRE ATT&CK, NIST CSF, NIST 800-53, and CIS Controls v8 framework mappings.

AI security skills grounded in mid-2026 threat reality, not stale framework documentation