Owner

mitre

176 indexed repositories · View on GitHub

cti
Cyber Threat Intelligence Repository expressed in STIX 2.0

2154 stars
HTTP-Proxy-Servlet
Smiley's HTTP Proxy implemented as a Java servlet

Java · 1487 stars
advmlthreatmatrix
Adversarial Threat Landscape for AI Systems

1114 stars
multiscanner
Modular file scanning/analysis framework

Python · 619 stars
heimdall2
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.

HTML · 291 stars
cascade-server
CASCADE Server

Python · 276 stars
brawl-public-game-001
Data from a BRAWL Automated Adversary Emulation Exercise

215 stars
saf
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools...

HTML · 192 stars
hipcheck
Automatically assess and score software repositories for supply chain risk.

Rust · 133 stars
vulcan
A web application to streamline the development of STIGs from SRGs

Ruby · 87 stars
aws-foundations-cis-baseline
InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

Ruby · 76 stars
quaerite
Search relevance evaluation toolkit

Java · 75 stars
menelaus
Online and batch-based concept and data drift detection algorithms to monitor and maintain ML performance.

Python · 68 stars
pydecipher
pydecipher: unfreeze and deobfuscate your frozen python code

Python · 61 stars
caret
CARET - A tool for viewing cyber analytic relationships

JavaScript · 57 stars
emasser
eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise...

Ruby · 52 stars
device-admin-sample

Java · 51 stars
human
Caldera plugin to deploy "humans" to emulate user behavior on systems

Python · 35 stars
tmnt
Algorithms for training state-of-the-art neural topic models

Python · 34 stars
emu
This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense

Python · 34 stars
156 more repositories live on View on GitHub

Beginner friendly Everything

Open All

Issues somebody may already be working on are listed last. List everything by date

Recurring issue when refreshing the catalog
Open
- Is something wrong?
Difficulty 3/5 1-2 days Newbie friendliness 55/100

mitre/cis-bench#13 · Opened Oct 6, 2026
Update sonarqube mapper
Open
- Is something wrong?
Difficulty 3/5 1-2 days Newbie friendliness 45/100

mitre/heimdall2#8734 · Opened Sep 28, 2026

Maintainers usually reply within 1 day
SCTM import drops lowercase control numbers
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 75/100

mitre/tir#260 · Opened Sep 23, 2026

Maintainers usually reply within 1 day
SCTM import errors are swallowed and never reach the UI
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 75/100

mitre/tir#259 · Opened Sep 23, 2026

Maintainers usually reply within 1 day
SCTM import turns Excel date cells into 1970 dates
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 75/100

mitre/tir#258 · Opened Sep 23, 2026

Maintainers usually reply within 1 day
Nessus export CVSS column labels do not match the temporal values
Open
- Is something wrong?
needs-triage

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

mitre/tir#257 · Opened Sep 23, 2026

Maintainers usually reply within 1 day
Nessus export does not quote every CSV cell
Open
- Is something wrong?
needs-triage

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

mitre/tir#255 · Opened Sep 23, 2026

Maintainers usually reply within 1 day
Add "Still there?" pop-up to allow user to extend session.
Open
- Is something wrong?
feature request

Difficulty 4/5 3-5 days Newbie friendliness 55/100

mitre/vulcan#791 · Opened Sep 21, 2026
Add "Still there?" pop-up to allow user to extend session.
Open
- Is something wrong?
enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

mitre/heimdall2#8695 · Opened Sep 21, 2026

Maintainers usually reply within 1 day
Broken OHDF Schema Link
Open
- Is something wrong?
Difficulty 1/5 Under an hour Newbie friendliness 90/100

mitre/saf-training#569 · Opened Sep 17, 2026

Maintainers usually reply within 2 days
Error on a single file breaks import chain
Open
- Is something wrong?
needs-triage

Difficulty 3/5 1-2 days Newbie friendliness 55/100

mitre/tir#250 · Opened Sep 15, 2026

Maintainers usually reply within 1 day
Prisma Cloud CSPM has no conversion path — both existing converters target Compute (and is the 'prisma-to-hdf' label misleading?)
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

mitre/hdf-libs#324 · 2 comments · Opened Sep 10, 2026

Maintainers usually reply within 1 day
ironbank documentation refers to a non-existent script to setup the envvars
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 72/100

mitre/heimdall2#8648 · Opened Sep 10, 2026

Maintainers usually reply within 1 day
hdf2ckl: empty Check_Content and Fix_Text for CVE-based sources; document intended ASSET population path
Open
- Is something wrong?
enhancement

Difficulty 3/5 1-2 days Newbie friendliness 52/100

mitre/heimdall2#8614 · Opened Sep 1, 2026

Maintainers usually reply within 1 day
Converter for Anchore Enterprise (`anchorectl`) vulnerability output
Open
- Is something wrong?
enhancement hdf-converters

Difficulty 4/5 3-5 days Newbie friendliness 52/100

mitre/heimdall2#8613 · Opened Sep 1, 2026

Maintainers usually reply within 1 day
Generic `saf convert` can never dispatch Grype files: `case 'anchoregrype'` vs. fingerprint value `'grype'`
Open
- Is something wrong?
bug

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

mitre/saf#9702 · Opened Sep 1, 2026

Maintainers usually reply within 1 day
Format fingerprinting misclassifies files: no match threshold, generic keys, and ties resolve by declaration order
Open
- Is something wrong?
bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

mitre/heimdall2#8612 · Opened Sep 1, 2026

Maintainers usually reply within 1 day
`twistlock2hdf`: unmapped severities silently become impact 0, and hdf2ckl then marks those findings Not_Applicable
Open
- Is something wrong?
bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

mitre/heimdall2#8611 · 1 comment · Opened Sep 1, 2026

Maintainers usually reply within 1 day
508-Compliant Accessible Colors
Open
- Is something wrong?
enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mitre/heimdall2#8609 · Opened Sep 1, 2026

Maintainers usually reply within 1 day
Get a strategy for handling UTF-16
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 45/100

mitre/saf#9656 · Opened Aug 27, 2026

Maintainers usually reply within 1 day
Splunk configuration Update to the latest version
Open
- Is something wrong?
Difficulty 3/5 1-2 days Newbie friendliness 72/100

mitre/saf#9654 · 1 comment · Opened Aug 27, 2026

Maintainers usually reply within 1 day
Possible issues with SV-270544/555/557
Open
- Is something wrong?
Difficulty 3/5 1-2 days Newbie friendliness 52/100

mitre/oracle-database-19c-stig-baseline#3 · Opened Aug 27, 2026
amend apply silently no-ops on HDF v2 (InSpec exec-json) results — the shape @mitre/saf converters emit
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 48/100

mitre/hdf-libs#248 · 2 comments · Opened Aug 25, 2026

Maintainers usually reply within 1 day
fix template for draft release to have 'what's new' similar to heimdall repo
Open
- Is something wrong?
Difficulty 3/5 1-2 days Newbie friendliness 35/100

mitre/ts-inspec-objects#778 · Opened Aug 24, 2026

Maintainers usually reply within 1 day
Checkov JUnit XML routes to junit-to-hdf and silently loses its metadata
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 38/100

mitre/hdf-libs#241 · 1 comment · Opened Aug 23, 2026

Maintainers usually reply within 1 day
Derive NIST 800-53 Rev 5 mappings from check text, with scored 1:n candidates and 3PAO adjudication
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 35/100

mitre/hdf-libs#239 · 2 comments · Opened Aug 22, 2026

Maintainers usually reply within 1 day
Add a kics2hdf convert command (native JSON, not SARIF)
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

mitre/saf#9618 · 1 comment · Opened Aug 22, 2026

Maintainers usually reply within 1 day
Install instructions can silently leave Claude Code with zero skills
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 85/100

mitre/mitre-saf-skills#2 · 1 comment · Opened Aug 21, 2026
hdf CLI cannot read or write target/passthrough — attribution requires falling back to saf-cli
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

mitre/hdf-libs#235 · 1 comment · Opened Aug 19, 2026

Maintainers usually reply within 1 day
hdf convert discards target, passthrough and components — attribution cannot survive a conversion or the OSCAL SAR round trip
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 45/100

mitre/hdf-libs#234 · 3 comments · Opened Aug 19, 2026

Maintainers usually reply within 1 day
hdf validate cannot validate HDF v1 (profiles[]) documents that hdf convert detects at 100% confidence
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

mitre/hdf-libs#233 · 1 comment · Opened Aug 19, 2026

Maintainers usually reply within 1 day
Feature request: JUnit XML converter (junit2hdf)
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 45/100

mitre/heimdall2#8538 · 1 comment · Opened Aug 17, 2026

Maintainers usually reply within 1 day
Dependency Updates
Open
- Is something wrong?
enhancement

Difficulty 3/5 1-2 days Newbie friendliness 48/100

mitre/FMACM#44 · Opened Aug 13, 2026
Clean up builder interaction
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 48/100

mitre/im_sample_algorithm#15 · Opened Aug 13, 2026
Remove old code
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 68/100

mitre/im_sample_algorithm#14 · Opened Aug 13, 2026
Fix Typing Issues in components/Override/SystemList.vue
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 65/100

mitre/tir#241 · Opened Aug 10, 2026

Maintainers usually reply within 1 day
Clean Up and Improve controls.ts
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

mitre/tir#240 · Opened Aug 10, 2026

Maintainers usually reply within 1 day
Remove Unnecessary Evaluation Creation from [StigId].vue
Open
- Is something wrong?
Difficulty 2/5 1-3 hours Newbie friendliness 75/100

mitre/tir#239 · Opened Aug 10, 2026

Maintainers usually reply within 1 day
Operation Output Is Misaligned With Commands in MITRE Caldera 5.3.0
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 35/100

mitre/magma#109 · 1 reaction · Opened Aug 9, 2026
Remove Duplicate Boundary_User Include from Boundary List
Open
- Is something wrong?
Difficulty 1/5 Under an hour Newbie friendliness 88/100

mitre/tir#234 · Opened Aug 6, 2026

Maintainers usually reply within 1 day
Add Session Configuration Options to Admin UI
Open
- Is something wrong?
needs-discussion

Difficulty 4/5 3-5 days Newbie friendliness 55/100

mitre/tir#232 · Opened Aug 6, 2026

Maintainers usually reply within 1 day
Import SCTM Hang
May be free again @kevjablonski claimed this 64 days ago, and no pull request is open. Open
- Is something wrong?
mitre/tir#231 · 1 assignee · Opened Aug 6, 2026

Maintainers usually reply within 1 day
Incorrect repo description (AADAPT vs ATLAS)
Open
- Is something wrong?
Difficulty 1/5 Under an hour Newbie friendliness 20/100

mitre/AADAPT#2 · Opened Aug 3, 2026
OHDF ingest for STIG-mappable results files
Open
- Is something wrong?
needs-discussion

Difficulty 4/5 3-5 days Newbie friendliness 58/100

mitre/tir#223 · 1 comment · Opened Jul 26, 2026

Maintainers usually reply within 1 day
Profile fails to load (SyntaxError in SV-270580: %q() delimiter collides with parens); inspec.yml mislabeled 12c; ~35 controls are metadata-only stubs
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 50/100

mitre/oracle-database-19c-stig-baseline#1 · Opened Jul 24, 2026
[Enhancement] Add fix/remediation descriptions to AWS Config → HDF output
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 52/100

mitre/heimdall2#8461 · Opened Jul 23, 2026

Maintainers usually reply within 1 day
[Enhancement] Expand AWS Config NIST mapping coverage & re-baseline to 800-53 Rev 5
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 45/100

mitre/heimdall2#8460 · Opened Jul 23, 2026

Maintainers usually reply within 1 day
Sort tags alphabetically + a discoverable way back to home
Open
- Is something wrong?
Difficulty 3/5 1-2 days Newbie friendliness 58/100

mitre/heimdall2#8457 · 2 comments · Opened Jul 23, 2026

Maintainers usually reply within 1 day
Label comparison view x-axis with date/time and filename
Open
- Is something wrong?
Difficulty 4/5 3-5 days Newbie friendliness 45/100

mitre/heimdall2#8456 · 2 comments · Opened Jul 23, 2026

Maintainers usually reply within 1 day
Export a stored evaluation as an HTML report via API (pipeline artifact retrieval)
Open
- Is something wrong?
Difficulty 5/5 Over a week Newbie friendliness 45/100

mitre/heimdall2#8455 · 3 comments · Opened Jul 23, 2026

Maintainers usually reply within 1 day

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

mitre

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Is something wrong?

Showing the newest 100

Get new issues in your inbox