The MITRE Corporation

All

507 repositories

saf
Public
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
mitre mitre-corporation mitre-saf security-automation-framework security json compliance security-automation devsecops
TypeScript
•
Other
•42•154•114•42•Updated Jun 26, 2025Jun 26, 2025
heimdall2
Public
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
mitre-saf
TypeScript
•
Other
•69•227•278•68•Updated Jun 26, 2025Jun 26, 2025
saf-lambda-function
Public template
(WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC
aws-lambda serverless mitre aws-security security-automation mitre-corporation aws-la mitre-saf security-automation-framework saf-cli
JavaScript
•
Other
•4•4•4•1•Updated Jun 26, 2025Jun 26, 2025
redhat-enterprise-linux-9-stig-baseline
Public
RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.
validation redhat inspec mitre mitre-saf redhat9
Ruby
•
Other
•4•6•9•4•Updated Jun 26, 2025Jun 26, 2025
ts-inspec-objects
Public
Typescript objects for InSpec profiles
TypeScript
•
Other
•2•3•7•9•Updated Jun 26, 2025Jun 26, 2025
inspec-profile-update-action
Public
Automatically update InSpec profiles using the latest version of DISA STIGs and CIS Benchmarks.
HTML
•
Other
•2•8•10•2•Updated Jun 26, 2025Jun 26, 2025
juniper-srx-services-gateway-ndm-stig-baseline
Public
This InSpec profile is applicable to Juniper SRX Services Gateway NDM Security Technical Implementation Guide
Ruby
•
Other
•0•0•0•0•Updated Jun 25, 2025Jun 25, 2025
emasser
Public
eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise Mission Assurance Support Service (eMASS) by leveraging its representational state transfer (REST) application programming interface (API).
auditing disa security-automation emass mitre-saf emasser ruby
Ruby
•
Other
•13•41•1•2•Updated Jun 25, 2025Jun 25, 2025
juniper-srx-services-gateway-alg-stig-baseline
Public
This InSpec profile is applicable to Juniper SRX Services Gateway ALG Security Technical Implementation Guide.
Ruby
•
Other
•0•0•0•0•Updated Jun 25, 2025Jun 25, 2025
biqt-contact-detector
Public
An extensible component for detecting cosmetic contact lenses in iris imagery.
Python
•
Other
•1•9•0•0•Updated Jun 25, 2025Jun 25, 2025
iat
Public
Iris Analysis Toolkit
Shell
•
Other
•1•2•0•0•Updated Jun 25, 2025Jun 25, 2025
train-juniper
Public
Train transport for Juniper Networks JunOS devices - enables InSpec compliance testing and infrastructure inspection
Ruby
•
Other
•0•2•1•0•Updated Jun 25, 2025Jun 25, 2025
jsonix
Public
Powerful XML<->JSON JavaScript mapping library.
mitre mitre-corporation mitre-saf
JavaScript
•
Other
•82•13•0•0•Updated Jun 24, 2025Jun 24, 2025
AADAPT
Public
Adversarial Actions in Digital Asset Payment Technologies
HTML
•0•0•0•0•Updated Jun 24, 2025Jun 24, 2025
codi
Public
Community and Clinical Data Initiative
codi
JavaScript
•
Apache License 2.0
•1•2•0•0•Updated Jun 23, 2025Jun 23, 2025
saf-training
Public
This repository contains several courses to learn about using and developing SAF capabilities
JavaScript
•
Other
•4•11•7•2•Updated Jun 23, 2025Jun 23, 2025
tir-docs
Public
Documentation for the TIR project
JavaScript
•
Other
•1•2•13•0•Updated Jun 23, 2025Jun 23, 2025
vulcan
Public
A web application to streamline the development of STIGs from SRGs
disa compliance inspec stig srg mitre-corporation mitre-inspec compliance-automation
Ruby
•
Other
•23•75•83•3•Updated Jun 23, 2025Jun 23, 2025
saf_action
Public
GitHub Action for SAF CLI
mitre mitre-corporation mitre-inspec mitre-saf
Shell
•
Other
•1•7•6•1•Updated Jun 23, 2025Jun 23, 2025
hipcheck
Public
Automatically assess and score software repositories for supply chain risk.
supply-chain-security
Rust
•
Apache License 2.0
•11•112•58•9•Updated Jun 23, 2025Jun 23, 2025
nuxt-github-pages
Public
Nuxt module to fix trailing slash issues when deploying to GitHub Pages
TypeScript
•
Other
•1•1•0•1•Updated Jun 23, 2025Jun 23, 2025
inspec
Public
InSpec: Auditing and Testing Framework
Ruby
•
Other
•682•5•0•2•Updated Jun 20, 2025Jun 20, 2025
ansible-rhel7-stig-hardening
Public archive
Ansible role for Red Hat 7 STIG Baseline
redhat rhel7 hardening stig mitre-corporation mitre-inspec mitre-saf
YAML
•
MIT License
•146•7•0•0•Updated Jun 20, 2025Jun 20, 2025
CyberChef
Public
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
JavaScript
•
Apache License 2.0
•3.6k•2•0•0•Updated Jun 20, 2025Jun 20, 2025
aws-rds-crunchy-data-postgresql-16-stig-baseline
Public
InSpec profile to validate the secure configuration of AWS RDS hosted Crunchy Data PostgreSQL against DISA's Crunchy Data PostgreSQL 16 STIG.
Ruby
•
Other
•0•0•0•2•Updated Jun 19, 2025Jun 19, 2025
thumbtack
Public
A web front-end providing a REST-ful API to mount and unmount forensic disk images
forensics
Python
•
Apache License 2.0
•7•24•2•4•Updated Jun 19, 2025Jun 19, 2025
modbus
Public
Caldera for OT Plugin
Python
•
Apache License 2.0
•2•2•0•0•Updated Jun 19, 2025Jun 19, 2025
crunchy-data-postgresql-16-stig-baseline
Public
Crunchy Data Postgres 16 Security Technical Implementation Guide :: Version 1, Release: 1 Benchmark Date: 13 Jun 2024
Ruby
•
Other
•0•0•0•1•Updated Jun 19, 2025Jun 19, 2025
wildcatdam
Public
A dam control simulation for MITRE Caldera for OT
Python
•
Apache License 2.0
•3•0•3•0•Updated Jun 19, 2025Jun 19, 2025
train-plugin-development-guide
Public
Comprehensive tutorial for developing Train plugins - covers all plugin categories with validated examples
0•0•0•0•Updated Jun 17, 2025Jun 17, 2025