Website: https://oasis-open.github.io/cti-documentation/stix/intro Structured Threat Information Expression (STIX™) is a language and serialization format used to exchange cyber threat intelligence (CTI). This is a common, standardized way to share threat information…
Website: http://cwe.mitre.org CWE™ is a community-developed list of software and hardware weakness types. It serves as a common language, a measuring stick for security tools, and as a baseline for…
Website: https://capec.mitre.org/index.html CAPEC is the way an attacker can exploit a CVE or generally target a CWE. From the site:The Common Attack Pattern Enumeration and Classification (CAPEC™) effort provides a…
Website: https://www.iso27001security.com/html/toolkit.html The free ISO27k toolkit is a comprehensive collection of resources designed to assist organizations in improving their information security management. It provides practical and cost-effective solutions for small…
Website: http://www.opensecurityarchitecture.org/cms/index.php Open Security Architecture (OSA) is a community-driven platform that provides free, open-source security architecture resources and tools. The platform was established to help security architects, solution designers, and…
Website: https://www.ism3.com/node/39 O-ISM3 2.0 is an Information Security Management System (ISMS) framework that provides a structured approach to managing information security. It is designed to be customizable to meet the…
Website: https://isc.sans.edu/tools/whereis.html Plug one or more IP addresses into this tool and it will tell you the country and ISP associated with the IPs. This lookup is hosted by SANS,…
Website: https://dnslytics.com Find out everything about a domain name, IP address or provider. Discover relations between them and see historical data. Use it for your digital investigation, fraud prevention or…
MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific…
Search, visualize, drill, and see relationships between frameworks such as NIST CSF, PF, NIST SP 800-53, CSA Cloud Controls, and CIS.