Attack Flow
Attack-chain modeling, sequencing, visualization, and reporting.
Apache-2.0
Reviewed Oct 12, 2026
Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
Attack-chain modeling, sequencing, visualization, and reporting.
Apache-2.0
Reviewed Oct 12, 2026
Isolated automated malware analysis and behavior reporting platform.
GPL-3.0
Reviewed Oct 12, 2026
ATT&CK data-source, detection-strategy, and maturity mapping.
GPL-3.0
Reviewed Oct 12, 2026
Indicator enrichment, analyzer orchestration, and threat-intelligence automation.
AGPL-3.0
Reviewed Oct 12, 2026
Threat-intelligence sharing and incident-context platform.
AGPL-3.0 core; data libraries can have separate terms.
Reviewed Oct 12, 2026
Local ATT&CK knowledge management, extensions, and sharing.
Apache-2.0
Reviewed Oct 12, 2026
Threat-intelligence knowledge graph, collaboration, and reporting platform.
Community Edition Apache-2.0; Enterprise Edition uses separate terms.
Reviewed Oct 12, 2026