mrwadams/attackgen

By mrwadams

Updated about 9 hours ago

A cybersecurity incident response testing tool that combines LLMs and the MITRE ATT&CK framework.

Image
Security
Machine learning & AI
1

2.2K

mrwadams/attackgen repository overview

mrwadams/attackgen: Generate tailored incident response scenarios based on MITRE ATT&CK

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

What does this image do?
  • Generates incident response testing scenarios: Leveraging multiple AI providers (OpenAI, Azure OpenAI, Google AI, Mistral, Groq) and locally hosted models (Ollama), AttackGen produces unique incident response testing scenarios.
  • Support for reasoning models: Special handling for models that provide reasoning alongside their output, displayed in collapsible sections for better readability.
  • Enterprise and ICS Support: Generate scenarios using both Enterprise and Industrial Control Systems (ICS) MITRE ATT&CK matrices.
  • User-Friendly Interface: Built with Streamlit, offering a straightforward web interface with features like:
    • Custom scenario generation based on selected ATT&CK techniques
    • Quick-start templates for common attack scenarios
    • AI assistant for refining and discussing scenarios
    • Downloadable scenarios in Markdown format
  • Flexible and Secure: Supports environment variables and .env files for secure credential management.
  • Regularly Updated: Regular updates integrating the latest AI models and addressing user feedback.
How to run this image:
  1. Pull the Image:

    docker pull mrwadams/attackgen
    
  2. Run the Container:

    docker run -p 8501:8501 mrwadams/attackgen
    

    This command makes the app accessible on http://localhost:8501.

  3. Using the Application:

    • Open the provided URL in your web browser
    • Select your preferred model provider (OpenAI, Azure OpenAI, Google AI, Mistral, Groq, or Ollama)
    • Enter your API key and select a model
    • Follow the 'Getting Started' instructions on the welcome page
Environment and Ports:
  • The container uses port 8501
  • Supports various API keys through environment variables:
    • OPENAI_API_KEY
    • AZURE_OPENAI_API_KEY
    • GOOGLE_API_KEY
    • MISTRAL_API_KEY
    • GROQ_API_KEY
    • Optional: LANGCHAIN_API_KEY for LangSmith integration
Contributing:

Your contributions can help improve AttackGen. Please refer to the GitHub repository for contributing guidelines.

License:

AttackGen is made available under the GPL-3.0 licence.

Tag summary

Content type

Image

Digest

sha256:18d6abc65

Size

256.5 MB

Last updated

about 9 hours ago

docker pull mrwadams/attackgen