diamond-model

STIX 2.1 Visualizer, Attack and Activity Thread Graph for Threat Modeling

Claude skill to convert CTI reports into cyber kill chain, Diamond Model views and create a TTP-to-ATT&CK/ATLAS mapping, IOC - IPs, domains, emails, hashes, file paths, registry keys, CVEs, malware, threat actors - extraction.

Notes on Pyramid of Pain, Cyber Kill Chain, Unified Kill Chain, Diamond Model and MITRE ATT&CK

Auditable CTI reasoning: ATT&CK TTP extraction, campaign clustering and ACH attribution with false-flag-aware confidence, benchmarked on real ATT&CK, TRAM2 and APTnotes

A security-first cyber threat intelligence platform for cyber teams: notebook-based collection, structured report authoring, and requirement-aligned dissemination.