MITRE Cyber Analytics Repository (CAR)
MITRE Cyber Analytics Repository (CAR)
MITRE's Cyber Analytics Repository: detection analytics mapped to ATT&CK techniques, each with a hypothesis, pseudocode and tool-specific implementations (e.g. Splunk, EQL), as a website and YAML files on GitHub.
Required Attribution:
Apache-2.0: keep the licence text and copyright notices.
Coverage
The site says: "The MITRE Cyber Analytics Repository (CAR) is a knowledge base of analytics developed by MITRE based on the MITRE ATT&CK adversary model." Update frequency: Not stated; the GitHub repository's last commit was in May 2025.
Verdict
Free website and YAML analytics on GitHub. Licensed Apache-2.0: the repository licence file is the "Apache License Version 2.0, January 2004". Rate limits: Not stated. Signal Lab links only.
Get the free weekly email
Free weekly email of newly verified free data. Unsubscribe by emailing us.
By entering your email and clicking Subscribe, you agree to receive the Signal Lab weekly email from Quantum Data Technologies Ltd., 3200-650 West Georgia Street, Vancouver, BC V6B 4P7, Canada (signal-lab@qdt.ai). You can unsubscribe at any time: reply "unsubscribe" to any email or write to signal-lab@qdt.ai. See our Privacy Policy.
Information and education only. Not financial, investment, legal or tax advice. Listings can be inaccurate, incomplete or out of date and are provided "as is". Free tiers, limits and licenses belong to each provider and can change, so check the provider's own terms before you rely on them. Terms & Disclaimer