Open-Source Frameworks
Built by SCYTHE. Owned by the community.
Two production-ready open-source projects for purple team programs and detection engineering pipelines — free, GitHub-hosted, and actively maintained.
Purple Team Exercise Framework v4
SCYTHE's open framework for building a formal purple team program. PTEFv4 adds a Maturity Model, Detection Engineering lifecycle, graded 0–5 outcome scoring, AI/ML coverage mapped to MITRE ATLAS, and 10 printable one-pagers. Free. No C2 required.
Sigma Regression Testing Pipeline
140 open-source Sigma rules for Windows, Linux, and M365/Azure — with automated CI/CD validation, pySigma Splunk conversion, and Atomic Red Team regression testing built in. Every rule in production has passed a real technique execution test. MITRE ATT&CK mapped. Free.
eBooks & Reports
Deep dives for security leaders and practitioners.
Practical guides on adversarial emulation, threat exposure management, CTI operationalization, red team maturity, and adversarial behavior detection.
-1.png)
Guides & Reference
Practical frameworks for every stage of your program.
From building a purple team program to structuring incident response — practical reference material for security leaders and practitioners.
.jpg)
Stay Current
New resources drop regularly.
Subscribe to the SCYTHE newsletter to receive new frameworks, guides, and research as they publish — direct to your inbox.