MA
Uploaded byMITRE ATT&CK
PDF, PPTX613 views

ATT&CK Updates- ATT&CK's Open Source

Jared Ondricek leads software development for ATT&CK. Recent updates include adding ICS content to the website, improving detection objects and campaigns pages, custom links and SVG export in Navigator, authentication and other improvements in Workbench, transitioning the TAXII server to STIX 2.1 and OpenAPI, merging the Python library with other scripts, and planning to centralize GitHub documentation. Future work includes further Workbench, TAXII, and Python improvements along with a centralized GitHub landing page.

Embed presentation

Download as PDF, PPTX
ATT&CK Software Updates Jared Ondricek ATT&CK Software Development Lead @jondrice /jondricek ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Who am I • Lead DevOps Engineer • Automate all the things! • Manage some things: • ATT&CK website: attack.mitre.org • Navigator • Workbench • Public TAXII server • mitreattack-python library • GitHub presence ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Website Updates: ICS ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Website Updates: ICS ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Website Updates: Detection Objects ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Website Updates: Campaigns ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Website Updates: Search ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Navigator Updates: SVG Export ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Navigator Updates: SVG Export ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Navigator Updates: Custom Links ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Navigator Updates: Custom Links ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
Workbench Updates: Roadmap ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25 1.2.0 Authentication 1.3.0 ID Generation 1.5.0 Table Improvements 1.6.0 Notes Improvements 1.4.0 Sub-technique improvements
TAXII Server Updates TAXII 2.0 Server • cti-taxii.mitre.org • Already available • Documentation on GitHub /mitre/cti USAGE.md • STIX 2.0 only TAXII 2.1 Server • Coming May 2022 • Works with custom ATT&CK Workbench backend • REST API is OpenAPI compliant (dynamic docs) • Supports STIX 2.0 and 2.1 ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
mitreattack-python • pip install mitreattack-python • Converts STIX to Excel • Converts STIX to Collections (for use with Workbench) • Manipulates ATT&CK Navigator layer files • Create dynamic, custom layers • Combine layers • Export layers (Excel, SVG) • Future: merge with mitre-attack/attack-scripts • Future: Convenience methods to connect to TAXII server ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
GitHub Updates • Too many places to check • github.com/mitre/cti • github.com/mitre-attack • github.com/center-for-threat-informed-defense • Future: plan for centralized landing page to document all efforts ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25 TAXII server Workbench STIX 2.0 data STIX 2.1 data Python library Website source Collection Manager
Conclusion • Website: Campaigns & better search • Navigator: Better exports & custom linking • Workbench: Steady improvements • TAXII 2.1 server: Customization & documentation • mitreattack-python: Merge with attack-scripts • GitHub: Central landing page ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
https://attack.mitre.org attack@mitre.org @mitreattack Jared Ondricek @jondrice /jondricek ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25

More Related Content

PDF
Exploring how Students Map Social Engineering Techniques to the ATT&CK Framew...
byMITRE ATT&CK
 
PDF
ATT&CK Updates- ATT&CK for ICS
byMITRE ATT&CK
 
PDF
ATT&CKing the Red/Blue Divide
byMITRE ATT&CK
 
PDF
ATT&CKING Containers in The Cloud
byMITRE ATT&CK
 
PDF
The ATT&CK Philharmonic
byMITRE ATT&CK
 
PDF
Mapping ATT&CK Techniques to ENGAGE Activities
byMITRE ATT&CK
 
PDF
It's just a jump to the left (of boom): Prioritizing detection implementation...
byMITRE ATT&CK
 
PDF
Would you Rather Have Telemetry into 2 Attacks or 20? An Insight Into Highly ...
byMITRE ATT&CK
 
Exploring how Students Map Social Engineering Techniques to the ATT&CK Framew...
byMITRE ATT&CK
 
ATT&CK Updates- ATT&CK for ICS
byMITRE ATT&CK
 
ATT&CKing the Red/Blue Divide
byMITRE ATT&CK
 
ATT&CKING Containers in The Cloud
byMITRE ATT&CK
 
The ATT&CK Philharmonic
byMITRE ATT&CK
 
Mapping ATT&CK Techniques to ENGAGE Activities
byMITRE ATT&CK
 
It's just a jump to the left (of boom): Prioritizing detection implementation...
byMITRE ATT&CK
 
Would you Rather Have Telemetry into 2 Attacks or 20? An Insight Into Highly ...
byMITRE ATT&CK
 

What's hot

PDF
State of the ATT&CK
byMITRE ATT&CK
 
PDF
Intelligence Failures of Lincolns Top Spies: What CTI Analysts Can Learn Fro...
byMITRE ATT&CK
 
PDF
ATT&CK Metaverse - Exploring the Limitations of Applying ATT&CK
byMITRE ATT&CK
 
PDF
Threat Modelling - It's not just for developers
byMITRE ATT&CK
 
PDF
ATT&CK Updates- Defensive ATT&CK
byMITRE ATT&CK
 
PDF
Mapping to MITRE ATT&CK: Enhancing Operations Through the Tracking of Interac...
byMITRE ATT&CK
 
PDF
How MITRE ATT&CK helps security operations
bySergey Soldatov
 
PDF
ATT&CKcon Intro
byMITRE ATT&CK
 
PDF
What is ATT&CK coverage, anyway? Breadth and depth analysis with Atomic Red Team
byMITRE ATT&CK
 
PDF
When Insiders ATT&CK!
byMITRE ATT&CK
 
PDF
Projects to Impact- Operationalizing Work from the Center
byMITRE ATT&CK
 
PPTX
Putting MITRE ATT&CK into Action with What You Have, Where You Are
byKatie Nickels
 
PDF
The ATT&CK Latin American APT Playbook
byMITRE ATT&CK
 
PPTX
Adversary Emulation using CALDERA
byErik Van Buggenhout
 
PDF
Tracking Noisy Behavior and Risk-Based Alerting with ATT&CK
byMITRE ATT&CK
 
PDF
MITRE ATT&CKcon 2.0: Prioritizing ATT&CK Informed Defenses the CIS Way; Phili...
byMITRE - ATT&CKcon
 
PPTX
Adversary Emulation using CALDERA
byErik Van Buggenhout
 
PPTX
Kheirkhabarov24052017_phdays7
byTeymur Kheirkhabarov
 
PDF
MITRE ATT&CKcon 2.0: Using Threat Intelligence to Focus ATT&CK Activities; Da...
byMITRE - ATT&CKcon
 
PDF
The New Pentest? Rise of the Compromise Assessment
byInfocyte
 
State of the ATT&CK
byMITRE ATT&CK
 
Intelligence Failures of Lincolns Top Spies: What CTI Analysts Can Learn Fro...
byMITRE ATT&CK
 
ATT&CK Metaverse - Exploring the Limitations of Applying ATT&CK
byMITRE ATT&CK
 
Threat Modelling - It's not just for developers
byMITRE ATT&CK
 
ATT&CK Updates- Defensive ATT&CK
byMITRE ATT&CK
 
Mapping to MITRE ATT&CK: Enhancing Operations Through the Tracking of Interac...
byMITRE ATT&CK
 
How MITRE ATT&CK helps security operations
bySergey Soldatov
 
ATT&CKcon Intro
byMITRE ATT&CK
 
What is ATT&CK coverage, anyway? Breadth and depth analysis with Atomic Red Team
byMITRE ATT&CK
 
When Insiders ATT&CK!
byMITRE ATT&CK
 
Projects to Impact- Operationalizing Work from the Center
byMITRE ATT&CK
 
Putting MITRE ATT&CK into Action with What You Have, Where You Are
byKatie Nickels
 
The ATT&CK Latin American APT Playbook
byMITRE ATT&CK
 
Adversary Emulation using CALDERA
byErik Van Buggenhout
 
Tracking Noisy Behavior and Risk-Based Alerting with ATT&CK
byMITRE ATT&CK
 
MITRE ATT&CKcon 2.0: Prioritizing ATT&CK Informed Defenses the CIS Way; Phili...
byMITRE - ATT&CKcon
 
Adversary Emulation using CALDERA
byErik Van Buggenhout
 
Kheirkhabarov24052017_phdays7
byTeymur Kheirkhabarov
 
MITRE ATT&CKcon 2.0: Using Threat Intelligence to Focus ATT&CK Activities; Da...
byMITRE - ATT&CKcon
 
The New Pentest? Rise of the Compromise Assessment
byInfocyte
 

Similar to ATT&CK Updates- ATT&CK's Open Source

PDF
MITRE ATT&CK Updates: Software - Jared Ondricek
byMITRE ATT&CK
 
PDF
MITRE ATT&CK Updates: Software
byMITRE ATT&CK
 
PDF
State of the ATT&CK May 2023
byAdam Pennington
 
PDF
State of ATT&CK
byAdam Pennington
 
PDF
State of the ATT&CK 2024 - Adam Pennington
byMITRE ATT&CK
 
PDF
MITRE ATT&CKcon 2.0: ATT&CK Updates - Cyber Analytics Repository (CAR); Ivan ...
byMITRE - ATT&CKcon
 
PDF
MITRE ATT&CK Updates: State of the ATT&CK (ATT&CKcon 4.0 Edition)
byMITRE ATT&CK
 
PDF
MITRE ATT&CK Updates: CTI - Path Forward - Joe Slowik
byMITRE ATT&CK
 
PDF
Updates from the Center for Threat-Informed Defense
byMITRE ATT&CK
 
PDF
Driving Intelligence with MITRE ATT&CK: Leveraging Limited Resources to Build...
byMITRE ATT&CK
 
PDF
MITRE Engenuity Center for Threat Informed Defense Impact Report 2022.pdf
byAdamAzrylJohan
 
PDF
MITRE ATT&CKcon 2018: Hunters ATT&CKing with the Data, Roberto Rodriguez, Spe...
byMITRE - ATT&CKcon
 
PPTX
STIX2-TAXII2_Update
byCyber Threat Intelligence Network (CTIN)
 
PDF
Using the MITRE ATT&CK framework to analyze real-world cyberattacks
bylucytyrteos
 
PPTX
Leveraging MITRE ATT&CK - Speaking the Common Language
byErik Van Buggenhout
 
PDF
What's New with ATTACK for ICS?
byMITRE - ATT&CKcon
 
PDF
C2 Matrix Anniversary - Blackhat EU 2020
byJorge Orchilles
 
PDF
MITRE ATT&CKcon 2.0: ATT&CK Updates - ICS; Otis Alexander, MITRE
byMITRE - ATT&CKcon
 
PDF
SANS_Minneapolis_2015_ThreatIntelligence_NeighborhoodWatchForYourNetworks
byMatthew J. Harmon
 
PPTX
Homeland Open Security Technologies (HOST)
byJoshua L. Davis
 
MITRE ATT&CK Updates: Software - Jared Ondricek
byMITRE ATT&CK
 
MITRE ATT&CK Updates: Software
byMITRE ATT&CK
 
State of the ATT&CK May 2023
byAdam Pennington
 
State of ATT&CK
byAdam Pennington
 
State of the ATT&CK 2024 - Adam Pennington
byMITRE ATT&CK
 
MITRE ATT&CKcon 2.0: ATT&CK Updates - Cyber Analytics Repository (CAR); Ivan ...
byMITRE - ATT&CKcon
 
MITRE ATT&CK Updates: State of the ATT&CK (ATT&CKcon 4.0 Edition)
byMITRE ATT&CK
 
MITRE ATT&CK Updates: CTI - Path Forward - Joe Slowik
byMITRE ATT&CK
 
Updates from the Center for Threat-Informed Defense
byMITRE ATT&CK
 
Driving Intelligence with MITRE ATT&CK: Leveraging Limited Resources to Build...
byMITRE ATT&CK
 
MITRE Engenuity Center for Threat Informed Defense Impact Report 2022.pdf
byAdamAzrylJohan
 
MITRE ATT&CKcon 2018: Hunters ATT&CKing with the Data, Roberto Rodriguez, Spe...
byMITRE - ATT&CKcon
 
STIX2-TAXII2_Update
byCyber Threat Intelligence Network (CTIN)
 
Using the MITRE ATT&CK framework to analyze real-world cyberattacks
bylucytyrteos
 
Leveraging MITRE ATT&CK - Speaking the Common Language
byErik Van Buggenhout
 
What's New with ATTACK for ICS?
byMITRE - ATT&CKcon
 
C2 Matrix Anniversary - Blackhat EU 2020
byJorge Orchilles
 
MITRE ATT&CKcon 2.0: ATT&CK Updates - ICS; Otis Alexander, MITRE
byMITRE - ATT&CKcon
 
SANS_Minneapolis_2015_ThreatIntelligence_NeighborhoodWatchForYourNetworks
byMatthew J. Harmon
 
Homeland Open Security Technologies (HOST)
byJoshua L. Davis
 

More from MITRE ATT&CK

PDF
Next-Gen Threat-Informed Defense: Human-Assisted Intelligent Agents - Rajesh ...
byMITRE ATT&CK
 
PDF
Birds of a Feather: The Evolution of Threat Actor Prioritization, Gap Analysi...
byMITRE ATT&CK
 
PDF
Using ATT&CK and MITRE CTID’s StP Frameworks to Assess Threat Detection Resil...
byMITRE ATT&CK
 
PDF
Bridging the Gap: Enhancing Detection Coverage with Atomic Red Team, Sigma, a...
byMITRE ATT&CK
 
PDF
SaaSy ATT&CK – Practical ATT&CK usage for SaaS-based Telemetry - Aaron Shelmire
byMITRE ATT&CK
 
PDF
I'll take ATT&CK techniques that can be done for $1000, Alex. - Ben Langrill
byMITRE ATT&CK
 
PDF
Practical Application of MITRE ATT&CK: Real World Usage in a Corporate Enviro...
byMITRE ATT&CK
 
PDF
This is why we don’t shout “Bingo”: Analyzing ATT&CK Integration in Endpoint ...
byMITRE ATT&CK
 
PDF
Every Cloud Has a Purple Lining - Arun Seelagan
byMITRE ATT&CK
 
PDF
Confession: 3 Things I Wish I Knew About MITRE ATT&CK When I Was an FBI Profi...
byMITRE ATT&CK
 
PDF
ATT&CKcon 5.0 Keynote - From Ticket Closers to Practitioners- How Great Secu...
byMITRE ATT&CK
 
PDF
ATT&CKcon 5.0 Lightning Talks - Various Speakers
byMITRE ATT&CK
 
PDF
MITRE ATT&CK Updates: Defensive ATT&CK - Lex Crumpton
byMITRE ATT&CK
 
PDF
MITRE ATT&CK Updates: Enterprise - Casey Knerr
byMITRE ATT&CK
 
PDF
Sources of ATT&CK: A Bibliographic Journey through Enterprise ATT&CK - Robert...
byMITRE ATT&CK
 
PDF
Updates from The Center for Threat Informed Defense - Jon Baker
byMITRE ATT&CK
 
PDF
Go Go Ransom Rangers: Diving into Akira’s Linux Variant with ATT&CK - Nicole ...
byMITRE ATT&CK
 
PDF
ATT&CK From Basic Principles - Tareq AlKhatib
byMITRE ATT&CK
 
PDF
Lifecycle-Aware Power Side-Channel Malware Detection - Alexander Cathis
byMITRE ATT&CK
 
PDF
From ATT&CK to CL&IM: Cyber Insurance Data Modeling using MITRE ATT&CK and be...
byMITRE ATT&CK
 
Next-Gen Threat-Informed Defense: Human-Assisted Intelligent Agents - Rajesh ...
byMITRE ATT&CK
 
Birds of a Feather: The Evolution of Threat Actor Prioritization, Gap Analysi...
byMITRE ATT&CK
 
Using ATT&CK and MITRE CTID’s StP Frameworks to Assess Threat Detection Resil...
byMITRE ATT&CK
 
Bridging the Gap: Enhancing Detection Coverage with Atomic Red Team, Sigma, a...
byMITRE ATT&CK
 
SaaSy ATT&CK – Practical ATT&CK usage for SaaS-based Telemetry - Aaron Shelmire
byMITRE ATT&CK
 
I'll take ATT&CK techniques that can be done for $1000, Alex. - Ben Langrill
byMITRE ATT&CK
 
Practical Application of MITRE ATT&CK: Real World Usage in a Corporate Enviro...
byMITRE ATT&CK
 
This is why we don’t shout “Bingo”: Analyzing ATT&CK Integration in Endpoint ...
byMITRE ATT&CK
 
Every Cloud Has a Purple Lining - Arun Seelagan
byMITRE ATT&CK
 
Confession: 3 Things I Wish I Knew About MITRE ATT&CK When I Was an FBI Profi...
byMITRE ATT&CK
 
ATT&CKcon 5.0 Keynote - From Ticket Closers to Practitioners- How Great Secu...
byMITRE ATT&CK
 
ATT&CKcon 5.0 Lightning Talks - Various Speakers
byMITRE ATT&CK
 
MITRE ATT&CK Updates: Defensive ATT&CK - Lex Crumpton
byMITRE ATT&CK
 
MITRE ATT&CK Updates: Enterprise - Casey Knerr
byMITRE ATT&CK
 
Sources of ATT&CK: A Bibliographic Journey through Enterprise ATT&CK - Robert...
byMITRE ATT&CK
 
Updates from The Center for Threat Informed Defense - Jon Baker
byMITRE ATT&CK
 
Go Go Ransom Rangers: Diving into Akira’s Linux Variant with ATT&CK - Nicole ...
byMITRE ATT&CK
 
ATT&CK From Basic Principles - Tareq AlKhatib
byMITRE ATT&CK
 
Lifecycle-Aware Power Side-Channel Malware Detection - Alexander Cathis
byMITRE ATT&CK
 
From ATT&CK to CL&IM: Cyber Insurance Data Modeling using MITRE ATT&CK and be...
byMITRE ATT&CK
 

Recently uploaded

PPTX
Dell poweredge-customer-presentation.pptx
byhungungphu123
 
PDF
Getting the Best of TrueDEM – January News & Updates
bypanagenda
 
PPT
connectives-linking words in English.ppt
byAmrMohammed82
 
PPTX
6G and Non-Terrestrial Networks (NTN) Testing.pptx
byXRComm
 
PDF
Lightweight, Travel-Ready Freedom for Adults and Seniors
byTopmate
 
PPTX
Achieve enterprise automation with SAP BTP solutions and SAP Signavio
bydarrellkiwi
 
PDF
5G Explained! A High Level Overview [Introduction]
byLuciano Motta
 
PPTX
Strategic Shelf Planning for the New Year Turning Resolutions into Revenue .pptx
byAnoop Ashok
 
PPTX
SOFTWARE DEVELOPMENT PROCESS - INTRODUCTION
byParithi Thamizh
 
PPTX
AI and Digital Transformation Solutions.
byBuildingblocks
 
PPTX
AI Meets DBA Transforming Database Administration with Intelligence
byGeoPITS Global Pvt Ltd
 
PDF
Safer’s Picks: Recent FME Enhancements with Big Everyday Impact
bySafe Software
 
PPTX
Single Cell Protein from Methane or Methanol - Process development research c...
byJohn Downs
 
PPTX
apidays Australia 2025 | Building AI RAG Applications with No Code.pptx
byapidays
 
PDF
Introduction to Linux and Basic Commands
byiDev Semarang
 
PDF
How PayPal Account Verification Works – Complete Guide for Online Businesses
byjhdhj3989
 
PDF
10 Best AI Tools for Fashion Brands in 2026
bymockitseo
 
PPTX
Coded Agents – with UiPath SDK + LlamaIndex.pptx
bysuhanisingh58689
 
PPTX
Driving Smarter Decisions with Oracle Analytics Cloud Consulting
byChetu
 
PDF
Computer Science Conferences 2026 | Research by SAI Conference
byHealth Conference 2026
 
Dell poweredge-customer-presentation.pptx
byhungungphu123
 
Getting the Best of TrueDEM – January News & Updates
bypanagenda
 
connectives-linking words in English.ppt
byAmrMohammed82
 
6G and Non-Terrestrial Networks (NTN) Testing.pptx
byXRComm
 
Lightweight, Travel-Ready Freedom for Adults and Seniors
byTopmate
 
Achieve enterprise automation with SAP BTP solutions and SAP Signavio
bydarrellkiwi
 
5G Explained! A High Level Overview [Introduction]
byLuciano Motta
 
Strategic Shelf Planning for the New Year Turning Resolutions into Revenue .pptx
byAnoop Ashok
 
SOFTWARE DEVELOPMENT PROCESS - INTRODUCTION
byParithi Thamizh
 
AI and Digital Transformation Solutions.
byBuildingblocks
 
AI Meets DBA Transforming Database Administration with Intelligence
byGeoPITS Global Pvt Ltd
 
Safer’s Picks: Recent FME Enhancements with Big Everyday Impact
bySafe Software
 
Single Cell Protein from Methane or Methanol - Process development research c...
byJohn Downs
 
apidays Australia 2025 | Building AI RAG Applications with No Code.pptx
byapidays
 
Introduction to Linux and Basic Commands
byiDev Semarang
 
How PayPal Account Verification Works – Complete Guide for Online Businesses
byjhdhj3989
 
10 Best AI Tools for Fashion Brands in 2026
bymockitseo
 
Coded Agents – with UiPath SDK + LlamaIndex.pptx
bysuhanisingh58689
 
Driving Smarter Decisions with Oracle Analytics Cloud Consulting
byChetu
 
Computer Science Conferences 2026 | Research by SAI Conference
byHealth Conference 2026
 

ATT&CK Updates- ATT&CK's Open Source

  • 1.
    ATT&CK Software Updates Jared Ondricek ATT&CKSoftware Development Lead @jondrice /jondricek ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 2.
    Who am I •Lead DevOps Engineer • Automate all the things! • Manage some things: • ATT&CK website: attack.mitre.org • Navigator • Workbench • Public TAXII server • mitreattack-python library • GitHub presence ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 3.
    Website Updates: ICS ©2022The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 4.
    Website Updates: ICS ©2022The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 5.
    Website Updates: DetectionObjects ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 6.
    Website Updates: Campaigns ©2022The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 7.
    Website Updates: Search ©2022The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 8.
    Navigator Updates: SVGExport ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 9.
    Navigator Updates: SVGExport ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 10.
    Navigator Updates: CustomLinks ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 11.
    Navigator Updates: CustomLinks ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 12.
    Workbench Updates: Roadmap ©2022The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25 1.2.0 Authentication 1.3.0 ID Generation 1.5.0 Table Improvements 1.6.0 Notes Improvements 1.4.0 Sub-technique improvements
  • 13.
    TAXII Server Updates TAXII2.0 Server • cti-taxii.mitre.org • Already available • Documentation on GitHub /mitre/cti USAGE.md • STIX 2.0 only TAXII 2.1 Server • Coming May 2022 • Works with custom ATT&CK Workbench backend • REST API is OpenAPI compliant (dynamic docs) • Supports STIX 2.0 and 2.1 ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 14.
    mitreattack-python • pip installmitreattack-python • Converts STIX to Excel • Converts STIX to Collections (for use with Workbench) • Manipulates ATT&CK Navigator layer files • Create dynamic, custom layers • Combine layers • Export layers (Excel, SVG) • Future: merge with mitre-attack/attack-scripts • Future: Convenience methods to connect to TAXII server ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 15.
    GitHub Updates • Toomany places to check • github.com/mitre/cti • github.com/mitre-attack • github.com/center-for-threat-informed-defense • Future: plan for centralized landing page to document all efforts ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25 TAXII server Workbench STIX 2.0 data STIX 2.1 data Python library Website source Collection Manager
  • 16.
    Conclusion • Website: Campaigns& better search • Navigator: Better exports & custom linking • Workbench: Steady improvements • TAXII 2.1 server: Customization & documentation • mitreattack-python: Merge with attack-scripts • GitHub: Central landing page ©2022 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25
  • 17.
    https://attack.mitre.org attack@mitre.org @mitreattack Jared Ondricek @jondrice /jondricek ©2022 TheMITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 21-00706-25