Upload files to "Modules/Knowledge/MITRE"

This commit is contained in:
2024-11-30 00:53:20 -05:00
parent fb30aeb51f
commit 27c143fdea
2 changed files with 54 additions and 0 deletions

View File

@ -0,0 +1,27 @@
def get_content():
"""
Returns structured content for the MITRE ATT&CK Framework.
"""
return [
{
"title": "Overview",
"content": """
- Framework for categorizing adversary tactics and techniques.
- Based on real-world observations.
"""
},
{
"title": "Persistence Categories",
"content": """
- Registry Keys, Scheduled Tasks.
- Services, Startup Folders.
"""
},
{
"title": "Application",
"content": """
- Helps identify TTPs used in attacks.
- Aligns defensive strategies with adversary behavior.
"""
}
]

View File

@ -0,0 +1,27 @@
def get_content():
"""
Returns structured content for MITRE's "Summit the Pyramid" framework.
"""
return [
{
"title": "MITRE's Summit the Pyramid",
"content": """
- A framework to prioritize and address threats effectively.
- Aligns detection and response efforts with adversarial TTPs.
"""
},
{
"title": "Threat-Informed Defense",
"content": """
- Know your threats to focus detection efforts.
- Be realistic about available log sources and noise levels.
"""
},
{
"title": "Additional Resources",
"content": """
- [Red Canary: Threat Detection Report](https://redcanary.com/threat-detection-report/trends/by-industry/)
- Summit the Pyramid focuses on actionable defense strategies.
"""
}
]