Upload files to "Modules/Knowledge/MITRE"
This commit is contained in:
27
Modules/Knowledge/MITRE/mitre_attack_framework.py
Normal file
27
Modules/Knowledge/MITRE/mitre_attack_framework.py
Normal file
@ -0,0 +1,27 @@
|
|||||||
|
def get_content():
|
||||||
|
"""
|
||||||
|
Returns structured content for the MITRE ATT&CK Framework.
|
||||||
|
"""
|
||||||
|
return [
|
||||||
|
{
|
||||||
|
"title": "Overview",
|
||||||
|
"content": """
|
||||||
|
- Framework for categorizing adversary tactics and techniques.
|
||||||
|
- Based on real-world observations.
|
||||||
|
"""
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"title": "Persistence Categories",
|
||||||
|
"content": """
|
||||||
|
- Registry Keys, Scheduled Tasks.
|
||||||
|
- Services, Startup Folders.
|
||||||
|
"""
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"title": "Application",
|
||||||
|
"content": """
|
||||||
|
- Helps identify TTPs used in attacks.
|
||||||
|
- Aligns defensive strategies with adversary behavior.
|
||||||
|
"""
|
||||||
|
}
|
||||||
|
]
|
27
Modules/Knowledge/MITRE/summiting_the_pyramid.py
Normal file
27
Modules/Knowledge/MITRE/summiting_the_pyramid.py
Normal file
@ -0,0 +1,27 @@
|
|||||||
|
def get_content():
|
||||||
|
"""
|
||||||
|
Returns structured content for MITRE's "Summit the Pyramid" framework.
|
||||||
|
"""
|
||||||
|
return [
|
||||||
|
{
|
||||||
|
"title": "MITRE's Summit the Pyramid",
|
||||||
|
"content": """
|
||||||
|
- A framework to prioritize and address threats effectively.
|
||||||
|
- Aligns detection and response efforts with adversarial TTPs.
|
||||||
|
"""
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"title": "Threat-Informed Defense",
|
||||||
|
"content": """
|
||||||
|
- Know your threats to focus detection efforts.
|
||||||
|
- Be realistic about available log sources and noise levels.
|
||||||
|
"""
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"title": "Additional Resources",
|
||||||
|
"content": """
|
||||||
|
- [Red Canary: Threat Detection Report](https://redcanary.com/threat-detection-report/trends/by-industry/)
|
||||||
|
- Summit the Pyramid focuses on actionable defense strategies.
|
||||||
|
"""
|
||||||
|
}
|
||||||
|
]
|
Reference in New Issue
Block a user