Enhancing the STIX Representation of MITRE ATT CK for Group Filtering and Technique Prioritization

04/24/2022
by   Mateusz Zych, et al.
0

In this paper, we enhance the machine-readable representation of the ATT CK Groups knowledge base provided by MITRE in STIX 2.1 format to make available and queryable additional types of contextual information. Such information includes the motivations of activity groups, the countries they have originated from, and the sectors and countries they have targeted. We demonstrate how to utilize the enhanced model to construct intelligible queries to filter activity groups of interest and retrieve relevant tactical intelligence.

READ FULL TEXT

Please sign up or login with your details

Forgot password? Click here to reset