MITRE ATT&CK

MITRE IDs (Deprecated)

Details

IDMITRE ATT&CK
From Version5.5.0
Reputation Commandmitre-reputation
Expiration (days)20160
LayoutMITRE ATT&CK Indicator

Detection Regex

\b((T\d{3,4}\.\d{3})|(MOB-T|T|TA|G|S|M)\d{3,4})\b|\b(((attack-pattern–)|intrusion-set|malware|tool|course-of-action|x-mitre-tactic|x-mitre-matrix)[a-z0-9]{8}(-[a-z0-9]{4}){3}-[a-z0-9]{12})\b|\b(((APT)|(CAPEC\-))\d{1,4})\b

Source

reputation-mitreAttck.json
Download History Raw 
{
    "id": "MITRE ATT&CK",
    "version": -1,
    "modified": "2020-04-02T14:08:49.132997487Z",
    "sortValues": null,
    "commitMessage": "",
    "shouldCommit": false,
    "regex": "\\b((T\\d{3,4}\\.\\d{3})|(MOB-T|T|TA|G|S|M)\\d{3,4})\\b|\\b(((attack-pattern–)|intrusion-set|malware|tool|course-of-action|x-mitre-tactic|x-mitre-matrix)[a-z0-9]{8}(-[a-z0-9]{4}){3}-[a-z0-9]{12})\\b|\\b(((APT)|(CAPEC\\-))\\d{1,4})\\b",
    "details": "MITRE ATT&CK",
    "prevDetails": "MITRE ATT&CK",
    "reputationScriptName": "",
    "reputationCommand": "mitre-reputation",
    "enhancementScriptNames": [],
    "system": false,
    "locked": false,
    "disabled": false,
    "file": false,
    "updateAfter": 0,
    "mergeContext": false,
    "formatScript": "",
    "contextPath": "",
    "contextValue": "",
    "excludedBrands": [],
    "defaultMapping": null,
    "manualMapping": null,
    "fileHashesPriority": null,
    "expiration": 20160,
    "fromVersion": "5.5.0",
    "layout": "MITRE ATT&CK"
}