MITRE IDs (Deprecated) (v1.2.4)
Deprecated. Use FeedMitreAttack v2 instead.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Data Enrichment & Threat Intelligence
Indicator fields (20)
- Courses Of Action
- Created (by MITRE)
- MITRE Aliases
- MITRE Contributors
- MITRE Data Sources
- MITRE Defense Bypassed
- MITRE Description
- MITRE Detection
- MITRE Extended Aliases
- MITRE External References
- MITRE Impact Type
- MITRE Kill Chain Phases
- MITRE Labels
- MITRE Name
- MITRE Permissions Required
- MITRE Platforms
- MITRE System Requirements
- MITRE Type
- MITRE Version
- Modified (by MITRE)
Indicator types (1)
- MITRE ATT&CK
Integrations (1)
- MITRE IDs Feed (Deprecated)
Layouts (1)
- MITRE ATT&CK Indicator
Scripts (3)
- MITREIndicatorsByOpenIncidents
- MitreIDLayoutDynamicSection
- MitreNameLayoutDynamicSection
README
We recommend using the MITRE v2 Feed instead. The MITRE v2 Feed is more aligned with the STIX format, and includes more objects, such as Malware, Intrusion Set and Relationships.
Use the MITRE ATT&CK Feed pack to fetch indicators from MITRE ATT&CK. MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations of cyber security threats.
You can
- Retrieve indicators from MITRE ATT&CK.
- Look up the reputation of the indicators.
- Perform a generic search across the MITRE ATT&CK indicators.
- Display the feed names and IDs from TAXII.
Note: When you fetch indicators from MITRE ATT&CK, indicators are not created within Cortex XSOAR.