search

microsoft / Azure-Threat-Research-Matrix

MIT License
68 stars 23 forks source link

JSON format of the Azure Threat Research Matrix datamodel? #4

Open cvandeplas opened 2 years ago

cvandeplas commented 2 years ago

Thank you for this very interesting ATT&CK-alike taxonomy!

It would be great if this taxonomy could be provided in a machine parsable format such as JSON. That should allow CTI tooling to use the taxonomy without the need for manual encoding.

In the meantime, we have developed a temporary script that converts the Markdown data into a JSON structured ATRM MISP Galaxy.

This brings all ATRM entities within projects that use these tags/galaxies, such as the MISP Threat Sharing software. A nifty feature is also the support of the matrix model within MISP ! (screenshot below)

Thanks again !

image

cvandeplas commented 2 years ago

fyi: bumped misp-galaxy to the latest version https://github.com/MISP/misp-galaxy/commit/1b69b654a80199f47527fb921c9647c9574bf316

hausec commented 1 year ago

I'm going to leave this open, but there's some changes coming to ATRM that I'd like to finish first before I look into how to accomplish this programmatically.