search

mitre / cti

Cyber Threat Intelligence Repository expressed in STIX 2.0
Other
1.71k stars 410 forks source link

Revoked-By Techniques #200

Closed gothera closed 1 year ago

gothera commented 2 years ago

After seeing https://github.com/mitre/cti/issues/24 I would have a question. Is it possible, in the future, that a technique that revoked(replaced) another to also be "revoked-by" another technique ?

Thank you

adampennin commented 2 years ago

Any technique marked as revoked should also have a revoked-by relationship pointing at the new technique. If a technique was removed without replacement it should be x_mitre_deprecated instead (https://github.com/mitre/cti/blob/master/USAGE.md#removing-revoked-and-deprecated-objects).