nccgroup / SteppingStones

A Red Team Activity Hub
https://research.nccgroup.com/2024/06/12/stepping-stones-a-red-team-activity-hub/
Apache License 2.0
180 stars 28 forks source link

Events with Multiple TTPs #11

Open rkbennett opened 1 month ago

rkbennett commented 1 month ago

[Feature request]

It would be awesome if you were able to define multiple mitre attacks within a single event as complex tasks may bridge multiple mitre TTPs

neonbunny commented 1 month ago

This has come up in discussion previously too - which would suggest it's a good idea. It would mean a fairly big change to the data model which would also break some of the existing reports, so is not an easy change.