Parse this collection index and select the collection's that correspond to the version ("ATT&CK_Versions") and domain ("ATT&CK_Domains") in the config file.
As an example, if v12.1 is the version, and enterprise, mobile and ics are the selected domains, access these from the collection index and load each collection.
Warning: Each collection will have cyclical records, in particular an identity and marking that is referenced by every object, and the collection that has a pointer to every object, including the identity and marking object, as well as referring to them in fields.
Using the instructions in #6 , then manually load everything in this order:
First load the independent parts of the identity and marking objects
Second, load the dependent parts of the identity and marking objects
Third, load all of the other objects except for the collection
Fourth, load the collection last
On Delete, the order of deletion must be in reverse
First get:
Then add the loading of attack data to the typedb initialisation routine.
If ""ATT&CK"=True" in the import_types config object then:
To load the ATT&CK data, pull down the collection index at this address https://raw.githubusercontent.com/mitre-attack/attack-stix-data/master/index.json
Parse this collection index and select the collection's that correspond to the version ("ATT&CK_Versions") and domain ("ATT&CK_Domains") in the config file.
As an example, if v12.1 is the version, and enterprise, mobile and ics are the selected domains, access these from the collection index and load each collection.
Warning: Each collection will have cyclical records, in particular an identity and marking that is referenced by every object, and the collection that has a pointer to every object, including the identity and marking object, as well as referring to them in fields.
Using the instructions in #6 , then manually load everything in this order:
On Delete, the order of deletion must be in reverse