rabobank-cdc / DeTTECT

Detect Tactics, Techniques & Combat Threats
GNU General Public License v3.0
2.04k stars 331 forks source link

Unable to connect to Mitre Taxii Server #106

Closed etheruler closed 10 months ago

etheruler commented 10 months ago

Hello - I've been exploring DeTTECT for the past month or so, and today I am having an issue when I create a JSON file from my yaml file. This is the 1st time using DeTTECT since the new Mitre ATT&CK 14 release.

    __[!] Cannot connect to MITRE's CTI TAXII server: https://cti-taxii.mitre.org/stix/collections/95ecc380-afe9-11e4-9b6c-751b66dd541e/

I tried pinging cti-taxii.mitre.org and that domain is not responding.

Thank You

etheruler commented 10 months ago

Never mind is seems to be working now. Thanks

rubinatorz commented 10 months ago

MITRE's TAXII server was down for a couple of days. They indeed just fixed this.

If you encounter this in the future again, check out the --local-stix-path CLI parameter. You can clone the CTI STIX repository offline (https://github.com/mitre/cti) and use it in DeTT&CT as offline ATT&CK source instead of the TAXII server.