Post

All of our #threatintel is stored on a single network graph. You can traverse it easily to further enrich your research. In this post we lift the lid on one small part of that graph... how we link popular knowledge-bases like MITRE's #attack an #cwe. www.dogesec.com/blog/how_cti...

dogesec.comHow CTI Butler Creates a Threat Intelligence GraphCTI Butler links many common knowledge bases, for example linking MITRE ATT&CK to CAPEC objects, to improve the context of our research. This post describes the logic CTI Butler employs behind the sce...

16/12/24, 7:33 am0 reposts0 likes

Or for those brave people who just want to jump straight into the code: github.com/muchdogesec/...

github.comGitHub - muchdogesec/arango_cti_processor: A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format.A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format. - muchdogesec/arango_cti_processor

For those the prefer a video: www.youtube.com/watch?v=CcoA...

youtube.comArango CTI Processor [OSS DEMO]: traverse threat intelligence knowledge-bases on a graphYouTube video by DOGESEC