{"id":10479,"date":"2020-05-04T19:08:32","date_gmt":"2020-05-04T13:38:32","guid":{"rendered":"http:\/\/kalilinuxtutorials.com\/?p=10479"},"modified":"2020-05-04T19:08:32","modified_gmt":"2020-05-04T13:38:32","slug":"elemental","status":"publish","type":"post","link":"https:\/\/kalilinuxtutorials.com\/elemental\/","title":{"rendered":"Elemental : An ATT&CK Threat Library"},"content":{"rendered":"\n

Elemental <\/strong>is a centralized threat library of MITRE ATT&CK techniques, Atomic Red Team tests, and over 280 Sigma rules. It provides an alternative way to explore the ATT&CK dataset, mapping relevant Atomic Red Team tests and Sigma rules to their respective technique. <\/p>\n\n\n\n

It allows defenders to create custom ATT&CK Techniques and upload Sigma Rules. The ATT&CK dataset was collected via the hunters-forge attackcti Python client. Atomic Red Team tests were imported from the Atomic Red Team GitHub repository. Sigma rules were imported from Sigma’s GitHub rule collection if they contained ATT&CK tags.<\/p>\n\n\n\n

This platform was conceived as a capstone project for University of California Berkeley’s Master of Information and Cybersecurity program. We look forward to community feedback for new ideas and improvements. <\/p>\n\n\n\n

This instance of Elemental is experimental and not configured for production deployment. Please see Django documentation on configuring a production server.<\/p>\n\n\n\n

Features<\/strong><\/p>\n\n\n\n