Skip to main content

MITRE ATT&CK python library

Project description

mitreattack-python

This repository contains a library of Python tools and utilities for working with ATT&CK data. For more information, see the full documentation on ReadTheDocs.

Install

To use this package, install the mitreattack-python library with pip:

pip install mitreattack-python

MitreAttackData Library

The MitreAttackData library is used to read in and work with MITRE ATT&CK STIX 2.0 content. This library provides the ability to query the dataset for objects and their related objects. This is the main content of mitreattack-python; you can read more about other modules in this library under "Additional Modules".

Related MITRE Work

CTI

Cyber Threat Intelligence repository of the ATT&CK catalog expressed in STIX 2.0 JSON. This repository also contains our USAGE document which includes additional examples of accessing and parsing our dataset in Python.

ATT&CK

ATT&CK® is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of an adversary’s lifecycle, and the platforms they are known to target. ATT&CK is useful for understanding security risk against known adversary behavior, for planning security improvements, and verifying defenses work as expected.

https://attack.mitre.org

STIX

Structured Threat Information Expression (STIX) is a language and serialization format used to exchange cyber threat intelligence (CTI).

STIX enables organizations to share CTI with one another in a consistent and machine-readable manner, allowing security communities to better understand what computer-based attacks they are most likely to see and to anticipate and/or respond to those attacks faster and more effectively.

STIX is designed to improve many capabilities, such as collaborative threat analysis, automated threat exchange, automated detection and response, and more.

https://oasis-open.github.io/cti-documentation/

Contributing

To contribute to this project, either through a bug report, feature request, or merge request, please see the Contributors Guide.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mitreattack_python-5.3.0.tar.gz (539.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mitreattack_python-5.3.0-py3-none-any.whl (560.1 kB view details)

Uploaded Python 3

File details

Details for the file mitreattack_python-5.3.0.tar.gz.

File metadata

  • Download URL: mitreattack_python-5.3.0.tar.gz
  • Upload date:
  • Size: 539.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for mitreattack_python-5.3.0.tar.gz
Algorithm Hash digest
SHA256 ee28a4957224266e27bd7e420adbac5be0c94c9500e0bbe77b6d3b81ef545c89
MD5 2261a31a6b783159f5b716146519849a
BLAKE2b-256 1d6074725e537d3532b538a2bebb8ca816ef5f62a45c4dedd13216499778a42f

See more details on using hashes here.

Provenance

The following attestation bundles were made for mitreattack_python-5.3.0.tar.gz:

Publisher: lint-publish.yml on mitre-attack/mitreattack-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file mitreattack_python-5.3.0-py3-none-any.whl.

File metadata

File hashes

Hashes for mitreattack_python-5.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 1087dbf3ffffc31f4db196104fb099d4d12a2326ebdc7a310d212afb8895b420
MD5 f411b6841b14ec5b0a09e37f0925607a
BLAKE2b-256 9e62bb932b75b84266644c8c15c71579f559b4b4878b67bb52d934eeb639a18b

See more details on using hashes here.

Provenance

The following attestation bundles were made for mitreattack_python-5.3.0-py3-none-any.whl:

Publisher: lint-publish.yml on mitre-attack/mitreattack-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page