add framework for cape signatures

This commit is contained in:
Dez Beck
2022-12-11 16:53:59 -05:00
parent 106ab71ebf
commit 0ef2b8a7fb
2 changed files with 4 additions and 4 deletions
+2 -2
View File
@@ -8,8 +8,8 @@ Check out the MBC presentations:
Two open-source malware analysis tools map to MBC and ATT&CK:
* [capa rules](https://github.com/fireeye/capa-rules) - see the [capa mapping distribution](./capa.md)
* [CAPE signatures](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE mapping distribution](./cape.md)
* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
To join the **MBC mailing list**, please send a request to mbc@mitre.org.
+2 -2
View File
@@ -2,9 +2,9 @@
XX December 2022
## Histograms ##
Histograms showing the number of CAPE rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are shown below. Details of the tactics and objectives follow. Information about mapping CAPE signatures is available [here](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
Histograms showing the number of CAPE rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. Instructions for mapping CAPE signatures to MBC/ATT&CK is available [here](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
The summary information below reflects the [CAPE community repository](https://github.com/kevoreilly/community/tree/master/modules/signatures) (not including deprecated signatures), as well as [CAPEv2 signatures](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py).
The information below reflects the [CAPE community repository](https://github.com/kevoreilly/community/tree/master/modules/signatures) (not including deprecated signatures), as well as [CAPEv2 signatures](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py).
### ATT&CK Mapping Histogram ###