add framework for cape signatures

This commit is contained in:
Dez Beck
2022-12-11 16:58:29 -05:00
parent 0ef2b8a7fb
commit 5adac81159
3 changed files with 7 additions and 7 deletions
+5 -5
View File
@@ -1,16 +1,16 @@
# <a name="mbc"></a>Malware Behavior Catalog v2.3 #
The Malware Behavior Catalog (MBC) is a catalog of malware objectives and behaviors, created to support malware analysis-oriented use cases, such as labeling, similarity analysis, and standardized reporting. Please see the [FAQ](./yfaq/README.md) page for answers to common questions, and read the [newsletters](./ynewsletters/README.md) for information on the most recent MBC updates and activity.
Two open-source malware analysis tools map their output to MBC and ATT&CK:
* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
Check out the MBC presentations:
* [Standardized Reporting with the Malware Behavior Catalog](https://youtu.be/qZef-SoREdY), VB2020 localhost (October 2020)
* [Malware Behavior Catalog](https://youtu.be/KY8Ty-0sdVU), BSides DC (October 2019)
Two open-source malware analysis tools map to MBC and ATT&CK:
* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
To join the **MBC mailing list**, please send a request to mbc@mitre.org.
### Objectives ###
+1 -1
View File
@@ -2,7 +2,7 @@
15 August 2022
## Histograms ##
Histograms showing the number of capa rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are shown below. Details of the tactics and objectives follow.
Histograms showing the number of capa rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow.
### ATT&CK Mapping Histogram ###
+1 -1
View File
@@ -2,7 +2,7 @@
XX December 2022
## Histograms ##
Histograms showing the number of CAPE rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. Instructions for mapping CAPE signatures to MBC/ATT&CK is available [here](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
Histograms showing the number of CAPE signatures mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. The CAPEv2 repository includes instructions for [mapping CAPE signatures to MBC/ATT&CK](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
The information below reflects the [CAPE community repository](https://github.com/kevoreilly/community/tree/master/modules/signatures) (not including deprecated signatures), as well as [CAPEv2 signatures](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py).