mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
add framework for cape signatures
This commit is contained in:
@@ -1,16 +1,16 @@
|
||||
# <a name="mbc"></a>Malware Behavior Catalog v2.3 #
|
||||
The Malware Behavior Catalog (MBC) is a catalog of malware objectives and behaviors, created to support malware analysis-oriented use cases, such as labeling, similarity analysis, and standardized reporting. Please see the [FAQ](./yfaq/README.md) page for answers to common questions, and read the [newsletters](./ynewsletters/README.md) for information on the most recent MBC updates and activity.
|
||||
|
||||
Two open-source malware analysis tools map their output to MBC and ATT&CK:
|
||||
|
||||
* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
|
||||
* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
|
||||
|
||||
Check out the MBC presentations:
|
||||
|
||||
* [Standardized Reporting with the Malware Behavior Catalog](https://youtu.be/qZef-SoREdY), VB2020 localhost (October 2020)
|
||||
* [Malware Behavior Catalog](https://youtu.be/KY8Ty-0sdVU), BSides DC (October 2019)
|
||||
|
||||
Two open-source malware analysis tools map to MBC and ATT&CK:
|
||||
|
||||
* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
|
||||
* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
|
||||
|
||||
To join the **MBC mailing list**, please send a request to mbc@mitre.org.
|
||||
|
||||
### Objectives ###
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
15 August 2022
|
||||
|
||||
## Histograms ##
|
||||
Histograms showing the number of capa rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are shown below. Details of the tactics and objectives follow.
|
||||
Histograms showing the number of capa rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow.
|
||||
|
||||
### ATT&CK Mapping Histogram ###
|
||||
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
XX December 2022
|
||||
|
||||
## Histograms ##
|
||||
Histograms showing the number of CAPE rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. Instructions for mapping CAPE signatures to MBC/ATT&CK is available [here](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
|
||||
Histograms showing the number of CAPE signatures mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. The CAPEv2 repository includes instructions for [mapping CAPE signatures to MBC/ATT&CK](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
|
||||
|
||||
The information below reflects the [CAPE community repository](https://github.com/kevoreilly/community/tree/master/modules/signatures) (not including deprecated signatures), as well as [CAPEv2 signatures](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py).
|
||||
|
||||
|
||||
Reference in New Issue
Block a user