From 5adac81159e21ea8ebb59e1c9f3871dc7d93e2fe Mon Sep 17 00:00:00 2001
From: Dez Beck <DBECK@MITRE.ORG>
Date: Sun, 11 Dec 2022 16:58:29 -0500
Subject: [PATCH] add framework for cape signatures

---
 README.md | 10 +++++-----
 capa.md   |  2 +-
 cape.md   |  2 +-
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index 2b4914e..a0f1afb 100644
--- a/README.md
+++ b/README.md
@@ -1,16 +1,16 @@
 # <a name="mbc"></a>Malware Behavior Catalog v2.3 #
 The Malware Behavior Catalog (MBC) is a catalog of malware objectives and behaviors, created to support malware analysis-oriented use cases, such as labeling, similarity analysis, and standardized reporting. Please see the [FAQ](./yfaq/README.md) page for answers to common questions, and read the [newsletters](./ynewsletters/README.md) for information on the most recent MBC updates and activity.
 
+Two open-source malware analysis tools map their output to MBC and ATT&CK:
+
+* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
+* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
+
 Check out the MBC presentations:
 
 * [Standardized Reporting with the Malware Behavior Catalog](https://youtu.be/qZef-SoREdY), VB2020 localhost (October 2020)
 * [Malware Behavior Catalog](https://youtu.be/KY8Ty-0sdVU), BSides DC (October 2019)
 
-Two open-source malware analysis tools map to MBC and ATT&CK:
-
-* [capa](https://github.com/fireeye/capa-rules) - see the [capa rule mapping distribution](./capa.md)
-* [CAPE](https://github.com/kevoreilly/community/tree/master/modules/signatures) - see the [CAPE signature mapping distribution](./cape.md)
-
 To join the **MBC mailing list**, please send a request to mbc@mitre.org.
 
 ### Objectives ###
diff --git a/capa.md b/capa.md
index 12c4b46..8d42a5b 100644
--- a/capa.md
+++ b/capa.md
@@ -2,7 +2,7 @@
 15 August 2022
 
 ## Histograms ##
-Histograms showing the number of capa rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are shown below. Details of the tactics and objectives follow.
+Histograms showing the number of capa rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow.
 
 ### ATT&CK Mapping Histogram ###
 
diff --git a/cape.md b/cape.md
index cae6ca1..93ba882 100644
--- a/cape.md
+++ b/cape.md
@@ -2,7 +2,7 @@
 XX December 2022
 
 ## Histograms ##
-Histograms showing the number of CAPE rules mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. Instructions for mapping CAPE signatures to MBC/ATT&CK is available [here](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
+Histograms showing the number of CAPE signatures mapped into each ATT&CK tactic, MBC objective, and MBC micro-objective are below. Details of the tactics and objectives follow. The CAPEv2 repository includes instructions for [mapping CAPE signatures to MBC/ATT&CK](https://github.com/kevoreilly/CAPEv2/blob/master/docs/book/src/customization/signatures.rst).
 
 The information below reflects the [CAPE community repository](https://github.com/kevoreilly/community/tree/master/modules/signatures) (not including deprecated signatures), as well as [CAPEv2 signatures](https://github.com/kevoreilly/CAPEv2/blob/master/modules/signatures/CAPE.py).