diff --git a/README.md b/README.md index 04c50a6..42c6f95 100644 --- a/README.md +++ b/README.md @@ -54,6 +54,12 @@ The canonical representation for MBC content is **OBJECTIVE::Behavior::Method**. Objectives and behaviors can be used alone, but a method *must* be associated with a behavior. +## Navigator View ## +This visual representation of the MBC Matrix is based on the ATT&CK Navigator. Two views are available: + +* [Matrix with identifiers](https://raw.githubusercontent.com/MBCProject/mbc-markdown/master/yfaq/mbc_matrix_with_ids.svg) +* [Matrix without identifiers](https://raw.githubusercontent.com/MBCProject/mbc-markdown/master/yfaq/mbc_matrix_with_ids/yfaq/mbc_matrix_without_ids.svg). + ### Malware Corpus ### The MBC contains a [malware corpus](./xample-malware/README.md) where each malware entry is decomposed into behaviors that are mapped to ATT&CK and MBC. The mappings are based on open source malware analysis reports. @@ -79,11 +85,6 @@ Malware objectives are defined in the table below. Follow the links to view asso |[**Persistence**](./persistence/README.md)|Malware aims to remain on a system.| |[**Privilege Escalation**](./privilege-escalation/README.md)|Malware aims to obtain higher level permissions.| -## Navigator View ## -This visual representation of the MBC Matrix is based on the ATT&CK Navigator (opens in a new window). - -mbc matrix without ids - ## MBC Behaviors ## The table below lists MBC behaviors and related ATT&CK techniques. In most cases, related ATT&CK techniques were defined *after* the MBC behavior was defined.