MBCProject-mbc-markdown/ynewsletters/12152022.md

Malware Behavior Catalog Newsletter

December 15, 2022

Hi everyone!

Highlights of recent MBC development include:

• Added new properties to behavior pages - see Sandbox Detection for an example that includes detection and code snippet information
• Reviewed ATT&CK v12 (no updates to MBC required)
• Released v22.12 of the STIX 2.1 representation (corrected v22.10)
• Reviewed CAPE signature mappings (CAPE maps its signatures to MBC!)
• Expanded MBC's malware corpus
• Finalized MBC terminology - e.g., MBC will continue using the terms "behaviors" and "objectives," rather than switching to "techniques" and "tactics"

Going forward, we'll continue expanding the malware corpus and will integrate capa analysis results with existing corpus entries. We'll also be populating the new behavior properties, focusing on detection content. MBC v3.0 will be released after detection information is complete.

We activated Discussions on GitHub, so please any post questions or comments there. You can also email us at mbc@mitre.org to let us know what you think.

If you're interested in meeting with our team - please let us know. We'd love to get your feedback and understand your MBC use cases!