mirror of
https://github.com/hunters-forge/OSSEM
synced 2026-06-08 14:44:11 +00:00
Ricardo Dias
26 lines
1.6 KiB
YAML
26 lines
1.6 KiB
YAML
title: Detection Data Model
|
|
description: This part of the project focuses on defining the required data in form
|
|
of data objects and the relationships among each other needed to facilitate the
|
|
creation of data analytics and validate the detection of adversary techniques. This
|
|
is inspired by the awesome work of MITRE with their project https://car.mitre.org/wiki/Main_Page.
|
|
The information needed for each data object is pulled from the entities defined
|
|
in the https://github.com/Cyb3rWard0g/OSSEM/blob/master/common_information_model.
|
|
images: []
|
|
references:
|
|
- text: CAR Analytics
|
|
link: https://car.mitre.org/wiki/Main_Page
|
|
- text: Common Information Model
|
|
link: https://github.com/Cyb3rWard0g/OSSEM/blob/master/common_information_model
|
|
- text: STIX Cybox ObjectRelationshipVOcab-1.1
|
|
link: http://stixproject.github.io/data-model/1.2/cyboxVocabs/ObjectRelationshipVocab-1.1/
|
|
- text: Cybox Object
|
|
link: http://cyboxproject.github.io/documentation/objects/
|
|
- text: STIX Version 2.0. Part 4 - Cyber Observable Object
|
|
link: https://docs.oasis-open.org/cti/stix/v2.0/stix-v2.0-part4-cyber-observable-objects.html
|
|
- text: Finding Cyber Threats with ATTCK Based Analytics
|
|
link: https://www.mitre.org/sites/default/files/publications/16-3713-finding-cyber-threats%20with%20att%26ck-based-analytics.pdf
|
|
- text: CAR Analytics Data Model
|
|
link: https://car.mitre.org/wiki/Data_Model
|
|
- text: Quantifying your hunt - not your parent's red teaming
|
|
link: http://www.irongeek.com/i.php?page=videos/bsidescharm2018/track-1-06-quantify-your-hunt-not-your-parents-red-teaming-devon-kerr
|