hunters-forge-OSSEM/source/detection_data_model

title: Detection Data Model
description: This part of the project focuses on defining the required data in form
  of data objects and the relationships among each other needed to facilitate the
  creation of data analytics and validate the detection of adversary techniques. This
  is inspired by the awesome work of MITRE with their project https://car.mitre.org/wiki/Main_Page.
  The information needed for each data object is pulled from the entities defined
  in the https://github.com/Cyb3rWard0g/OSSEM/blob/master/common_information_model.
images: []
references:
- text: CAR Analytics
  link: https://car.mitre.org/wiki/Main_Page
- text: Common Information Model
  link: https://github.com/Cyb3rWard0g/OSSEM/blob/master/common_information_model
- text: STIX Cybox ObjectRelationshipVOcab-1.1
  link: http://stixproject.github.io/data-model/1.2/cyboxVocabs/ObjectRelationshipVocab-1.1/
- text: Cybox Object
  link: http://cyboxproject.github.io/documentation/objects/
- text: STIX Version 2.0. Part 4 - Cyber Observable Object
  link: https://docs.oasis-open.org/cti/stix/v2.0/stix-v2.0-part4-cyber-observable-objects.html
- text: Finding Cyber Threats with ATTCK Based Analytics
  link: https://www.mitre.org/sites/default/files/publications/16-3713-finding-cyber-threats%20with%20att%26ck-based-analytics.pdf
- text: CAR Analytics Data Model
  link: https://car.mitre.org/wiki/Data_Model
- text: Quantifying your hunt - not your parent's red teaming
  link: http://www.irongeek.com/i.php?page=videos/bsidescharm2018/track-1-06-quantify-your-hunt-not-your-parents-red-teaming-devon-kerr