Request leveraging Kill Chain in Attack Patterns

[infosec-alchemist]

We are grouping attack patterns based on kill chain phase. Would it be possible for capec group of attack patterns to also implement the kill chain property?

[isaisabel]

Hi @infosec-alchemist,

Sorry for the long delay in response. We must've overlooked this issue when it was posted.

Could you clarify what you meant by "implement the kill chain property"? All attack-patterns in the ATT&CK catalog already exist within a tactic (represented by the kill_chain_phases property).

[isaisabel]

Closing due to inactivity.

[rpiazza]

hi @isaisabel,

@infosec-alchemist might have been talking about the attack-patterns in the capec directory.

FYI - the CAPEC attack patterns do not contain information about kill_chain phases. The Execution Flow in the attack patterns (which is not published in the attack patterns in the STIX format) is a similar concept.

[isaisabel]

@rpiazza I think we're OK to close this now, it's been inactive for quite a while.