ATT&CK Python Client

A Python module to access up to date ATT&CK content available in STIX via public TAXII server. This project leverages the python classes and functions of the cti-python-stix2 and cti-taxii-client libraries developed by MITRE.

Goals

Provide an easy way to access and interact with up to date ATT&CK content available in STIX via public TAXII server
Allow security analysts to quickly explore ATT&CK content and apply it in their daily operations
Allow the integration of ATT&Ck content with other platforms to host up to date information from the framework
Help security analysts during the transition from the ATT&CK MediaWiki API to the STIX/TAXII 2.0 API
Learn STIX2 and TAXII Client Python libraries

Current Status: Beta

The project is currently in a beta stage, which means that the code and the functionality is changing, but the current main functions are stabilising. I would love to get your feedback to make it a better project.

Resources

Getting Started

Requirements

Python 3+ or 2.7

Installation

You can install it via PIP:

pip install attackcti

Or you can also do the following:

git clone https://github.com/Cyb3rWard0g/ATTACK-Python-Client
cd ATTACK-Python-Client
pip install .

Jupyter Notebooks - Code Integration

I created a few jupyter notebooks that I hope can help you get familiar with the library and allow you to implement it in your future projects.

Install Jupyter Lab and Pandas==0.22.0 in order to use the Jupyter Notebooks on your own. You can do it by using the requirements.txt file in this repo

pip install -r requirements.txt

Start Jupyter Lab by running the following commands in the root directory of the repo

cd notebooks
jupyter lab

Author

Roberto Rodriguez @Cyb3rWard0g

Contributors

Jose Luis Rodriguez @Cyb3rPandaH

Contributing

To-Do

Revokation logic to update Groups Objects
Integration with HELK

License

yanyangithub/ATTACK-Python-Client

ErrorLooks like something went wrong!

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Languages

Error
Looks like something went wrong!

Packages