as_igraph |
Given a mitre network it returns the same as igraph |
buildAttckTactics |
Parse tactics |
createATTCKedges |
Create edges from ATTCK data frames |
downloadRawData |
Download from official sources raw files saving them in [working_directory]/data-raw/ |
getAttckData |
ETL process that download current attck definitions and return a list of data frames for each object. The list also contains a graph as list with ATT&CK objects as nodes and all relations as edges. |
getCAPECData |
ETL process that download current CAPEC definitions and return a list with a data frame for CAPEC objects. The list also contains a visNetwork object with CAPEC objects as nodes and all relations as edges. |
getCARData |
ETL process that download current CAR definitions and return a list with a data frame for CAR objects. The list also contains a visNetwork object with CAR objects as nodes and all relations as edges. |
getCPEData |
ETL process that download current CPE definitions and return a list with a data frame for CPE objects. The list also contains a list with CPE objects as nodes and all relations as edges. |
getCVEData |
ETL process that download current CVE definitions and return a list with a data frame for CVE objects. The list also contains a visNetwork object with CVE objects as nodes and all relations as edges. |
getCWEData |
ETL process that download current CVE definitions and return a list with a data frame for CVE objects. The list also contains a visNetwork object with CVE objects as nodes and all relations as edges. |
getLatestDataSet |
Download latest R data sets from Github previously parsed with this package. |
getNodeNeighbors |
Returns a list of nodes and edges (neighbors) based on input node. |
getShieldData |
ETL process that download current shield definitions and return a list of data frames for each object. The list also contains a visNetwork object with SHIELD objects as nodes and all relations as edges. |
MapCommonproperties |
Extract common properties from attack pattern object (parsed with RJSONIO::fromJSON) |
MapGroups |
Extract Group properties from intrusion set object (parsed with RJSONIO::fromJSON) |
MapMitigation |
Extract Mitigation properties from course.action object (parsed with RJSONIO::fromJSON) |
MapRelations |
Extract object relationships from relationship object (parsed with RJSONIO::fromJSON) |
MapSoftware |
Extract Software properties from malware and tool object (parsed with RJSONIO::fromJSON) |
MapTactics |
Extract Tactic properties from x-mitre-tactic object (parsed with RJSONIO::fromJSON) |
MapTechniques |
Extract Technique properties from attack pattern object (parsed with RJSONIO::fromJSON) |
omitDeprecated |
Given a mitre network it returns the same without deprecated nodes |
parseAttck.Groups |
Read MITRE CTI Repository browsing domain directories to extract data from intrusion-set files, map variables from STIX to ATT&CK model and return tidy data.frame with Group variables. |
parseAttck.Mitigation |
Read MITRE CTI Repository browsing domain directories to extract data from course-of-action files, build model and return tidy data.frame with Mitigation variables. |
parseAttck.Relationships |
Read MITRE CTI Repository browsing domain directories to extract data from relationship files, build model and return tidy data.frame with relationship variables. |
parseAttck.Software |
Read MITRE CTI Repository browsing domain directories to extract data from malware and tool files, build model and return tidy data.frame with Software variables. |
parseAttck.Tactics |
Read MITRE CTI Repository browsing domain directories to extract data from x-mitre-tactic files, map variables from STIX to ATT&CK model and return tidy data.frame with Tactic variables. |
parseAttck.Techniques |
Read MITRE CTI Repository browsing domain directories to extract data from attack-pattern files, map variables from STIX to ATT&CK model and return tidy data.frame with Technique variables. |
parseAttckmodel.group |
Read MITRE CTI Repository files related to intrusion-set, extract data, map variables from STIX to ATT&CK model and return tidy data.frame. |
parseAttckmodel.miti |
Read MITRE CTI Repository files related to course.action, extract data, map variables from STIX to ATT&CK model and return tidy data.frame. |
parseAttckmodel.rels |
Read MITRE CTI Repository files related to relationship, extract data, map variables from STIX to ATT&CK model and return tidy data.frame. |
parseAttckmodel.soft |
Read MITRE CTI Repository files related to malware and tool, extract data, map variables from STIX to ATT&CK model and return tidy data.frame. |
parseAttckmodel.tact |
Read MITRE CTI Repository files related to x-mitre-tactic, extract data, map variables from STIX to ATT&CK model and return tidy data.frame. |
parseAttckmodel.tech |
Read MITRE CTI Repository files related to attack-pattern, extract data, map variables from STIX to ATT&CK model and return tidy data.frame. |
parseRawData |
ETL process for all standards, it also create a list of nodes and edges representing the relationships between standard objects. It needs raw files pre-downloaded from official MITRE repositories stored in a folder named "data-raw". |