Cybersecurity MITRE Standards Data and Digraphs


[Up] [Top]

Documentation for package ‘mitre’ version 0.6.0

Help Pages

as_igraph Given a mitre network it returns the same as igraph
buildAttckTactics Parse tactics
createATTCKedges Create edges from ATTCK data frames
downloadRawData Download from official sources raw files saving them in [working_directory]/data-raw/
getAttckData ETL process that download current attck definitions and return a list of data frames for each object. The list also contains a graph as list with ATT&CK objects as nodes and all relations as edges.
getCAPECData ETL process that download current CAPEC definitions and return a list with a data frame for CAPEC objects. The list also contains a visNetwork object with CAPEC objects as nodes and all relations as edges.
getCARData ETL process that download current CAR definitions and return a list with a data frame for CAR objects. The list also contains a visNetwork object with CAR objects as nodes and all relations as edges.
getCPEData ETL process that download current CPE definitions and return a list with a data frame for CPE objects. The list also contains a list with CPE objects as nodes and all relations as edges.
getCVEData ETL process that download current CVE definitions and return a list with a data frame for CVE objects. The list also contains a visNetwork object with CVE objects as nodes and all relations as edges.
getCWEData ETL process that download current CVE definitions and return a list with a data frame for CVE objects. The list also contains a visNetwork object with CVE objects as nodes and all relations as edges.
getLatestDataSet Download latest R data sets from Github previously parsed with this package.
getNodeNeighbors Returns a list of nodes and edges (neighbors) based on input node.
getShieldData ETL process that download current shield definitions and return a list of data frames for each object. The list also contains a visNetwork object with SHIELD objects as nodes and all relations as edges.
MapCommonproperties Extract common properties from attack pattern object (parsed with RJSONIO::fromJSON)
MapGroups Extract Group properties from intrusion set object (parsed with RJSONIO::fromJSON)
MapMitigation Extract Mitigation properties from course.action object (parsed with RJSONIO::fromJSON)
MapRelations Extract object relationships from relationship object (parsed with RJSONIO::fromJSON)
MapSoftware Extract Software properties from malware and tool object (parsed with RJSONIO::fromJSON)
MapTactics Extract Tactic properties from x-mitre-tactic object (parsed with RJSONIO::fromJSON)
MapTechniques Extract Technique properties from attack pattern object (parsed with RJSONIO::fromJSON)
omitDeprecated Given a mitre network it returns the same without deprecated nodes
parseAttck.Groups Read MITRE CTI Repository browsing domain directories to extract data from intrusion-set files, map variables from STIX to ATT&CK model and return tidy data.frame with Group variables.
parseAttck.Mitigation Read MITRE CTI Repository browsing domain directories to extract data from course-of-action files, build model and return tidy data.frame with Mitigation variables.
parseAttck.Relationships Read MITRE CTI Repository browsing domain directories to extract data from relationship files, build model and return tidy data.frame with relationship variables.
parseAttck.Software Read MITRE CTI Repository browsing domain directories to extract data from malware and tool files, build model and return tidy data.frame with Software variables.
parseAttck.Tactics Read MITRE CTI Repository browsing domain directories to extract data from x-mitre-tactic files, map variables from STIX to ATT&CK model and return tidy data.frame with Tactic variables.
parseAttck.Techniques Read MITRE CTI Repository browsing domain directories to extract data from attack-pattern files, map variables from STIX to ATT&CK model and return tidy data.frame with Technique variables.
parseAttckmodel.group Read MITRE CTI Repository files related to intrusion-set, extract data, map variables from STIX to ATT&CK model and return tidy data.frame.
parseAttckmodel.miti Read MITRE CTI Repository files related to course.action, extract data, map variables from STIX to ATT&CK model and return tidy data.frame.
parseAttckmodel.rels Read MITRE CTI Repository files related to relationship, extract data, map variables from STIX to ATT&CK model and return tidy data.frame.
parseAttckmodel.soft Read MITRE CTI Repository files related to malware and tool, extract data, map variables from STIX to ATT&CK model and return tidy data.frame.
parseAttckmodel.tact Read MITRE CTI Repository files related to x-mitre-tactic, extract data, map variables from STIX to ATT&CK model and return tidy data.frame.
parseAttckmodel.tech Read MITRE CTI Repository files related to attack-pattern, extract data, map variables from STIX to ATT&CK model and return tidy data.frame.
parseRawData ETL process for all standards, it also create a list of nodes and edges representing the relationships between standard objects. It needs raw files pre-downloaded from official MITRE repositories stored in a folder named "data-raw".