Roberto Rodriguez

EC4 - Windows X64 Payload - APPCRASH at Execution

5

Good evening Pupy team, I hope all is well. I am having a few issues running a Windows payload created with the following commands: ``` gen -o .scr -f client...

https://github.com/OTRF/ThreatHunter-Playbook/pull/29

It would be good to have an idea of what fields and events are used the most for all analytics in the project.

several Techniques in other matrices such as MOBILE are missing the 'x_mitre_is_subtechnique' key

4

Hello CTI team, I was looking at enhancing a few functions in a library I created named attackcti. I wanted to enable a new parameter/argument that would allow me to...

Create a function template for functions in attack_client class

1

A lot of the functions in attack_client class repeat code. We can create a function template and dynamically create those functions 🚀

There are some examples in this document and will be great to review them, improve them (if possible) and add them to this library 🍻 https://github.com/mitre/cti/blob/master/USAGE.md

Rather than creating our own classes to handle STIX objects, we will use the library object types ;)

One example: https://github.com/OTRF/ATTACK-Python-Client/issues/23

https://github.com/OTRF/ATTACK-Python-Client/issues/3

16.A) Remote System Discovery

11

# Description The attacker enumerates the environment’s domain controller (T1018)