misp-galaxy
misp-galaxy copied to clipboard
Consider including cfr-vulnerabilities-exploited meta field
Hi :)
With the goal of create relations between threat actors and vulnerabilities exploited/used, I would like to propose if it's possible include the field cfr-vulnerabilities-exploited as an official field in the meta information within clusters.
If yes, I'll contribute with information about threat actors and CVEs used during their operations.
Thank you guys, Cheers
It's a good idea.
CFR are usually related to https://www.cfr.org/cyber-operations/ but we could make an official meta field called vulnerabilities-exploited to include the information with the list of CVEs.