Tag Events with MITRE TTPs

[kerrymilan]

Description For each module, add an optional property denoting which MITRE ATT&CK TTP is associated with the events being generated. These should be hard-coded into the module's properties where appropriate.

Example:

class badsecrets(BaseModule):
    watched_events = ["HTTP_RESPONSE"]
    produced_events = ["FINDING", "VULNERABILITY", "TECHNOLOGY"]
    flags = ["active", "safe", "web-basic"]
    meta = {
        "description": "Library for detecting known or weak secrets across many web frameworks",
        "created_date": "2022-11-19",
        "author": "@liquidsec",
        "mitre_ttp": "T1078.001",
    }

Result:

{
    "data": {
        "host": "evilcorp.com", 
        "severity": "INFO", 
        "description": "asdf",
        "mitre_ttp": "T1078.001",
    },
    "event_type": "VULNERABILITY",
    ...
}