attack-stix-data
attack-stix-data copied to clipboard
mitre-attack
STIX data representing MITRE ATT&CK
This PR fixes the validation problems for the mobile-attack JSON files that I indicated in issue #21
Since `mobile-attack-4.0.json` the relationship `relationship--f825f5ea-3815-431f-b005-4c01b8b2fed9` is invalid. The modified timestamp is before the created timestamp.
I believe STIX versioning isn't properly implemented/applied to whatever is generating the current ATT&CK JSON. From section `3.6 Versioning` of the [STIX 2.1 spec](https://docs.oasis-open.org/cti/stix/v2.1/os/stix-v2.1-os.html): > STIX Objects MAY be versioned...
I'm working with the ATT&CK v11.2 json, and I'm finding some weirdness in the data that is breaking my scripts. Maybe this is expected behavior, but can anyone explain? attack-pattern--06780952-177c-4247-b978-79c357fb311f...
Remove duplicate external reference with malformed URL
Mobile-Attack object: missing "description" property (as shown below) and "kill_chain_phases" list is empty: { "x_mitre_domains": [ "mobile-attack" ], "object_marking_refs": [], "id": "attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799", "type": "attack-pattern", "created": "2017-10-25T14:48:30.462Z", "revoked": true, "external_references": [...
There are values in `external_references` that cause problems with validating against the [OASIS schemas](https://github.com/oasis-open/cti-stix2-json-schemas). The schemas specify "format: uri" for the "url" attribute (schemas/common/url-regex.json), and this may enforce validation of...
Bundles in STIX 2.1 don't use the `spec_version` property. From 2.0 to 2.1 `spec_version` was moved to the objects so that a single bundle could hold objects of differing spec...
As a reader of the documentation, I want the hyperlinks to additional resources to lead me information relevant to the current version of the data. Presently, many hyperlinks in the...
