stix.mitre.org

msm.mitre.org

Making Security Measurable- Cyber Threat Information Sharing

http://msm.mitre.org/directory/areas/threatsharing.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. Cyber Threat Information Sharing. By understanding adversaries’ behavior against a range of targets over a period of time, defenders can identify a set of indicators and a robust set of adversary tactics, techniques, and procedures (TTPs). The Trusted Automated eXchange of Indicator Information (TAXII). This Web site is sponsored and managed by The MITRE Corporation. July 05, 2013.

maecproject.github.io

AnalysisType | MAEC Project Documentation

http://maecproject.github.io/data-model/4.1/maecPackage/AnalysisType

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. AnalysisType MAEC Package Schema. Provides a way of capturing the information associated with the analysis of a malware instance, such as the subject, authors, start datetime, and other relevant data. The required id field specifies a unique ID for this Analysis. The type field specifies the type of malware analysis being performed. The method field specifies the analysis method used in the analysis. The Co...

msm.mitre.org

Making Security Measurable- Incident Coordination

http://msm.mitre.org/directory/areas/incidentcoordination.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. When a cyber incident occurs, such as a spear-phishing attack, a configuration error, or a denial-of-service (DoS) attack, defenders may need to reach out to Computer Security Incident Response Teams (CSIRTs), Law Enforcement, Internet Service Providers (ISPs), product vendors, and others for assistance and coordination. The Trusted Automated eXchange of Indicator Information (TAXII).

seguridad-de-la-informacion.blogspot.com

Ciberseguridad: elegir entre la pastilla roja o la pastilla azul | Apuntes de seguridad de la información

http://seguridad-de-la-informacion.blogspot.com/2015/04/ciberseguridad-elegir-entre-la-pastilla.html

Apuntes de seguridad de la información. Blog personal de Javier Cao Avellaneda. Viernes, 24 de abril de 2015. Ciberseguridad: elegir entre la pastilla roja o la pastilla azul. Un blog de 12 años de antigüedad que ha ido recogiendo los diferentes incidentes y reflexionando sobre ellos ahora permite viajar al pasado para comprobar que los grandes fuegos actuales en esta materia empezaron no atajando a tiempo las pequeñas cerillas que se iban dejando caer por el monte. 191;Está el hacking de moda? Yo entré ...

maecproject.github.io

Documentation | MAEC Project Documentation

http://maecproject.github.io/documentation

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. This document provides a detailed introduction to the Malware Attribute Enumeration and Characterization (MAEC ) Language, an overview of the MAEC data models, a discussion of high-level use cases, requirements for the MAEC Language, and a discussion of open issues and challenges. Specification documents are available for the MAEC data models. Utilities and Developer Resources. Various utilities and other d...

makingsecuritymeasurable.mitre.org

Making Security Measurable- Incident Coordination

http://makingsecuritymeasurable.mitre.org/directory/areas/incidentcoordination.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. When a cyber incident occurs, such as a spear-phishing attack, a configuration error, or a denial-of-service (DoS) attack, defenders may need to reach out to Computer Security Incident Response Teams (CSIRTs), Law Enforcement, Internet Service Providers (ISPs), product vendors, and others for assistance and coordination. The Trusted Automated eXchange of Indicator Information (TAXII).

appliednsm.com

Chris Sanders | Applied Network Security Monitoring

http://www.appliednsm.com/author/chris

Applied Network Security Monitoring. Collect. Detect. Analyze. All posts by Chris Sanders. What the ER Can Learn from a Good CIRT. Posted by Chris Sanders. On July 1, 2015. I read Chris Sanders' recent blog post. On investigations and prospective data collection with great interest. Before I explain why this is I should reveal some of my biases. I think transparency is something that is always important in understanding what place or frame of mind someone is coming from and we all have biases. I recently...

attack.mitre.org

Related Efforts - ATT&CK

https://attack.mitre.org/wiki/Related_Efforts

And related ATT&CK techniques have CAPEC ID references. Structured Threat Information eXpression (STIX ) is a collaborative community-driven effort to define and develop a standardized language to represent cyber threat information. It does this in a structured fashion to support more effective cyber threat management processes and applications of automation. Exploit Targets (e.g., vulnerabilities and weaknesses). Courses of Action (e.g., incident response or vulnerability/weakness remedies). ATT&CK Tact...

maecproject.github.io

Authoring Tutorial | MAEC Project Documentation

http://maecproject.github.io/getting-started/authoring-tutorial

Getting Started with Python. MAEC 4.1 (current release). MAEC 5.0 Roadmap. MAEC 5.0 Working Calls. This authoring tutorial will walk you through how to create a simple MAEC Package.