Examples

The following are links to scripts of examples on how to use the MitreAttackData library. See the examples directory in the repository for more details.

Getting An ATT&CK Object

• get_object_by_stix_id.py

• get_object_by_attack_id.py

• get_objects_by_name.py

• get_groups_by_alias.py

• get_software_by_alias.py

• get_campaigns_by_alias.py

• get_stix_type.py

• get_attack_id.py

• get_name.py

Getting ATT&CK Objects by Type

• get_all_matrices.py

• get_all_tactics.py

• get_all_techniques.py

• get_all_mitigations.py

• get_all_groups.py

• get_all_software.py

• get_all_campaigns.py

• get_all_assets.py

• get_all_datasources.py

• get_all_datacomponents.py

Getting Multiple ATT&CK Objects

• get_tactics_by_matrix.py

• get_techniques_by_tactic.py

• get_tactics_by_technique.py

• get_techniques_by_platform.py

• get_objects_by_content.py

• get_objects_created_after.py

• get_objects_modified_after.py

Related Objects

Technique:Procedure Examples * get_procedure_examples_by_technique.py

Technique:Group Relationships

• get_all_groups_using_all_techniques.py

• get_groups_using_technique.py

• get_all_techniques_used_by_all_groups.py

• get_techniques_used_by_group.py

• get_techniques_used_by_group_software.py

Technique:Campaign Relationships

• get_all_techniques_used_by_all_campaigns.py

• get_techniques_used_by_campaign.py

• get_all_campaigns_using_all_techniques.py

• get_campaigns_using_technique.py

Technique:Software Relationships

• get_all_techniques_used_by_all_software.py

• get_techniques_used_by_software.py

• get_all_software_using_all_techniques.py

• get_software_using_technique.py

Technique:Mitigation Relationships

• get_all_techniques_mitigated_by_all_mitigations.py

• get_techniques_mitigated_by_mitigation.py

• get_all_mitigations_mitigating_all_techniques.py

• get_mitigations_mitigating_technique.py

Technique:Sub-technique Relationships

• get_all_parent_techniques_of_all_subtechniques.py

• get_parent_technique_of_subtechnique.py

• get_all_subtechniques_of_all_techniques.py

• get_subtechniques_of_technique.py

Technique:Data Component Relationships

• get_all_datacomponents_detecting_all_techniques.py

• get_datacomponents_detecting_technique.py

• get_all_techniques_detected_by_all_datacomponents.py

• get_techniques_detected_by_datacomponent.py

Software:Group Relationships

• get_all_groups_using_all_software.py

• get_groups_using_software.py

• get_all_software_used_by_all_groups.py

• get_software_used_by_group.py

Software:Campaign Relationships

• get_all_campaigns_using_all_software.py

• get_campaigns_using_software.py

• get_all_software_used_by_all_campaigns.py

• get_software_used_by_campaign.py

Campaign:Group Relationships

• get_all_groups_attributing_to_all_campaigns.py

• get_groups_attributing_to_campaign.py

• get_all_campaigns_attributed_to_all_groups.py

• get_campaigns_attributed_to_group.py

Technique:Asset Relationships

• get_all_assets_targeted_by_all_techniques.py

• get_assets_targeted_by_technique.py

• get_all_techniques_targeting_all_assets.py

• get_techniques_targeting_asset.py