ATT&CK version 8.2
This commit is contained in:
Isabel Tuson
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--20891e76-11db-492e-8320-7ddeaa95d835",
|
||||
"id": "bundle--c321e442-bbf7-4448-b266-7e9b35e291b9",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--7caf97e5-c182-4728-a19b-6688b6dada19",
|
||||
"id": "bundle--4ac44d6a-9d11-4221-9103-b5d625aacddf",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--ce27cef0-0f60-4dfe-b78d-ba2a0f4798bd",
|
||||
"id": "bundle--d65aa246-3272-4253-8252-6b6e50906c49",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--a3b7c994-cf73-4b92-83c7-9dd3d020ed2f",
|
||||
"id": "bundle--bf5f9ef7-1efa-481a-bc49-37575cae5cf7",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--ece1a2a7-e1b6-4b8d-a60c-2a1272190bac",
|
||||
"id": "bundle--f101bfda-589e-47c9-ab59-47a731c75ff7",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--96031ea2-0dbc-4086-a731-5ce65277db89",
|
||||
"id": "bundle--4c110561-bd9f-478f-a8bd-f84678c4a522",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f1eefea1-7ffa-4e17-a828-41d78dfd371a",
|
||||
"id": "bundle--093acca5-1eea-4abb-a9f9-6f38281c401e",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--4bc4384a-7288-4fee-a913-17a29be4bdb2",
|
||||
"id": "bundle--7754a8a8-0195-4c2c-bc27-fe87d922aa5f",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--6c0485e1-416e-489c-aef5-4dc90c4f3911",
|
||||
"id": "bundle--c864c6fd-cfa0-445e-b727-ebe7c9dac407",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--31924fb0-b43c-46de-9571-32dcededabf4",
|
||||
"id": "bundle--a4f20761-af4e-478f-8b7a-461862e89a22",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f0040cef-7e54-42d8-9c9c-d4c05c836247",
|
||||
"id": "bundle--f65e2a6f-dc03-4292-8e61-36a98a081c47",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--18a96aa4-0104-4de4-a8d2-d8b8f1033c56",
|
||||
"id": "bundle--8ecdd49f-9179-43f7-ab45-d1a4082a6b52",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--8ba36c56-2ce3-452f-ad7b-f050e1118f9a",
|
||||
"id": "bundle--d85db5f9-1a7a-4840-980d-11009c0fc90b",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b3ed37c4-59ae-4d8d-9acf-6bd8aee8170b",
|
||||
"id": "bundle--c8884fc0-3c9f-4734-acbc-325c42c0516c",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--16a2e935-f567-4b1c-9e6e-342ff004102d",
|
||||
"id": "bundle--313e370e-92d1-440b-a8fa-f7c6f7e5d39c",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--5cb5ad2a-eb49-4d0b-8d02-11022670772d",
|
||||
"id": "bundle--960953fc-e9e3-4d9e-9703-cdfb321aaf6c",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--60129145-25cc-40f6-94cc-d84c4870944d",
|
||||
"id": "bundle--45fbe85d-574f-4688-89f0-5c9a08470c21",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--0461dd21-3a98-4f1d-a785-f4be235c969e",
|
||||
"id": "bundle--62765a87-b7a7-4e27-86a6-062cf3f30fdb",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f2df8a9c-b2f9-4e92-8b6f-dcf1589cadca",
|
||||
"id": "bundle--d5c69286-897c-4527-94e1-c7fdb40444f4",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--d5a9329f-0a62-4aa5-b9a9-c7059a405e40",
|
||||
"id": "bundle--2f2d8132-9e01-4547-8000-3c24e0583441",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--2ee892bd-65b8-4ead-8477-38482c3cdc4e",
|
||||
"id": "bundle--0511fc02-414c-4c14-b9f9-7a444f564835",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--5a8da81f-62a3-45cc-8e9d-365309c441d2",
|
||||
"id": "bundle--aad3de46-fc6d-486e-b564-141d4fdb017d",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--3b59992f-6dda-40ff-b525-9a12515a4c24",
|
||||
"id": "bundle--9be82abc-ba37-448e-b539-42aea52abc1f",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b6eb211c-b431-41e6-a03f-acc0c15b58af",
|
||||
"id": "bundle--db38f528-49bd-4829-9aa0-3f21fd1cee1c",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--9aa62f70-0064-4d11-b801-7d4670d78ad7",
|
||||
"id": "bundle--2326170d-fae1-4777-ac72-265ff27df80d",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--8816f1c0-a30b-4818-a6df-082de3e69269",
|
||||
"id": "bundle--983d3cb8-cb1b-45b2-b9ff-251048ac0a03",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--a6c91ee7-417e-4240-86fd-2684b0fed17f",
|
||||
"id": "bundle--2d30ddb0-ddf7-410c-b65d-326fbde6fe90",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--226edc56-84f3-4e46-9dd9-e5bf7ec43e46",
|
||||
"id": "bundle--5321a192-e71e-4b26-b2fd-e43007549421",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--6b4cf572-b064-4e0e-a600-209355a1e45d",
|
||||
"id": "bundle--8e39da29-bfbe-4f86-bb3b-1e9a89b3362b",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--1fd233a4-1131-4cd7-9ae5-15a28db3b27a",
|
||||
"id": "bundle--94c86287-36f0-442a-be5b-08974e2685f3",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--3381c99c-d0b1-46b0-b916-359a5695d21f",
|
||||
"id": "bundle--03b083cc-c7fb-412c-b3bb-2ea1a8244e87",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--244656cc-f016-44c4-a796-cc8823770066",
|
||||
"id": "bundle--ef8d5168-cc42-42f4-9432-fc27b01e481c",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--0d15a282-c68f-47c5-aa58-b7ca76c03e61",
|
||||
"id": "bundle--3a948baa-9200-4abd-a03e-d554510d86df",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--649ae97e-564f-45e1-afc8-9f21fa556322",
|
||||
"id": "bundle--a4ae24cf-db6a-44bc-8c62-7be7a84ec985",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--6522b6e4-8151-4b57-9613-dd7be287b62c",
|
||||
"id": "bundle--48afcc42-6a59-4294-b9e1-dbd73ba2ad35",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--d92dcd47-7b4f-44d9-a036-d2879f32864c",
|
||||
"id": "bundle--694c88cb-ae75-4e3e-9786-3a8833d34d26",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--bb17e5f6-85e3-4e3c-8827-3b8ea6426910",
|
||||
"id": "bundle--f7e8c1d1-9b46-4542-9273-60f8296f07d2",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--0138642b-505d-4e0f-8a11-80333ef85dc9",
|
||||
"id": "bundle--3b2c0f32-762e-4873-b58f-e5d4c06a7c3e",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--3090488b-6b55-45f8-9b33-2fb118c6585b",
|
||||
"id": "bundle--1993759c-a02a-433a-82d1-9fc450c51684",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f9d37001-bc7b-427e-bea5-0488c8fda466",
|
||||
"id": "bundle--2419d7e4-e40c-4b86-8f43-5609de418577",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b14f3b09-49ad-45e1-8e80-aaebdde02417",
|
||||
"id": "bundle--c89057d8-d654-4c70-9f76-840dd61e942e",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--ab58b9ef-25bc-40d7-9f86-080d7113ccd1",
|
||||
"id": "bundle--2f3dcc13-8ec7-424d-aace-ebf9a4ed8c02",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--c192989a-33a7-4ac7-b1fa-07239600598c",
|
||||
"id": "bundle--c2c8077b-ea1e-4337-ab64-52b672ad8ee3",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--637d9b9e-35b2-4814-81f5-23e6b713040b",
|
||||
"id": "bundle--7e4a13d5-0a2b-458c-9b7b-3b2004514ed3",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--9b8a1fb6-fa6e-4514-b733-8a68dea9a1dc",
|
||||
"id": "bundle--05f3d7f5-d8c4-4bae-b0d1-32f79e062963",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b9d90854-4749-471c-a08a-01718feab60a",
|
||||
"id": "bundle--f1c4efcd-d750-4e92-adc2-6fbf37e99965",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--bbf08ff3-62db-4f4e-b19e-75e3ccd7ebd9",
|
||||
"id": "bundle--28459c4e-3180-4d8d-a90d-42889caa18b1",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--7be4e1b5-abd8-429d-a294-f5255059a305",
|
||||
"id": "bundle--e15e2665-e290-448b-bf36-580ce0e39745",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--af19b883-3675-44a8-866c-4717fee6ff98",
|
||||
"id": "bundle--108fe091-55cb-440a-97a0-fe62a65daa68",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--a3136e58-fdcb-472a-965a-dede7421c4a1",
|
||||
"id": "bundle--8e652b1d-f57e-4ccf-814f-6e0f74dc6b59",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--2bf7452d-87ae-4979-954a-59afce09477e",
|
||||
"id": "bundle--f9f0373e-3c4d-469e-a52a-cbd3543ad72a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--c87c90be-53d4-4288-ba5e-f0040c27a1a3",
|
||||
"id": "bundle--c4e1925f-77de-4c51-b3a6-53dfe9c5d31a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--65888a59-e5fa-4962-9c7c-a530a717bda7",
|
||||
"id": "bundle--b0c78357-dfef-4973-b312-46b4365a3cbc",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--33ae7039-5ba6-4fb4-bfe0-cdb421f21abd",
|
||||
"id": "bundle--b50fb6b7-d85a-4f61-8c66-70eef6960c9d",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--5d9fe111-53e9-44a4-a538-32fa7e0ddb8b",
|
||||
"id": "bundle--024d25bd-a1ce-415e-9217-409227bcba25",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--251ac1c2-1fa5-417c-919f-564b05f05f43",
|
||||
"id": "bundle--eda74930-86ee-4950-9380-2f44a93dd233",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--4d185234-4c9a-4197-9c63-c0db2484a8bf",
|
||||
"id": "bundle--72018f09-c6cb-4bbc-ae12-b8a03d7b86e9",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--e7616a04-dfc9-4824-8023-7313ea21335f",
|
||||
"id": "bundle--069fb61b-cc11-4713-a73f-6499e12a9377",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--171fe17e-6ec1-4f1d-ad56-0d50628fea64",
|
||||
"id": "bundle--7d341eb4-6e7d-4dbb-89f8-961395a2ef8b",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--7102a489-e71f-43f6-ba94-29c89a9e9550",
|
||||
"id": "bundle--3647fa81-b8f4-43e7-b80b-251b56f40f79",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--772ac23f-34d9-41c5-b0c7-d7959b063379",
|
||||
"id": "bundle--8dc71b06-4a19-4c6b-b394-78bd67b53c46",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--3a7628e8-1964-445c-ba4e-61f5393f3d09",
|
||||
"id": "bundle--5f2e0a8d-0c67-441e-9290-9798dabb85fb",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--377f96e1-b364-4e20-990e-505579bccb21",
|
||||
"id": "bundle--b5b16b69-1bd6-4bdd-8dae-ca52a72dc400",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--6384afda-280e-4e51-937f-217e09f11d54",
|
||||
"id": "bundle--a4b989e8-00d8-4154-959d-6dab783b929b",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--22bd2e7a-9281-4289-909a-926e4789c572",
|
||||
"id": "bundle--5ee1c08c-4cd1-40c0-8ca5-6b63d4b0d8f6",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--cb886ea4-1111-43de-a4c1-754a382965fe",
|
||||
"id": "bundle--194b80a4-6047-4e1c-a76b-faa257b2faa7",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--6cdb5c03-2338-41af-b017-22d713fd0b5b",
|
||||
"id": "bundle--b0c3da58-23bc-4e06-99dd-180fbf72e22f",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b136aa09-0487-46cd-85db-8471bc5fced1",
|
||||
"id": "bundle--ad36c052-a119-4766-954a-4f19e6ce38bc",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b7ad898d-a8a3-4649-9053-0e1a9db0e287",
|
||||
"id": "bundle--1536b292-60f2-4556-89dc-8031096636a9",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--ead83495-2dcc-42fd-9bb4-91fb4a24bb24",
|
||||
"id": "bundle--c19e925e-4e8e-4561-b07f-5c25ac03c469",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--2c20813f-2a54-4eba-b8cc-fe1c6ee2f2ea",
|
||||
"id": "bundle--dd96227a-f5c8-49b6-8d88-d3cdb01b005e",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f58f2f10-c52d-46e5-b7a0-b37e246afa85",
|
||||
"id": "bundle--ffeba86f-28f4-45ac-befa-debbf67e7b52",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--2b64ac03-fdeb-41a7-b4b5-e008213cc905",
|
||||
"id": "bundle--174dbada-6d86-473f-aa68-396c5ae6eb05",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--a5e1e216-4d26-4fb9-a453-c0bd9c11f562",
|
||||
"id": "bundle--222ac104-f895-4937-9906-e714c8c5f0ac",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f0447201-368b-4f61-a64c-d5217dcde8d4",
|
||||
"id": "bundle--2a3d41bb-49ef-4bf4-976a-816f29b93e8e",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--30d0f80f-6646-4eb0-ad8e-2b5de4443f11",
|
||||
"id": "bundle--55ca2d2f-4adc-4930-9a2f-7b5e1e9d1d20",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--111768e1-20e8-4d8f-ada0-c63171134048",
|
||||
"id": "bundle--e98e06e5-f557-4644-b31c-90e3f22ba7bf",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--d15bfcd2-db40-4a1b-b2ac-c4a330c1e1ea",
|
||||
"id": "bundle--eef6e6ab-400d-48a0-b9a8-bcd258c8bd1a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--7cc16089-71d6-4f86-bdfe-7ca4337df940",
|
||||
"id": "bundle--ca660ab1-377c-4a82-9f1b-4e2bc5edc53a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--eec27c80-aabe-4e05-b6b9-fb60d54895d2",
|
||||
"id": "bundle--a0e3089f-02c8-4202-a676-e95c17d60574",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--8df0e431-f2a4-4df7-8052-835cc39ecba6",
|
||||
"id": "bundle--b1e60855-90e9-4e81-8d66-b1226f3f115b",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--0039dc52-a38a-4b05-b226-e77f83b19bff",
|
||||
"id": "bundle--0a2a81c7-d983-40b4-8f1e-50abc30c733d",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--d55d2f33-67b3-40d9-bad8-483aee84162e",
|
||||
"id": "bundle--c0f7165b-649f-4da4-9f64-636a692eca93",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--16d90d8e-c436-4fd9-9e74-0d99931d3c13",
|
||||
"id": "bundle--ad65b197-8926-41e4-82bd-6455eb0fff3a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--b18fd61a-f36b-4e65-bec5-13753b2a878b",
|
||||
"id": "bundle--f3383567-c29e-4e9d-bca0-6b3e602b0870",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--181dd24c-e196-4979-89ff-622d6570345c",
|
||||
"id": "bundle--a7ce8a02-f9a1-4235-aa87-1733f651cdf6",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--f67dafe3-5a97-4a11-b9da-b572380fd468",
|
||||
"id": "bundle--2a04d2a9-bee8-48ad-80c6-1aa6df15d41b",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--e2204f38-a22e-41e3-af6a-2d932221f0c8",
|
||||
"id": "bundle--f28c6ea8-9ced-4aac-b32c-0068807eae50",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--addfae26-3423-425d-81e4-fb8d13fe9154",
|
||||
"id": "bundle--7f1e4409-4c3d-4c1b-a7e0-026e3f081973",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--cca7c327-da37-467e-b163-5b329b9afdb2",
|
||||
"id": "bundle--99e111c9-ef74-473b-a512-d9579e4adfe7",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--59c8dd37-ceac-4e4a-bd0a-e67a61f6c627",
|
||||
"id": "bundle--868f2e40-7fa7-4a56-9c17-96d4667b4408",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--162c83cd-b697-41fe-9d20-39d65e0124a9",
|
||||
"id": "bundle--46ed51a9-7f2d-4861-a900-4ab69e8fe0e3",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--01df5749-1a85-4406-ab01-a387c5f47fcb",
|
||||
"id": "bundle--b68e4641-8c11-494e-af4f-b75056f79d80",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--d49d0670-dcaf-4c66-b203-dcc1c072f19b",
|
||||
"id": "bundle--e3080ae0-87f6-49ed-9174-b3b4cc2ae7cf",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--338c3630-8135-48c7-a0ea-212bc4f4b347",
|
||||
"id": "bundle--0834ac4e-e169-4d73-a8fa-0fa28d8f5aa0",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--1e53baa8-8bf2-4a3a-849d-c1139814e82f",
|
||||
"id": "bundle--4ee4d471-df40-44a9-a910-c5ecffcae463",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+77
@@ -0,0 +1,77 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--975bbaa0-81fe-4a29-b9f2-56dc0df96790",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
"external_references": [
|
||||
{
|
||||
"source_name": "mitre-attack",
|
||||
"external_id": "T1606.002",
|
||||
"url": "https://attack.mitre.org/techniques/T1606/002"
|
||||
},
|
||||
{
|
||||
"source_name": "Microsoft SolarWinds Steps",
|
||||
"url": "https://blogs.microsoft.com/on-the-issues/2020/12/13/customers-protect-nation-state-cyberattacks/",
|
||||
"description": "Lambert, J. (2020, December 13). Important steps for customers to protect themselves from recent nation-state cyberattacks. Retrieved December 17, 2020."
|
||||
},
|
||||
{
|
||||
"source_name": "Microsoft SAML Token Lifetimes",
|
||||
"url": "https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes",
|
||||
"description": "Microsoft. (2020, December 14). Configurable token lifetimes in Microsoft Identity Platform. Retrieved December 22, 2020."
|
||||
},
|
||||
{
|
||||
"source_name": "Cyberark Golden SAML",
|
||||
"url": "https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps",
|
||||
"description": "Reiner, S. (2017, November 21). Golden SAML: Newly Discovered Attack Technique Forges Authentication to Cloud Apps. Retrieved December 17, 2020."
|
||||
},
|
||||
{
|
||||
"source_name": "Microsoft SolarWinds Customer Guidance",
|
||||
"url": "https://msrc-blog.microsoft.com/2020/12/13/customer-guidance-on-recent-nation-state-cyber-attacks/",
|
||||
"description": "MSRC. (2020, December 13). Customer Guidance on Recent Nation-State Cyber Attacks. Retrieved December 17, 2020."
|
||||
},
|
||||
{
|
||||
"source_name": "Sygnia Golden SAML",
|
||||
"url": "https://www.sygnia.co/golden-saml-advisory",
|
||||
"description": "Sygnia. (2020, December). Detection and Hunting of Golden SAML Attack. Retrieved January 6, 2021."
|
||||
}
|
||||
],
|
||||
"object_marking_refs": [
|
||||
"marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
|
||||
],
|
||||
"created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
|
||||
"name": "SAML Tokens",
|
||||
"description": "An adversary may forge SAML tokens with any permissions claims and lifetimes if they possess a valid SAML token-signing certificate.(Citation: Microsoft SolarWinds Steps) The default lifetime of a SAML token is one hour, but the validity period can be specified in the <code>NotOnOrAfter</code> value of the <code>conditions ...</code> element in a token. This value can be changed using the <code>AccessTokenLifetime</code> in a <code>LifetimeTokenPolicy</code>.(Citation: Microsoft SAML Token Lifetimes) Forged SAML tokens enable adversaries to authenticate across services that use SAML 2.0 as an SSO (single sign-on) mechanism.(Citation: Cyberark Golden SAML)\n\nAn adversary may utilize [Private Keys](https://attack.mitre.org/techniques/T1552/004) to compromise an organization's token-signing certificate to create forged SAML tokens. If the adversary has sufficient permissions to establish a new federation trust with their own Active Directory Federation Services (AD FS) server, they may instead generate their own trusted token-signing certificate.(Citation: Microsoft SolarWinds Customer Guidance) This differs from [Steal Application Access Token](https://attack.mitre.org/techniques/T1528) and other similar behaviors in that the tokens are new and forged by the adversary, rather than stolen or intercepted from legitimate users.\n\nAn adversary may gain administrative Azure AD privileges if a SAML token is forged which claims to represent a highly privileged account. This may lead to [Use Alternate Authentication Material](https://attack.mitre.org/techniques/T1550), which may bypass multi-factor and other authentication protection mechanisms.(Citation: Microsoft SolarWinds Customer Guidance)",
|
||||
"id": "attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2",
|
||||
"type": "attack-pattern",
|
||||
"kill_chain_phases": [
|
||||
{
|
||||
"kill_chain_name": "mitre-attack",
|
||||
"phase_name": "credential-access"
|
||||
}
|
||||
],
|
||||
"modified": "2021-01-22T21:07:42.451Z",
|
||||
"created": "2020-12-17T15:24:12.240Z",
|
||||
"x_mitre_permissions_required": [
|
||||
"Administrator"
|
||||
],
|
||||
"x_mitre_data_sources": [
|
||||
"Windows event logs",
|
||||
"Authentication logs"
|
||||
],
|
||||
"x_mitre_contributors": [
|
||||
"Blake Strom, Microsoft 365 Defender",
|
||||
"Oleg Kolesnikov, Securonix"
|
||||
],
|
||||
"x_mitre_version": "1.0",
|
||||
"x_mitre_is_subtechnique": true,
|
||||
"x_mitre_detection": "This technique may be difficult to detect as SAML tokens are signed by a trusted certificate. The forging process may not be detectable since it is likely to happen outside of a defender's visibility, but subsequent usage of the forged token may be seen. Monitor for anomalous logins using SAML tokens created by a compromised or adversary generated token-signing certificate. These logins may occur on any on-premises resources as well as from any cloud environment that trusts the certificate.(Citation: Microsoft SolarWinds Customer Guidance) Search for logins to service providers using SAML SSO which do not have corresponding 4769, 1200, and 1202 events in the Domain.(Citation: Sygnia Golden SAML)\n\nConsider modifying SAML responses to include custom elements for each service provider. Monitor these custom elements in service provider access logs to detect any anomalous requests.(Citation: Sygnia Golden SAML)",
|
||||
"x_mitre_platforms": [
|
||||
"Azure AD",
|
||||
"SaaS",
|
||||
"Windows",
|
||||
"Office 365"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--75e3ee79-ea16-4245-9534-b07363bbc4f3",
|
||||
"id": "bundle--8aec7d10-ec33-486c-9164-126ad47b7d7a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--80ba3047-5308-4461-9f03-b4440e714852",
|
||||
"id": "bundle--4fe28741-b971-4b47-a27b-3b9925c7460a",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"type": "bundle",
|
||||
"id": "bundle--78b48bbf-14cf-4cd7-8f75-44efd9ff13e6",
|
||||
"id": "bundle--afe57c5f-4bcd-487a-93a7-905b68c21491",
|
||||
"spec_version": "2.0",
|
||||
"objects": [
|
||||
{
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user