Technique data sources

[0xtf]

Technique data sources

[0xtf]

Hi @hxnoyd,

Not exactly sure what happened but I completely missed this! Apologizes.

That's a very fair point. I would assume that MITRE is defining their data sources in an ideal situation or using sources with the best return of coverage.

One of the reasons I started adding the payload was exactly to have evidence of the coverage, as some ATT&CK coverage mappings can quickly become, well ... creative.

There is still a lot that needs to be done in this project but I will definitely keep this open as a reminder that we should provide MITRE with information of coverage EVEN if NIDS, or more generally speaking, NSM, isn't listed as a source for the techniques present in this project.

Another change that also needs to happen in this project is the inclusion of NSM parsing capabilities, ideally with examples, even if there are no IDS rules in the rulesets.

Thank you for your comment and suggestion.

If anyone ends up here and feels like working on this, we're hiring. 😎