Fill Attack Pattern Details

Cyware Threat Intelligence eXchange

Attack patterns are a type of Tactics, Techniques, and Procedures (TTP) that describes ways that adversaries attempt to compromise targets.

Field Name	Required	Description
Title	Mandatory	Specify the title for the attack pattern.
Description	Optional	Specify the additional information about the attack pattern such as purpose and key characteristics.
Aliases	Optional	Specify the alternate names used to identify the attack pattern.

Field Name	Description
Tags	Specify the tags for the attack pattern.
TLP	Specify the TLP for the attack pattern, such as RED, AMBER, GREEN, WHITE, or NONE.
Created by Reference	Specify the entity that created the CTIX object.
Revoked	Select this option to mark the component as revoked or invalid.

Field Name	Description
Add Custom Attribute	Specify the additional information that helps in improving the threat intelligence details. CTIX displays custom attributes created in Administration > Custom Entities Management. You can create multiple custom attributes for the attack pattern. Note Reserved attributes cannot be created as custom attributes or mapped to custom objects. For more information, see Custom Attributes.

Include the kill chain phases for which this object can be used.

Field Name	Description
Kill Chain Name	Choose the kill chain name to associate with this object. You can choose Lockheed Martin or MITRE kill chains. You can also create and add custom kill chains in Administration > Custom Entities Management and associate them here.
Kill Chain Phase	Choose the kill chain phase associated with the kill chain.

Use external references to include any non-STIX information that you may want to associate with this object.

Field Name	Description
Source Name	Enter a source name.
Description	Enter a description.
External ID	Enter an external ID.
URL	Enter the URL of the external reference.
Hash Type	Select the hash type.
Hash Value	Enter the hash value.

Was this helpful?

Cyware Threat Intelligence eXchange