Fill Attack Pattern Details
Attack patterns are a type of Tactics, Techniques, and Procedures (TTP) that describes ways that adversaries attempt to compromise targets.
Basic Details
Field Name | Required | Description |
|---|---|---|
Title | Mandatory | Specify the title for the attack pattern. |
Description | Optional | Specify the additional information about the attack pattern such as purpose and key characteristics. |
Aliases | Optional | Specify the alternate names used to identify the attack pattern. |
Common Fields
Field Name | Description |
|---|---|
Tags | Specify the tags for the attack pattern. |
TLP | Specify the TLP for the attack pattern, such as RED, AMBER, GREEN, WHITE, or NONE. |
Created by Reference | Specify the entity that created the CTIX object. |
Revoked | Select this option to mark the component as revoked or invalid. |
Custom Attributes
Field Name | Description |
|---|---|
Add Custom Attribute | Specify the additional information that helps in improving the threat intelligence details. CTIX displays custom attributes created in Administration > Custom Entities Management. You can create multiple custom attributes for the attack pattern. |
Kill Chain Phases
Include the kill chain phases for which this object can be used.
Field Name | Description |
Kill Chain Name | Choose the kill chain name to associate with this object. You can choose Lockheed Martin or MITRE kill chains. You can also create and add custom kill chains in Administration > Custom Entities Management and associate them here. |
Kill Chain Phase | Choose the kill chain phase associated with the kill chain. |
External References
Use external references to include any non-STIX information that you may want to associate with this object.
Field Name | Description |
|---|---|
Source Name | Enter a source name. |
Description | Enter a description. |
External ID | Enter an external ID. |
URL | Enter the URL of the external reference. |
Hash Type | Select the hash type. |
Hash Value | Enter the hash value. |