db_docs.md

DB Doc notes

select * from 'activity_log'

Datatable from command: | timestamp | PatternID | Data

select * from `attack_patterns`;

ID | ExternalId | Name | Phase | URL

select * from `attack_phases`;

select * from `known_groups`;

| ID | URL | Name (from Mitre) | Aliases | ExternalId

select * from `known_malware`