README.md

MITRE ATT&CK in CSV form

The uberAgent ESA Splunk app shows MITRE ATT&CK © information for events. The information is stored in a CSV file that serves as the basis for a Splunk lookup. Every release comes with the newest ATT&CK information but if one wants the latest information between uberAgent releases, they may download the latest annotation_mitre_attack.csv anytime.

The CSV gets updated with the latest ATT&CK Enterprise Techniques on a daily basis, if there are any changes to the source.

For more information please visit the uberAgent documentation

This repository leverages the MITRE ATT&CK Enterprise Techniques data from https://github.com/mitre/cti, but is not associated with MITRE.

© 2021 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. https://attack.mitre.org/resources/terms-of-use/