1
- # Mitre Checker Module
1
+ # Mitre ATT&CK Checker Module
2
2
3
- The Mitre Checker module aims to check the compliance of the Falco rules against the Mitre ATT&CK
4
- Framework . This module provides to Falco experts and Falco users a way to check default and custom
3
+ The Mitre ATT&CK Checker module aims to check the compliance of the Falco rules against the Mitre ATT&CK
4
+ framework . This module provides to Falco experts and Falco users a way to check default and custom
5
5
rules for Mitre ATT&CK extra tags.
6
6
This module uses STIX from the OASIS standards. Structured Threat Information Expression (STIX™) is a
7
7
language and serialization format used to exchange cyber threat intelligence (CTI) :
8
8
9
9
- [ STIX CTI documentation] ( https://oasis-open.github.io/cti-documentation/stix/intro )
10
10
11
- Leveraging STIX, Mitre Checker fetches the ATT&CK® STIX Data from MITRE ATT&CK repositories using the
12
- ` python-stix2 ` library implemented by OASIS:
11
+ Leveraging STIX, Mitre ATT&CK Checker fetches the ATT&CK® STIX Data from MITRE ATT&CK repositories using
12
+ the ` python-stix2 ` library implemented by OASIS:
13
13
14
14
- [ ATT&CK STIX Data repository] ( https://github.com/mitre-attack/attack-stix-data )
15
15
- [ Python STIX2 repository] ( https://github.com/oasis-open/cti-python-stix2 )
@@ -45,19 +45,19 @@ Requirements :
45
45
Or manualy using ` pip ` :
46
46
47
47
``` sh
48
- pip install dist/mitre_checker -0.1.0-py3-none-any.whl
48
+ pip install dist/falco_mitre_attack_checker -0.1.0-py3-none-any.whl
49
49
```
50
50
51
51
## Usage
52
52
53
53
``` sh
54
- python -m falco_mitre_checker --help
54
+ python -m falco_mitre_attack_checker --help
55
55
```
56
56
57
57
Using the stable falco rules :
58
58
59
59
``` sh
60
- python -m falco_mitre_checker -f ../../rules/falco_rules.yaml -o /tmp/
60
+ python -m falco_mitre_attack_checker -f ../../rules/falco_rules.yaml -o /tmp/
61
61
```
62
62
63
63
## Development
@@ -79,7 +79,7 @@ With coverage :
79
79
80
80
``` sh
81
81
poetry update
82
- poetry run python -m pytest falco_mitre_checker/tests --cov=falco_mitre_checker
82
+ poetry run python -m pytest --cov=falco_mitre_attack_checker
83
83
```
84
84
85
85
```
0 commit comments