Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/center-for-threat-informed-defense/summiting-the-pyramid

Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research includes a scoring model, methodology, and worked examples.
https://github.com/center-for-threat-informed-defense/summiting-the-pyramid

ctid cyber-analytics cybersecurity detection-engineering mitre-attack threat-informed-defense

Last synced: about 1 month ago
JSON representation

Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research includes a scoring model, methodology, and worked examples.

Awesome Lists containing this project

README 

        
[![build](https://github.com/center-for-threat-informed-defense/summiting-the-pyramid/actions/workflows/build.yml/badge.svg)](https://github.com/center-for-threat-informed-defense/summiting-the-pyramid/actions/workflows/build.yml)



# Summiting the Pyramid



Summiting the Pyramid is a research project focused on engineering cyber analytics to

make adversary evasion more difficult. This project is created and maintained by the

[MITRE Center for Threat-Informed Defense](https://ctid.mitre.org/) in futherance of our

mission to advance the start of the art and and the state of the practice in

threat-informed defense globally. The project is funded by our [research

participants](https://ctid.mitre.org/projects/summiting-the-pyramid/#participants-section).



**Table Of Contents:**



- [Getting Started](#getting-started)

- [Getting Involved](#getting-involved)

- [Questions and Feedback](#questions-and-feedback)

- [How Do I Contribute?](#how-do-i-contribute)

- [Notice](#notice)



## Getting Started



To get started, read the project website. It provides an overview of the goals and

methodologies, defines all the key terms, and contains highly detailed examples.



| Resource                                                                                       | Description                                                   |

| ---------------------------------------------------------------------------------------------- | ------------------------------------------------------------- |

| [Project Website](https://center-for-threat-informed-defense.github.io/summiting-the-pyramid/) | Complete documentation for the Summiting the Pyramid project. |

| [Analytics Spreadsheet](docs/analytics/ScoredAnalytics_12062024.csv)                          | A summary of the analytics scored by the project team.        |



## Getting Involved



There are several ways that you can get involved with this project and help advance

threat-informed defense:



- **Review the project model and methodology and tell us what you think.** We welcome

  your feedback on any aspect of the project: from high-level concepts to low-level

  technical details.

- **Request analytics and observables.** Send your [analytic

  requests](https://github.com/center-for-threat-informed-defense/summiting-the-pyramid/issues/new/choose)

  to our team. As we have time, we will work them through the process and publish scores

  and analysis.

- **Submit your own analytics and observables.** We encourage you to use the methodology

  to work through analytics or observables and send your results in a pull request so

  that we can make them available to the entire community.



## Questions and Feedback



Please submit issues for any technical questions/concerns or contact

[email protected] directly for more general inquiries.



Also see the guidance for contributors if are you interested in contributing or simply

reporting issues.



## How Do I Contribute?



We welcome your feedback and contributions to hel∑



## Notice



© 2023, 2024 MITRE Engenuity. Approved for public release. Document number(s) CT0078,

CT0128.



Licensed under the Apache License, Version 2.0 (the "License"); you may not use this

file except in compliance with the License. You may obtain a copy of the License at



http://www.apache.org/licenses/LICENSE-2.0



Unless required by applicable law or agreed to in writing, software distributed under

the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

KIND, either express or implied. See the License for the specific language governing

permissions and limitations under the License.



This project makes use of ATT&CK®



[ATT&CK Terms of Use](https://attack.mitre.org/resources/terms-of-use/)