479 строки
20 KiB
Plaintext
479 строки
20 KiB
Plaintext
{
|
||
"cells": [
|
||
{
|
||
"cell_type": "markdown",
|
||
"metadata": {},
|
||
"source": [
|
||
"# Generate AMITT github files\n",
|
||
"\n",
|
||
"Generate all the AMITT github files from the AMITT master spreadsheet, being careful to reatin any comments people have made below the \"don't write above this\" line in them. "
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": 7,
|
||
"metadata": {
|
||
"scrolled": true
|
||
},
|
||
"outputs": [
|
||
{
|
||
"name": "stdout",
|
||
"output_type": "stream",
|
||
"text": [
|
||
"updated ../amitt_red_framework.md\n",
|
||
"updated ../amitt_red_framework_clickable.html\n",
|
||
"updated ../amitt_blue_framework.md\n",
|
||
"updated ../amitt_blue_framework_clickable.html\n",
|
||
"updated ../phases_index.md\n",
|
||
"updated ../tactics_index.md\n",
|
||
"updated ../techniques_index.md\n",
|
||
"updated ../tasks_index.md\n",
|
||
"updated ../incidents_index.md\n",
|
||
"updated ../counters_index.md\n",
|
||
"updated ../metatechniques_index.md\n",
|
||
"updated ../actortypes_index.md\n",
|
||
"updated ../responsetype_index.md\n",
|
||
"updated ../detections_index.md\n",
|
||
"updated ../tactics_by_responsetype_table.md\n",
|
||
"updated ../metatechniques_by_responsetype_table.md\n"
|
||
]
|
||
}
|
||
],
|
||
"source": [
|
||
"import pandas as pd\n",
|
||
"from generate_amitt_ttps import Amitt\n",
|
||
"amitt = Amitt()\n",
|
||
"amitt.generate_and_write_datafiles()"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": 8,
|
||
"metadata": {},
|
||
"outputs": [
|
||
{
|
||
"data": {
|
||
"text/html": [
|
||
"<div>\n",
|
||
"<style scoped>\n",
|
||
" .dataframe tbody tr th:only-of-type {\n",
|
||
" vertical-align: middle;\n",
|
||
" }\n",
|
||
"\n",
|
||
" .dataframe tbody tr th {\n",
|
||
" vertical-align: top;\n",
|
||
" }\n",
|
||
"\n",
|
||
" .dataframe thead th {\n",
|
||
" text-align: right;\n",
|
||
" }\n",
|
||
"</style>\n",
|
||
"<table border=\"1\" class=\"dataframe\">\n",
|
||
" <thead>\n",
|
||
" <tr style=\"text-align: right;\">\n",
|
||
" <th></th>\n",
|
||
" <th>amitt_id</th>\n",
|
||
" <th>name</th>\n",
|
||
" <th>metatechnique</th>\n",
|
||
" <th>summary</th>\n",
|
||
" <th>actortypes</th>\n",
|
||
" <th>resources_needed</th>\n",
|
||
" <th>how_found</th>\n",
|
||
" <th>references</th>\n",
|
||
" <th>incident_ids</th>\n",
|
||
" <th>tactic</th>\n",
|
||
" <th>responsetype</th>\n",
|
||
" <th>notes</th>\n",
|
||
" <th>techniques</th>\n",
|
||
" <th>longname</th>\n",
|
||
" <th>tactic_id</th>\n",
|
||
" <th>tactic_name</th>\n",
|
||
" <th>metatechnique_id</th>\n",
|
||
" <th>metatechnique_name</th>\n",
|
||
" </tr>\n",
|
||
" </thead>\n",
|
||
" <tbody>\n",
|
||
" <tr>\n",
|
||
" <th>0</th>\n",
|
||
" <td>C00006</td>\n",
|
||
" <td>Charge for social media</td>\n",
|
||
" <td>M004 - friction</td>\n",
|
||
" <td>Include a paid-for privacy option, e.g. pay Fa...</td>\n",
|
||
" <td>A033 - social media platform owner</td>\n",
|
||
" <td></td>\n",
|
||
" <td>2019-11-workshop</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA01 Strategic Planning</td>\n",
|
||
" <td>D2 Deny</td>\n",
|
||
" <td></td>\n",
|
||
" <td>T0007 - Create fake Social Media Profiles / Pa...</td>\n",
|
||
" <td>C00006 - Charge for social media</td>\n",
|
||
" <td>TA01</td>\n",
|
||
" <td>Strategic Planning</td>\n",
|
||
" <td>M004</td>\n",
|
||
" <td>- friction</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>1</th>\n",
|
||
" <td>C00008</td>\n",
|
||
" <td>Create shared fact-checking database</td>\n",
|
||
" <td>M006 - scoring</td>\n",
|
||
" <td>Share fact-checking resources - tips, response...</td>\n",
|
||
" <td>A007 - factchecker</td>\n",
|
||
" <td></td>\n",
|
||
" <td>2019-11-workshop\\n2019-11-search</td>\n",
|
||
" <td></td>\n",
|
||
" <td>I00049,I00050</td>\n",
|
||
" <td>TA01 Strategic Planning</td>\n",
|
||
" <td>D4 Degrade</td>\n",
|
||
" <td></td>\n",
|
||
" <td>T0001 - 5Ds (dismiss, distort, distract, disma...</td>\n",
|
||
" <td>C00008 - Create shared fact-checking database</td>\n",
|
||
" <td>TA01</td>\n",
|
||
" <td>Strategic Planning</td>\n",
|
||
" <td>M006</td>\n",
|
||
" <td>- scoring</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>2</th>\n",
|
||
" <td>C00009</td>\n",
|
||
" <td>Educate high profile influencers on best pract...</td>\n",
|
||
" <td>M001 - resilience</td>\n",
|
||
" <td>Find online influencers. Provide training in t...</td>\n",
|
||
" <td>A016 - influencer,A006 - educator</td>\n",
|
||
" <td></td>\n",
|
||
" <td>2019-11-workshop</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA02 Objective Planning</td>\n",
|
||
" <td>D2 Deny</td>\n",
|
||
" <td></td>\n",
|
||
" <td>T0010 - Cultivate ignorant agents\\nT0039 - Bai...</td>\n",
|
||
" <td>C00009 - Educate high profile influencers on b...</td>\n",
|
||
" <td>TA02</td>\n",
|
||
" <td>Objective Planning</td>\n",
|
||
" <td>M001</td>\n",
|
||
" <td>- resilience</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>3</th>\n",
|
||
" <td>C00010</td>\n",
|
||
" <td>Enhanced privacy regulation for social media</td>\n",
|
||
" <td>M004 - friction</td>\n",
|
||
" <td>Implement stronger privacy standards, to reduc...</td>\n",
|
||
" <td>A020 - policy maker</td>\n",
|
||
" <td></td>\n",
|
||
" <td>2019-11-workshop</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA01 Strategic Planning</td>\n",
|
||
" <td>D2 Deny</td>\n",
|
||
" <td></td>\n",
|
||
" <td>T0005 - Center of gravity analysis\\nT0018 - Pa...</td>\n",
|
||
" <td>C00010 - Enhanced privacy regulation for socia...</td>\n",
|
||
" <td>TA01</td>\n",
|
||
" <td>Strategic Planning</td>\n",
|
||
" <td>M004</td>\n",
|
||
" <td>- friction</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>4</th>\n",
|
||
" <td>C00011</td>\n",
|
||
" <td>Media literacy. Games to identify fake news</td>\n",
|
||
" <td>M001 - resilience</td>\n",
|
||
" <td>Create and use games to show people the mechan...</td>\n",
|
||
" <td>A006 - educator,A026 - games designer,A024 - d...</td>\n",
|
||
" <td></td>\n",
|
||
" <td>2019-11-workshop</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA02 Objective Planning</td>\n",
|
||
" <td>D2 Deny</td>\n",
|
||
" <td></td>\n",
|
||
" <td>T0001 - 5Ds (dismiss, distort, distract, disma...</td>\n",
|
||
" <td>C00011 - Media literacy. Games to identify fak...</td>\n",
|
||
" <td>TA02</td>\n",
|
||
" <td>Objective Planning</td>\n",
|
||
" <td>M001</td>\n",
|
||
" <td>- resilience</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>...</th>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" <td>...</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>135</th>\n",
|
||
" <td>C00219</td>\n",
|
||
" <td>Add metadata to content that’s out of the cont...</td>\n",
|
||
" <td>M003 - daylight</td>\n",
|
||
" <td>Steganography. Adding date, signatures etc to ...</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>grugq</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA06 Develop Content</td>\n",
|
||
" <td>D4 Degrade</td>\n",
|
||
" <td></td>\n",
|
||
" <td>T0024 - Create fake videos and images\\nT0026 -...</td>\n",
|
||
" <td>C00219 - Add metadata to content that’s out of...</td>\n",
|
||
" <td>TA06</td>\n",
|
||
" <td>Develop Content</td>\n",
|
||
" <td>M003</td>\n",
|
||
" <td>- daylight</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>136</th>\n",
|
||
" <td>C00220</td>\n",
|
||
" <td>Develop a monitoring and intelligence plan</td>\n",
|
||
" <td>M007 - metatechnique</td>\n",
|
||
" <td>Create a plan for misinformation and disinform...</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>Counters cleanup</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA01 Strategic Planning</td>\n",
|
||
" <td>D3 Disrupt</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>C00220 - Develop a monitoring and intelligence...</td>\n",
|
||
" <td>TA01</td>\n",
|
||
" <td>Strategic Planning</td>\n",
|
||
" <td>M007</td>\n",
|
||
" <td>- metatechnique</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>137</th>\n",
|
||
" <td>C00221</td>\n",
|
||
" <td>Run a disinformation red team, and design miti...</td>\n",
|
||
" <td>M007 - metatechnique</td>\n",
|
||
" <td>Include PACE plans - Primary, Alternate, Conti...</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>Counters cleanup</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA01 Strategic Planning</td>\n",
|
||
" <td>D3 Disrupt</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>C00221 - Run a disinformation red team, and de...</td>\n",
|
||
" <td>TA01</td>\n",
|
||
" <td>Strategic Planning</td>\n",
|
||
" <td>M007</td>\n",
|
||
" <td>- metatechnique</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>138</th>\n",
|
||
" <td>C00222</td>\n",
|
||
" <td>Tabletop simulations</td>\n",
|
||
" <td>M007 - metatechnique</td>\n",
|
||
" <td>Simulate misinformation and disinformation cam...</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA02 Objective Planning</td>\n",
|
||
" <td>D3 Disrupt</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>C00222 - Tabletop simulations</td>\n",
|
||
" <td>TA02</td>\n",
|
||
" <td>Objective Planning</td>\n",
|
||
" <td>M007</td>\n",
|
||
" <td>- metatechnique</td>\n",
|
||
" </tr>\n",
|
||
" <tr>\n",
|
||
" <th>139</th>\n",
|
||
" <td>C00223</td>\n",
|
||
" <td>Strengthen Trust in social media platforms</td>\n",
|
||
" <td>M001 - resilience</td>\n",
|
||
" <td>Improve trust in the misinformation responses ...</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>TA01 Strategic Planning</td>\n",
|
||
" <td>D3 Disrupt</td>\n",
|
||
" <td></td>\n",
|
||
" <td></td>\n",
|
||
" <td>C00223 - Strengthen Trust in social media plat...</td>\n",
|
||
" <td>TA01</td>\n",
|
||
" <td>Strategic Planning</td>\n",
|
||
" <td>M001</td>\n",
|
||
" <td>- resilience</td>\n",
|
||
" </tr>\n",
|
||
" </tbody>\n",
|
||
"</table>\n",
|
||
"<p>140 rows × 18 columns</p>\n",
|
||
"</div>"
|
||
],
|
||
"text/plain": [
|
||
" amitt_id name \\\n",
|
||
"0 C00006 Charge for social media \n",
|
||
"1 C00008 Create shared fact-checking database \n",
|
||
"2 C00009 Educate high profile influencers on best pract... \n",
|
||
"3 C00010 Enhanced privacy regulation for social media \n",
|
||
"4 C00011 Media literacy. Games to identify fake news \n",
|
||
".. ... ... \n",
|
||
"135 C00219 Add metadata to content that’s out of the cont... \n",
|
||
"136 C00220 Develop a monitoring and intelligence plan \n",
|
||
"137 C00221 Run a disinformation red team, and design miti... \n",
|
||
"138 C00222 Tabletop simulations \n",
|
||
"139 C00223 Strengthen Trust in social media platforms \n",
|
||
"\n",
|
||
" metatechnique summary \\\n",
|
||
"0 M004 - friction Include a paid-for privacy option, e.g. pay Fa... \n",
|
||
"1 M006 - scoring Share fact-checking resources - tips, response... \n",
|
||
"2 M001 - resilience Find online influencers. Provide training in t... \n",
|
||
"3 M004 - friction Implement stronger privacy standards, to reduc... \n",
|
||
"4 M001 - resilience Create and use games to show people the mechan... \n",
|
||
".. ... ... \n",
|
||
"135 M003 - daylight Steganography. Adding date, signatures etc to ... \n",
|
||
"136 M007 - metatechnique Create a plan for misinformation and disinform... \n",
|
||
"137 M007 - metatechnique Include PACE plans - Primary, Alternate, Conti... \n",
|
||
"138 M007 - metatechnique Simulate misinformation and disinformation cam... \n",
|
||
"139 M001 - resilience Improve trust in the misinformation responses ... \n",
|
||
"\n",
|
||
" actortypes resources_needed \\\n",
|
||
"0 A033 - social media platform owner \n",
|
||
"1 A007 - factchecker \n",
|
||
"2 A016 - influencer,A006 - educator \n",
|
||
"3 A020 - policy maker \n",
|
||
"4 A006 - educator,A026 - games designer,A024 - d... \n",
|
||
".. ... ... \n",
|
||
"135 \n",
|
||
"136 \n",
|
||
"137 \n",
|
||
"138 \n",
|
||
"139 \n",
|
||
"\n",
|
||
" how_found references incident_ids \\\n",
|
||
"0 2019-11-workshop \n",
|
||
"1 2019-11-workshop\\n2019-11-search I00049,I00050 \n",
|
||
"2 2019-11-workshop \n",
|
||
"3 2019-11-workshop \n",
|
||
"4 2019-11-workshop \n",
|
||
".. ... ... ... \n",
|
||
"135 grugq \n",
|
||
"136 Counters cleanup \n",
|
||
"137 Counters cleanup \n",
|
||
"138 \n",
|
||
"139 \n",
|
||
"\n",
|
||
" tactic responsetype notes \\\n",
|
||
"0 TA01 Strategic Planning D2 Deny \n",
|
||
"1 TA01 Strategic Planning D4 Degrade \n",
|
||
"2 TA02 Objective Planning D2 Deny \n",
|
||
"3 TA01 Strategic Planning D2 Deny \n",
|
||
"4 TA02 Objective Planning D2 Deny \n",
|
||
".. ... ... ... \n",
|
||
"135 TA06 Develop Content D4 Degrade \n",
|
||
"136 TA01 Strategic Planning D3 Disrupt \n",
|
||
"137 TA01 Strategic Planning D3 Disrupt \n",
|
||
"138 TA02 Objective Planning D3 Disrupt \n",
|
||
"139 TA01 Strategic Planning D3 Disrupt \n",
|
||
"\n",
|
||
" techniques \\\n",
|
||
"0 T0007 - Create fake Social Media Profiles / Pa... \n",
|
||
"1 T0001 - 5Ds (dismiss, distort, distract, disma... \n",
|
||
"2 T0010 - Cultivate ignorant agents\\nT0039 - Bai... \n",
|
||
"3 T0005 - Center of gravity analysis\\nT0018 - Pa... \n",
|
||
"4 T0001 - 5Ds (dismiss, distort, distract, disma... \n",
|
||
".. ... \n",
|
||
"135 T0024 - Create fake videos and images\\nT0026 -... \n",
|
||
"136 \n",
|
||
"137 \n",
|
||
"138 \n",
|
||
"139 \n",
|
||
"\n",
|
||
" longname tactic_id \\\n",
|
||
"0 C00006 - Charge for social media TA01 \n",
|
||
"1 C00008 - Create shared fact-checking database TA01 \n",
|
||
"2 C00009 - Educate high profile influencers on b... TA02 \n",
|
||
"3 C00010 - Enhanced privacy regulation for socia... TA01 \n",
|
||
"4 C00011 - Media literacy. Games to identify fak... TA02 \n",
|
||
".. ... ... \n",
|
||
"135 C00219 - Add metadata to content that’s out of... TA06 \n",
|
||
"136 C00220 - Develop a monitoring and intelligence... TA01 \n",
|
||
"137 C00221 - Run a disinformation red team, and de... TA01 \n",
|
||
"138 C00222 - Tabletop simulations TA02 \n",
|
||
"139 C00223 - Strengthen Trust in social media plat... TA01 \n",
|
||
"\n",
|
||
" tactic_name metatechnique_id metatechnique_name \n",
|
||
"0 Strategic Planning M004 - friction \n",
|
||
"1 Strategic Planning M006 - scoring \n",
|
||
"2 Objective Planning M001 - resilience \n",
|
||
"3 Strategic Planning M004 - friction \n",
|
||
"4 Objective Planning M001 - resilience \n",
|
||
".. ... ... ... \n",
|
||
"135 Develop Content M003 - daylight \n",
|
||
"136 Strategic Planning M007 - metatechnique \n",
|
||
"137 Strategic Planning M007 - metatechnique \n",
|
||
"138 Objective Planning M007 - metatechnique \n",
|
||
"139 Strategic Planning M001 - resilience \n",
|
||
"\n",
|
||
"[140 rows x 18 columns]"
|
||
]
|
||
},
|
||
"execution_count": 8,
|
||
"metadata": {},
|
||
"output_type": "execute_result"
|
||
}
|
||
],
|
||
"source": [
|
||
"amitt.df_counters"
|
||
]
|
||
},
|
||
{
|
||
"cell_type": "code",
|
||
"execution_count": null,
|
||
"metadata": {},
|
||
"outputs": [],
|
||
"source": []
|
||
}
|
||
],
|
||
"metadata": {
|
||
"kernelspec": {
|
||
"display_name": "Python 3",
|
||
"language": "python",
|
||
"name": "python3"
|
||
},
|
||
"language_info": {
|
||
"codemirror_mode": {
|
||
"name": "ipython",
|
||
"version": 3
|
||
},
|
||
"file_extension": ".py",
|
||
"mimetype": "text/x-python",
|
||
"name": "python",
|
||
"nbconvert_exporter": "python",
|
||
"pygments_lexer": "ipython3",
|
||
"version": "3.8.3"
|
||
}
|
||
},
|
||
"nbformat": 4,
|
||
"nbformat_minor": 4
|
||
}
|