How to Download DeTT&CT Editor For MITRE ATT&ACK Techniques
By creating DeTT&CT we aim to assist blue teams using ATT&CK to score and compare data log source quality, visibility coverage, detection coverage and threat actor behaviors. All of which can help, in different ways, to get more resilient against attacks targeting your organization.
Framework to administrate,score and compare:
- Data source quality
- Visibility
- Detection
- Threat actor behaviors
Where do you focus on
- Which techniques we use?
- Where to improve visibility?
You can download DeTT&CT in you machine by using below command:
git clone https://github.com/rabobank-cdc/DeTTECT.git
After you have download it you need to check the requirements for DeTT&CT to work properly.
cat requirements.txt
attackcti==0.3.4.4
simplejson==3.17.6
plotly==5.4.0
pandas==1.3.5
xlsxwriter==3.0.2
ruamel.yaml==0.17.17
eql==0.9.11
taxii2-client==2.3.0
You can install all required libraries using below command:
pip install -r requirements.txt
You can see below DeTT&CT is successfully Installed