How to Download DeTT&CT Editor For MITRE ATT&ACK Techniques

Arslan Sabir
System Weakness
Published in
Jan 20, 2022

--

By creating DeTT&CT we aim to assist blue teams using ATT&CK to score and compare data log source quality, visibility coverage, detection coverage and threat actor behaviors. All of which can help, in different ways, to get more resilient against attacks targeting your organization.

Framework to administrate,score and compare:

  • Data source quality
  • Visibility
  • Detection
  • Threat actor behaviors

Where do you focus on

  • Which techniques we use?
  • Where to improve visibility?

You can download DeTT&CT in you machine by using below command:

git clone https://github.com/rabobank-cdc/DeTTECT.git

After you have download it you need to check the requirements for DeTT&CT to work properly.

cat requirements.txt

attackcti==0.3.4.4
simplejson==3.17.6
plotly==5.4.0
pandas==1.3.5
xlsxwriter==3.0.2
ruamel.yaml==0.17.17
eql==0.9.11
taxii2-client==2.3.0

You can install all required libraries using below command:

pip install -r requirements.txt

You can see below DeTT&CT is successfully Installed

--

--