Blog
The DOGESEC blog
-
Extending MITRE ATT&CK
Add new objects, edit existing ones or create an entierly new framework. Anything is possible. -
Getting Started with MITRE ATT&CK Navigator
TUTORIAL PRODUCTS July 11, 2024
The MITRE ATT&CK Navigator is a very useful tool to explore the MITRE ATT&CK framework. Here is how I've used it. -
Getting Started with MITRE TRAM
TUTORIAL PRODUCTS July 08, 2024
MITRE TRAM automatically extracts ATT&CK Techniques being discussed in reports. -
MITRE ATT&CK is More Than Tactics and Techniques
TUTORIAL PRODUCTS July 04, 2024
Software, Data Sources, Data Components, Campaigns etc., make the MITRE ATT&CK data set even more powerful than you might realise. -
A Beginners Guide to TAXII Clients and Servers
Want to consume and/or share cyber threat intelligence easily? TAXII is what you need. Let me show you. -
An Introduction to Writing Sigma Rules
TUTORIAL PRODUCTS June 27, 2024
Sigma Rules are becoming more widely adopted. You should probably learn how to write them. Let me show you. -
Constructing STIX Indicator Patterns
The STIX 2.1 Indicator SDO specification is flexible enough to allow for a range of detection languages which means you can share your detection content with tools that understand STIX. -
Creating Your Own Custom STIX Objects
Sometimes the default STIX 2.1 objects will not be broad enough for your needs. This post describes how you can extend STIX. -
A Quickstart Guide for the STIX 2 Python Library
If you're an intelligence producer, the STIX2 Python library will prove invaluable to you. -
A Beginners Guide to STIX 2.1 Objects
TUTORIAL June 17, 2024
New to STIX? This post shows how objects are created and structured. By the end you will have enough information to start authoring your own objects.