There are no changes to the data model in the October 2024 ATT&CK Content Release (ATT&CK v16.0)
There are no changes to the data model in the April 2024 ATT&CK Content Release (ATT&CK v15.0)
Changes to ATT&CK in STIX for October 2023 ATT&CK Content Release (ATT&CK v14.0)
- Added Asset objects. For detailed information about the representation of Assets in ATT&CK/STIX, please see the assets section of the USAGE document.
Changes to ATT&CK in STIX for April 2023 ATT&CK Content Release (ATT&CK v13.0)
- Restored the
labels
property for ICS mitigation objects. This property documents security controls for ICS mitigations.
Changes to ATT&CK in STIX for October 2022 ATT&CK Content Release (ATT&CK v12.0)
- Added Campaign objects. For detailed information about the representation of Campaigns in ATT&CK/STIX, please see the campaign section of the USAGE document.
Changes to ATT&CK in STIX for October 2021 ATT&CK Content Release (ATT&CK v10)
Feature | Available in STIX 2.0 | Available in STIX 2.1 |
---|---|---|
Added full objects for data sources and data components. See the data sources section of the USAGE document for more information about data sources, data components, and their relationships with techniques. | ✅ | ✅ |
Added x_mitre_attack_spec_version field to all object types. This field tracks the version of the ATT&CK Spec used by the object. Consuming software can use this field to determine if the data format is supported; if the field is absent the object will be assumed to use ATT&CK Spec version 2.0.0 . |
❌ | ✅ |
Initial release of ATT&CK in STIX 2.1.
ATT&CK in STIX 2.0 (ATT&CK Spec < 2.0.0) can be found on our MITRE/CTI GitHub repository which contains the same dataset but in STIX 2.0 and without many of the quality-of-life features available in ATT&CK Spec v2.0.0+.
Feature | Available in STIX 2.0 | Available in STIX 2.1 |
---|---|---|
Added x_mitre_modified_by_ref field to all object types. This field tracks the identity of the individual or organization which created the current version of the object. |
❌ | ✅ |
Added x_mitre_domains field to all non-relationship objects. This field tracks the domains the object is found in. |
❌ | ✅ |
Added collection objects to track information about specific releases of the dataset and to allow the dataset to be imported into ATT&CK Workbench. | ❌ | ✅ |
Added a collection index to list the contents of this repository and to allow the data to be imported into ATT&CK Workbench. | ❌ | ✅ |