MITRE ATT&CK group ID
ID mitre_attack_group_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of a threat group (intrusion set) in MITRE ATT&CK: G followed by four digits.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^G[0-9]{4}$Python re syntax.
Examples
| Value | Description |
|---|---|
| G0007 | APT28 |
| G0016 | APT29 |
| G007 invalid | Three digits |
Sources
- wikipedia: https://en.wikipedia.org/wiki/ATT%26CK
- doc: https://attack.mitre.org/groups/G0016
- other: https://github.com/mitre-attack/attack-stix-data
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/mitre_attack_group_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/mitre_attack_group_id.yamlon GitHub