MITRE ATT&CK software ID
ID mitre_attack_software_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of a piece of software in MITRE ATT&CK, either malware or a tool that adversaries use: S followed by four digits.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^S[0-9]{4}$Python re syntax.
Examples
| Value | Description |
|---|---|
| S0002 | Mimikatz |
| S0039 | Net |
| S00002 invalid | Five digits |
Sources
- wikipedia: https://en.wikipedia.org/wiki/ATT%26CK
- doc: https://attack.mitre.org/software/S0002
- other: https://github.com/mitre-attack/attack-stix-data
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/mitre_attack_software_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/mitre_attack_software_id.yamlon GitHub