AttackForge provides you with vulnerability knowledgebases which you can import into your Writeups libraries to make your security reporting faster and easier.
A Writeup is a definition of a vulnerability, which at a minimum consists of:
- Title
- Description
- Remediation Recommendation
Writeups can have many more fields, such as:
- Attack Scenario
- Exploitability
- Severity
- Tags
- Custom Tags
- Custom Fields
Writeups can also be assigned to libraries, along with access controls, to make managing your writeups easier.
AttackForge already comes pre-loaded with many Writeups from industry knowledgebases such as MITRE.
This repository provides industry knowledgebases you can import into your AttackForge tenant. The following methodologies are supported:
- MITRE ATT&CK Enterprise Version 16.1 - see recommended mapping
- MITRE ATT&CK ICS Version 16.1 - see recommended mapping
- MITRE ATT&CK Mobile Version 16.1 - see recommended mapping
You can import these knowledgebases into your Writeups libraries as follows:
