Tactics, Techniques & Procedures#
TheHive 4.1.0+ is required to use TTPs
Starting with version 4.1.0, TheHive allows to bind Cases to TTPs (Tactics, Techniques & Procedures). The MITRE ATT&CK framework has been chosen to define these TTPs.
Import MITRE ATT&CK patterns#
To access and import MITRE ATT&CK patterns definition, beeing
admin or at least have the role
managePattern is required.
In the admin organisation, open the
Import MITRE ATT&CK Patternsand select the appropriate file
Ensure patterns are imported
A direct link to the current zip archive of MITRE ATT&CK patterns let you download it quickly from the official github page.
Use MITRE ATT&CK#
Refer to this page to learn how to add TTPs (Tactics, Techniques and Procedures) to a Case.