dettectinator


Namedettectinator JSON
Version 1.4.4 PyPI version JSON
download
home_pagehttps://github.com/siriussecurity/dettectinator
SummaryDettectinator - The Python library to your DeTT&CT YAML files.
upload_time2024-12-06 09:26:38
maintainerNone
docs_urlNone
authorSirius Security
requires_pythonNone
licenseGPL3
keywords mitre attack dettect soc threat hunting
VCS
bugtrack_url
requirements requests ruamel.yaml python-dateutil msal openpyxl suricataparser addonfactory-splunk-conf-parser-lib pandas anyascii pypdf stix2 taxii2-client
Travis-CI No Travis.
coveralls test coverage No coveralls.
            # Dettectinator
Dettectinator - The Python library to your [DeTT&CT](https://github.com/rabobank-cdc/DeTTECT) YAML files.

Dettectinator is built to be included in your SOC automation tooling. It can be included as a Python library or it can be used via the command line.

Dettectinator provides plugins to read detections from your SIEM or EDR and create/update the DeTT&CT YAML file, so that you can use it to visualize your ATT&CK detection coverage in the ATT&CK Navigator.

Currently de CLI is limited to processing detections through these plugins, the library can also be used for processing data sources.

See the [documentation](https://github.com/siriussecurity/dettectinator) for more information on how to use it.

            

Raw data

            {
    "_id": null,
    "home_page": "https://github.com/siriussecurity/dettectinator",
    "name": "dettectinator",
    "maintainer": null,
    "docs_url": null,
    "requires_python": null,
    "maintainer_email": null,
    "keywords": "mitre attack dettect soc threat hunting",
    "author": "Sirius Security",
    "author_email": null,
    "download_url": "https://files.pythonhosted.org/packages/8d/a1/5457296c3b5c76674a0333a7c5ba34cfadc486515e7c0f9526aff7123de2/dettectinator-1.4.4.tar.gz",
    "platform": null,
    "description": "# Dettectinator\nDettectinator - The Python library to your [DeTT&CT](https://github.com/rabobank-cdc/DeTTECT) YAML files.\n\nDettectinator is built to be included in your SOC automation tooling. It can be included as a Python library or it can be used via the command line.\n\nDettectinator provides plugins to read detections from your SIEM or EDR and create/update the DeTT&CT YAML file, so that you can use it to visualize your ATT&CK detection coverage in the ATT&CK Navigator.\n\nCurrently de CLI is limited to processing detections through these plugins, the library can also be used for processing data sources.\n\nSee the [documentation](https://github.com/siriussecurity/dettectinator) for more information on how to use it.\n",
    "bugtrack_url": null,
    "license": "GPL3",
    "summary": "Dettectinator - The Python library to your DeTT&CT YAML files.",
    "version": "1.4.4",
    "project_urls": {
        "Code": "https://github.com/siriussecurity/dettectinator",
        "Documentation": "https://github.com/siriussecurity/dettectinator/wiki",
        "Homepage": "https://github.com/siriussecurity/dettectinator",
        "Issue tracker": "https://github.com/siriussecurity/dettectinator/issues"
    },
    "split_keywords": [
        "mitre",
        "attack",
        "dettect",
        "soc",
        "threat",
        "hunting"
    ],
    "urls": [
        {
            "comment_text": "",
            "digests": {
                "blake2b_256": "8da15457296c3b5c76674a0333a7c5ba34cfadc486515e7c0f9526aff7123de2",
                "md5": "2c1d5d9f136d4b4da21d0b3b220a4982",
                "sha256": "8892b9a5655c9890bf64f0620bacd81099d6c02936d5b84a1e48be2ca23a0779"
            },
            "downloads": -1,
            "filename": "dettectinator-1.4.4.tar.gz",
            "has_sig": false,
            "md5_digest": "2c1d5d9f136d4b4da21d0b3b220a4982",
            "packagetype": "sdist",
            "python_version": "source",
            "requires_python": null,
            "size": 43287,
            "upload_time": "2024-12-06T09:26:38",
            "upload_time_iso_8601": "2024-12-06T09:26:38.674418Z",
            "url": "https://files.pythonhosted.org/packages/8d/a1/5457296c3b5c76674a0333a7c5ba34cfadc486515e7c0f9526aff7123de2/dettectinator-1.4.4.tar.gz",
            "yanked": false,
            "yanked_reason": null
        }
    ],
    "upload_time": "2024-12-06 09:26:38",
    "github": true,
    "gitlab": false,
    "bitbucket": false,
    "codeberg": false,
    "github_user": "siriussecurity",
    "github_project": "dettectinator",
    "travis_ci": false,
    "coveralls": false,
    "github_actions": false,
    "requirements": [
        {
            "name": "requests",
            "specs": [
                [
                    "==",
                    "2.32.3"
                ]
            ]
        },
        {
            "name": "ruamel.yaml",
            "specs": [
                [
                    "==",
                    "0.18.6"
                ]
            ]
        },
        {
            "name": "python-dateutil",
            "specs": [
                [
                    "==",
                    "2.9.0.post0"
                ]
            ]
        },
        {
            "name": "msal",
            "specs": [
                [
                    "==",
                    "1.20.0"
                ]
            ]
        },
        {
            "name": "openpyxl",
            "specs": [
                [
                    "==",
                    "3.0.10"
                ]
            ]
        },
        {
            "name": "suricataparser",
            "specs": [
                [
                    "==",
                    "1.0.0"
                ]
            ]
        },
        {
            "name": "addonfactory-splunk-conf-parser-lib",
            "specs": [
                [
                    "==",
                    "0.3.4"
                ]
            ]
        },
        {
            "name": "pandas",
            "specs": [
                [
                    "==",
                    "2.2.3"
                ]
            ]
        },
        {
            "name": "anyascii",
            "specs": [
                [
                    "==",
                    "0.3.1"
                ]
            ]
        },
        {
            "name": "pypdf",
            "specs": [
                [
                    "==",
                    "3.9.0"
                ]
            ]
        },
        {
            "name": "stix2",
            "specs": [
                [
                    "==",
                    "3.0.1"
                ]
            ]
        },
        {
            "name": "taxii2-client",
            "specs": [
                [
                    "==",
                    "2.3.0"
                ]
            ]
        }
    ],
    "lcname": "dettectinator"
}
        
Elapsed time: 4.94271s