Merge pull request #504 from mitre-attack/updated-cti-training

Update CTI training page to point at latest version
mitre-attack · Jun 19, 2024 · a1c3880 · a1c3880
2 parents ddf81ed + 2533629
commit a1c3880
Show file tree

Hide file tree

Showing 23 changed files with 659 additions and 609 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,12 +1,16 @@
+# v4.1.4 (2024-06-19)
+
+## Misc
+
+* Updated CTI Training to latest version
+* Updated banner related to ATT&CKcon 5.0
+
 # v4.1.3 (2024-05-02)
----------------------
 
 * Release ATT&CK content version 15.1.
   See detailed changes [here](https://github.com/mitre/cti/releases/tag/ATT%26CK-v15.1).
 
-
 # v4.1.2 (2024-04-23)
----------------------
 
 * Release [ATT&CK content version 15.0](https://github.com/mitre/cti/releases/tag/ATT%26CK-v15.0).
   See the release notes [here](https://attack.mitre.org/resources/updates/updates-april-2024/).

diff --git a/data/trainings.json b/data/trainings.json
@@ -1,27 +1,27 @@
 {
     "cti_training": {
+        "module0": {
+            "module": "MODULE 0",
+            "short_name": "Module 0: Introduction",
+            "id": "mod0",
+            "name": "Introducing MITRE ATT&CK for Cyber Threat Intelligence Training",
+            "video": "https://www.youtube.com/watch?v=BFiRu99x_Ps&list=PLLGRmm150VfBd_bk6fGqTqxr8SBeDcprb&index=1",
+            "slides": "/docs/training-cti/Module%200%20Slides.pdf",
+            "exercises": []
+        },
         "module1": {
             "module": "MODULE 1",
-            "short_name": "Module 1: Introduction",
+            "short_name": "Module 1: Mapping from narrative reporting",
             "id": "mod1",
-            "name": "Introducing training and understanding ATT&CK",
-            "video": "https://www.youtube.com/watch?v=mm4j4g3NL-Q&list=PLkTApXQou_8IlkPDzY8vroxBLLhbZbqqC&index=1",
+            "name": "Mapping to ATT&CK from narrative reporting",
+            "video": "https://www.youtube.com/watch?v=jRIJ5nw4GMA&list=PLLGRmm150VfBd_bk6fGqTqxr8SBeDcprb&index=2",
             "slides": "/docs/training-cti/Module%201%20Slides.pdf",
-            "exercises": []
-        },
-        "module2": {
-            "module": "MODULE 2",
-            "short_name": "Module 2: Mapping from finished reporting",
-            "id": "mod2",
-            "name": "Mapping to ATT&CK from finished reporting",
-            "video": "https://www.youtube.com/watch?v=VUqdytInxRg&list=PLkTApXQou_8IlkPDzY8vroxBLLhbZbqqC&index=2",
-            "slides": "/docs/training-cti/Module%202%20Slides.pdf",
             "exercises": [
                 {
-                    "name": "Exercise 2: Mapping from finished reporting",
+                    "name": "Exercise 1: Mapping to a narrative report",
                     "software": {
-                        "version": "ATT&CK v6",
-                        "url": "https://attack.mitre.org/versions/v6/"
+                        "version": "ATT&CK v8",
+                        "url": "https://attack.mitre.org/versions/v8/"
                     },
                     "resources": [
                         {
@@ -71,19 +71,19 @@
                 }
             ]
         },
-        "module3": {
-            "module": "MODULE 3",
-            "short_name": "Module 3: Mapping to ATT&CK from raw data",
-            "id": "mod3",
+        "module2": {
+            "module": "MODULE 2",
+            "short_name": "Module 2: Mapping to ATT&CK from raw data",
+            "id": "mod2",
             "name": "Mapping to ATT&CK from raw data",
-            "video": "https://www.youtube.com/watch?v=0p1UFnBWgj8&list=PLkTApXQou_8IlkPDzY8vroxBLLhbZbqqC&index=3",
-            "slides": "/docs/training-cti/Module%203%20Slides.pdf",
+            "video": "https://www.youtube.com/watch?v=Wpk_9q4OKss&list=PLLGRmm150VfBd_bk6fGqTqxr8SBeDcprb&index=3",
+            "slides": "/docs/training-cti/Module%202%20Slides.pdf",
             "exercises": [
                 {
-                    "name": "Exercise 3: Working with raw data",
+                    "name": "Exercise 2: Working with raw data",
                     "software": {
-                        "version": "ATT&CK v6",
-                        "url": "https://attack.mitre.org/versions/v6/"
+                        "version": "ATT&CK v8",
+                        "url": "https://attack.mitre.org/versions/v8/"
                     },
                     "resources": [
                         {
@@ -120,19 +120,19 @@
                 }
             ]
         },
-        "module4": {
-            "module": "MODULE 4",
-            "short_name": "Module 4: Storing and analyzing mapped intel",
+        "module3": {
+            "module": "MODULE 3",
+            "short_name": "Module 3: Storing and analyzing ATT&CK-mapped intelligence",
             "id": "mod4",
-            "name": "Storing and analyzing ATT&CK-mapped intel",
-            "video": "https://www.youtube.com/watch?v=8wLGeMPx7Qw&list=PLkTApXQou_8IlkPDzY8vroxBLLhbZbqqC&index=4",
-            "slides": "/docs/training-cti/Module%204%20Slides.pdf",
+            "name": "Storing and analyzing ATT&CK-mapped intelligence",
+            "video": "https://www.youtube.com/watch?v=cO2JRZ53N2c&list=PLLGRmm150VfBd_bk6fGqTqxr8SBeDcprb&index=4",
+            "slides": "/docs/training-cti/Module%203%20Slides.pdf",
             "exercises": [
                 {
-                    "name": "Exercise 4: Comparing layers in ATT&CK Navigator",
+                    "name": "Exercise 3: Comparing layers in ATT&CK Navigator",
                     "software": {
                         "version": "ATT&CK Navigator v2",
-                        "url": "https://mitre-attack.github.io/attack-navigator/v2/enterprise/"
+                        "url": "https://mitre-attack.github.io/attack-navigator/#bundleURL=https%3A%2F%2Fraw.githubusercontent.com%2Fmitre%2Fcti%2FATT%26CK-v8.2%2Fenterprise-attack%2Fenterprise-attack.json&version=8.2&domain=enterprise-attack"
                     },
                     "resources": [
                         {
@@ -153,19 +153,19 @@
                 }
             ]
         },
-        "module5": {
-            "module": "MODULE 5",
-            "short_name": "Module 5: Making ATT&CK-mapped data actionable with defensive recommendations",
-            "id": "mod5",
+        "module4": {
+            "module": "MODULE 4",
+            "short_name": "Module 4: Making ATT&CK-mapped data actionable with defensive recommendations",
+            "id": "mod4",
             "name": "Making ATT&CK-mapped data actionable with defensive recommendations",
-            "video": "https://www.youtube.com/watch?v=RpCpKc4m3gI&list=PLkTApXQou_8IlkPDzY8vroxBLLhbZbqqC&index=5",
-            "slides": "/docs/training-cti/Module%205%20Slides.pdf",
+            "video": "https://www.youtube.com/watch?v=aX_L9MBMh-U&list=PLLGRmm150VfBd_bk6fGqTqxr8SBeDcprb&index=5",
+            "slides": "/docs/training-cti/Module%204%20Slides.pdf",
             "exercises": [
                 {
-                    "name": "Exercise 5: Making defensive recommendations",
+                    "name": "Exercise 4: Making defensive recommendations",
                     "software": {
-                        "version": "ATT&CK v6",
-                        "url": "https://attack.mitre.org/versions/v6/"
+                        "version": "ATT&CK v8",
+                        "url": "https://attack.mitre.org/versions/v8/"
                     },
                     "resources": [
                         {

diff --git a/modules/resources/docs/training-cti/APT39 and Cobalt Kitty techniques.pdf b/modules/resources/docs/training-cti/APT39 and Cobalt Kitty techniques.pdf
diff --git a/modules/resources/docs/training-cti/CTI Workshop Full Slides.pdf b/modules/resources/docs/training-cti/CTI Workshop Full Slides.pdf
diff --git a/modules/resources/docs/training-cti/Cybereason Cobalt Kitty - answers.pdf b/modules/resources/docs/training-cti/Cybereason Cobalt Kitty - answers.pdf
diff --git a/modules/resources/docs/training-cti/Cybereason Cobalt Kitty - highlights only.pdf b/modules/resources/docs/training-cti/Cybereason Cobalt Kitty - highlights only.pdf
diff --git a/modules/resources/docs/training-cti/Cybereason Cobalt Kitty - tactic hints.pdf b/modules/resources/docs/training-cti/Cybereason Cobalt Kitty - tactic hints.pdf
diff --git a/modules/resources/docs/training-cti/FireEye APT39 - answers.pdf b/modules/resources/docs/training-cti/FireEye APT39 - answers.pdf
diff --git a/modules/resources/docs/training-cti/FireEye APT39 - highlights only.pdf b/modules/resources/docs/training-cti/FireEye APT39 - highlights only.pdf