1
+ <!DOCTYPE html>
2
+ < html >
3
+ < head >
4
+ < title > ATT&CK Changes</ title >
5
+ < meta http-equiv ="Content-Type " content ="text/html; charset=utf8 ">
6
+ < style type ="text/css ">
7
+ table .diff {font-family : Courier; border : medium;}
8
+ .diff_header {background-color : # e0e0e0 }
9
+ td .diff_header {text-align : right}
10
+ .diff_next {background-color : # c0c0c0 }
11
+ .diff_add {background-color : # aaffaa }
12
+ .diff_chg {background-color : # ffff77 }
13
+ .diff_sub {background-color : # ffaaaa }
14
+ </ style >
15
+ </ head >
16
+ < body >
17
+ < h1 > ATT&CK Changes Between v16.0 and v16.1</ h1 > < h2 > Key</ h2 >
18
+ < ul >
19
+ < li > New objects: ATT&CK objects which are only present in the new release.</ li >
20
+ < li > Major version changes: ATT&CK objects that have a major version change. (e.g. 1.0 → 2.0)</ li >
21
+ < li > Minor version changes: ATT&CK objects that have a minor version change. (e.g. 1.0 → 1.1)</ li >
22
+ < li > Other version changes: ATT&CK objects that have a version change of any other kind. (e.g. 1.0 → 1.2)</ li >
23
+ < li > Patches: ATT&CK objects that have been patched while keeping the version the same. (e.g., 1.0 → 1.0 but something like a typo, a URL, or some metadata was fixed)</ li >
24
+ < li > Object revocations: ATT&CK objects which are revoked by a different object.</ li >
25
+ < li > Object deprecations: ATT&CK objects which are deprecated and no longer in use, and not replaced.</ li >
26
+ < li > Object deletions: ATT&CK objects which are no longer found in the STIX data.</ li >
27
+ </ ul > < table class =diff summary =Legends >
28
+ < tr >
29
+ < td >
30
+ < table border = summary =Colors>
31
+ < tr > < th > Colors for description field</ th > </ tr >
32
+ < tr > < td class =diff_add > Added</ td > </ tr >
33
+ < tr > < td class =diff_chg > Changed</ td > </ tr >
34
+ < tr > < td class =diff_sub > Deleted</ td > </ tr >
35
+ </ table >
36
+ </ td >
37
+ </ tr >
38
+ </ table >
39
+ < h2 > Additional formats</ h2 >
40
+ < p > These ATT&CK Navigator layer files can be uploaded to ATT&CK Navigator manually.</ p >
41
+ < ul >
42
+ < li > < a href ="/docs/changelogs/v16.0-v16.1/layer-enterprise.json "> Enterprise changes</ a > </ li >
43
+ < li > < a href ="/docs/changelogs/v16.0-v16.1/layer-mobile.json "> Mobile changes</ a > </ li >
44
+ < li > < a href ="/docs/changelogs/v16.0-v16.1/layer-ics.json "> ICS changes</ a > </ li >
45
+ </ ul >
46
+ < p > This JSON file contains the machine readble output used to create this page: < a href ="/docs/changelogs/v16.0-v16.1/changelog.json "> changelog.json</ a > </ p >
47
+ < h2 > Techniques</ h2 > < h3 > enterprise-attack</ h3 > < details > < summary > Patches</ summary > < hr > < h4 > [T1590.002] Gather Victim Network Information: DNS</ h4 > < p > < b > Current version</ b > : 1.2</ p > < details > < summary > Details</ summary > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > values_changed</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> modified</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-09-12 19:36:20.374000+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-11-11 16:13:02.196000+00:00</ td > </ tr > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> external_references[5]['description']</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> Sean Metcalf. (2019, May 9). Sean Metcalf Twitter. September 12, 2024.</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> Sean Metcalf. (2019, May 9). Sean Metcalf Twitter. Retrieved September 12, 2024.</ td > </ tr > </ tbody > </ table > </ details > < hr > < h4 > [T1557.004] Adversary-in-the-Middle: Evil Twin</ h4 > < p > < b > Current version</ b > : 1.0</ p > < details > < summary > Details</ summary > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > values_changed</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> modified</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-10-13 15:40:18.743000+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-11-11 18:52:53.686000+00:00</ td > </ tr > </ tbody > </ table > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > iterable_item_added</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> x_mitre_contributors</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> </ td > < td style ='border: 1px solid black;border-collapse: collapse; '> DeFord L. Smith</ td > </ tr > </ tbody > </ table > </ details > < hr > < h4 > [T1546.017] Event Triggered Execution: Udev Rules</ h4 > < p > < b > Current version</ b > : 1.0</ p > < details > < summary > Details</ summary > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > values_changed</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> modified</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-10-17 20:17:53.469000+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-11-11 19:05:38.708000+00:00</ td > </ tr > </ tbody > </ table > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > iterable_item_added</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> kill_chain_phases</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> </ td > < td style ='border: 1px solid black;border-collapse: collapse; '> {'kill_chain_name': 'mitre-attack', 'phase_name': 'privilege-escalation'}</ td > </ tr > </ tbody > </ table > </ details > < hr > < h4 > [T1204] User Execution</ h4 > < p > < b > Current version</ b > : 1.7</ p > < details > < summary > Details</ summary > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > values_changed</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> modified</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-10-13 15:43:49.208000+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-11-11 18:52:12.103000+00:00</ td > </ tr > </ tbody > </ table > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > iterable_item_added</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> x_mitre_contributors</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> </ td > < td style ='border: 1px solid black;border-collapse: collapse; '> Ale Houspanossian</ td > </ tr > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> x_mitre_contributors</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> </ td > < td style ='border: 1px solid black;border-collapse: collapse; '> Fernando Bacchin</ td > </ tr > </ tbody > </ table > </ details > </ details > < h2 > Groups</ h2 > < h3 > enterprise-attack</ h3 > < details > < summary > Patches</ summary > < hr > < h4 > [G1034] Daggerfly</ h4 > < p > < b > Current version</ b > : 1.0</ p > < details > < summary > Details</ summary > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > values_changed</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> modified</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-10-10 14:33:17.448000+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-10-31 18:33:10.434000+00:00</ td > </ tr > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> x_mitre_contributors[0]</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> Furkan Celiik</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> Furkan Celik, PURE7</ td > </ tr > </ tbody > </ table > </ details > </ details > < h2 > Campaigns</ h2 > < h3 > enterprise-attack</ h3 > < details > < summary > Patches</ summary > < hr > < h4 > [C0038] HomeLand Justice</ h4 > < p > < b > Current version</ b > : 1.0</ p > < details > < summary > Details</ summary > < table style ='border: 1px solid black;border-collapse: collapse; '> < caption > values_changed</ caption > < thead > < tr > < th style ='border: 1px solid black;border-collapse: collapse; '> STIX Field</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> Old value</ th > < th style ='border: 1px solid black;border-collapse: collapse; '> New Value</ th > </ tr > </ thead > < tbody > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> modified</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-08-21 18:21:02.205000+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2024-10-31 16:06:50.414000+00:00</ td > </ tr > < tr > < td style ='border: 1px solid black;border-collapse: collapse; '> last_seen</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2002-09-01 04:00:00+00:00</ td > < td style ='border: 1px solid black;border-collapse: collapse; '> 2022-09-01 04:00:00+00:00</ td > </ tr > </ tbody > </ table > </ details > </ details >
48
+ </ body >
49
+ </ html >
50
+
0 commit comments