Added a group YAML file and layer for ASCS's report.

threat-actor-data/20200520-ASCS.yaml

@@ -0,0 +1,14 @@
+%YAML 1.2
+---
+# Source: https://www.cyber.gov.au/threats/summary-of-tradecraft-trends-for-2019-20-tactics-techniques-and-procedures-used-to-target-australian-networks
+version: 1.0
+file_type: group-administration
+platform:
+  - all
+groups:
+  -
+    group_name: 'Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks'
+    campaign:
+    technique_id: [T1002, T1003, T1005, T1007, T1016, T1018, T1021, T1022, T1033, T1039, T1041, T1045, T1046, T1048, T1049, T1056, T1059, T1060, T1064, T1068, T1070, T1071, T1074, T1077, T1078, T1080, T1081, T1082, T1083, T1086, T1087, T1099, T1100, T1106, T1107, T1108, T1110, T1114, T1134, T1135, T1158, T1189, T1190, T1193, T1204, T1213, T1482, T1486, T1504]
+    software_id:  []
+    enabled:      True

threat-actor-data/ATT&CK-Navigator-layers/20200520-ASCS/attack_all_summary-of-tradecraft-trends-for-2019-2020-ttps-used-to-target-australian-networks.json

@@ -0,0 +1,56 @@
+{"name": "Attack - all", "version": "2.2", "domain": "mitre-enterprise", "description": "stage: attack | platform(s): all | group(s): Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks | overlay group(s): ", "filters": {"stages": ["act"], "platforms": ["Windows", "Linux", "macOS", "AWS", "GCP", "Azure", "Azure AD", "Office 365", "SaaS"]},
+"sorting": 3, "viewMode": 0, "hideDisable": false, "techniques": [{"techniqueID": "T1007", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1060", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1482", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1134", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1158", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1003", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1099", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1189", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1504", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1033", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1046", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1049", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1071", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1080", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1114", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1064", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1002", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1059", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1077", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1078", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1021", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1082", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1087", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1018", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1100", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1056", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1070", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1074", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1068", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1045", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1108", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1022", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1135", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1213", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1083", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1193", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1486", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1048", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1016", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1204", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1041", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1107", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1005", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1081", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1039", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1110", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1086", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1190", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]},
+{"techniqueID": "T1106", "score": 1, "metadata": [{"name": "-Groups", "value": "Summary of Tradecraft Trends for 2019-2020: TTPs Used to Target Australian Networks"}]}], "showTacticRowBackground": false, "tacticRowBackground": "#dddddd", "selectTechniquesAcrossTactics": true, "gradient": {"colors": ["#ffcece", "#ff0000"], "minValue": 0, "maxValue": 1},
+"legendItems": [{"label": "Tech. not often used", "color": "#ffcece"},
+{"label": "Tech. used frequently", "color": "#ff0000"},
+{"label": "Groups overlay: tech. in group + overlay", "color": "#f9a825"},
+{"label": "Groups overlay: tech. in overlay", "color": "#ffee58"},
+{"label": "Src. of tech. is only software", "color": "#0d47a1 "},
+{"label": "Src. of tech. is group(s)/overlay + software", "color": "#64b5f6 "}]}