Update

Author: root

DataSources/AMAG/Symmetry_Access_Control/2_ds_amag_symmetry_access_control.md

@@ -1,3 +1,3 @@
-|    Use-Case    | Event Types/Parsers    | MITRE TTP    | Content    |
+|    Use-Case    | Event Types/Parsers    | MITRE ATT&CK® TTP          | Content    |
 |:----:| ---- | ---- | ---- |
 | [Privileged Activity](../../../UseCases/uc_privileged_activity.md) |  failed-physical-access<br> ↳[s-amag-badge-access](Ps/pC_samagbadgeaccess.md)<br> ↳[cef-amag-badge-access-failed-3](Ps/pC_cefamagbadgeaccessfailed3.md)<br> ↳[cef-amag-badge-access-failed-1](Ps/pC_cefamagbadgeaccessfailed1.md)<br> ↳[cef-amag-badge-access-failed-2](Ps/pC_cefamagbadgeaccessfailed2.md)<br> ↳[amag-badge-access](Ps/pC_amagbadgeaccess.md)<br><br> physical-access<br> ↳[s-amag-badge-access](Ps/pC_samagbadgeaccess.md)<br> ↳[cef-amag-badge-access-2](Ps/pC_cefamagbadgeaccess2.md)<br> ↳[cef-amag-badge-access-1](Ps/pC_cefamagbadgeaccess1.md)<br> ↳[amag-badge-access](Ps/pC_amagbadgeaccess.md)<br> | T1078 - Valid Accounts<br> | [<ul><li>1 Rules</li></ul>](RM/r_m_amag_symmetry_access_control_Privileged_Activity.md) |

DataSources/AMAG/Symmetry_Access_Control/RM/r_m_amag_symmetry_access_control_Abnormal_Authentication_&_Access.md

@@ -3,9 +3,9 @@ Vendor: AMAG
 ### Product: [Symmetry Access Control](../ds_amag_symmetry_access_control.md)
 ### Use-Case: [Abnormal Authentication & Access](../../../../UseCases/uc_abnormal_authentication_&_access.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|   3   |   2    |     1      |      1      |    1    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|   3   |   2    |         1          |      1      |    1    |
 
 | Event Type    | Rules    | Models    |
 | ---- | ---- | ---- |

DataSources/AMAG/Symmetry_Access_Control/RM/r_m_amag_symmetry_access_control_Physical_Security.md

@@ -3,9 +3,9 @@ Vendor: AMAG
 ### Product: [Symmetry Access Control](../ds_amag_symmetry_access_control.md)
 ### Use-Case: [Physical Security](../../../../UseCases/uc_physical_security.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|   9   |   4    |     1      |      1      |    1    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|   9   |   4    |         1          |      1      |    1    |
 
 | Event Type    | Rules    | Models    |
 | ---- | ---- | ---- |

DataSources/AMAG/Symmetry_Access_Control/RM/r_m_amag_symmetry_access_control_Privileged_Activity.md

@@ -3,9 +3,9 @@ Vendor: AMAG
 ### Product: [Symmetry Access Control](../ds_amag_symmetry_access_control.md)
 ### Use-Case: [Privileged Activity](../../../../UseCases/uc_privileged_activity.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|   1   |   0    |     1      |      1      |    1    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|   1   |   0    |         1          |      1      |    1    |
 
 | Event Type    | Rules    | Models |
 | ---- | ---- | ------ |

DataSources/AMAG/Symmetry_Access_Control/ds_amag_symmetry_access_control.md

@@ -2,18 +2,18 @@ Vendor: AMAG
 ============
 Product: Symmetry Access Control
 --------------------------------
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|  12   |   6    |     1      |      1      |    1    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|  12   |   6    |         1          |      1      |    1    |
 
-|    Use-Case    | Event Types/Parsers    | MITRE TTP    | Content    |
+|    Use-Case    | Event Types/Parsers    | MITRE ATT&CK® TTP          | Content    |
 |:----:| ---- | ---- | ---- |
 | [Abnormal Authentication & Access](../../../UseCases/uc_abnormal_authentication_&_access.md) |  failed-physical-access<br> ↳[s-amag-badge-access](Ps/pC_samagbadgeaccess.md)<br> ↳[cef-amag-badge-access-failed-3](Ps/pC_cefamagbadgeaccessfailed3.md)<br> ↳[cef-amag-badge-access-failed-1](Ps/pC_cefamagbadgeaccessfailed1.md)<br> ↳[cef-amag-badge-access-failed-2](Ps/pC_cefamagbadgeaccessfailed2.md)<br> ↳[amag-badge-access](Ps/pC_amagbadgeaccess.md)<br><br> physical-access<br> ↳[s-amag-badge-access](Ps/pC_samagbadgeaccess.md)<br> ↳[cef-amag-badge-access-2](Ps/pC_cefamagbadgeaccess2.md)<br> ↳[cef-amag-badge-access-1](Ps/pC_cefamagbadgeaccess1.md)<br> ↳[amag-badge-access](Ps/pC_amagbadgeaccess.md)<br> | T1078 - Valid Accounts<br> | [<ul><li>3 Rules</li></ul><ul><li>2 Models</li></ul>](RM/r_m_amag_symmetry_access_control_Abnormal_Authentication_&_Access.md) |
 |    [Physical Security](../../../UseCases/uc_physical_security.md)    |  failed-physical-access<br> ↳[s-amag-badge-access](Ps/pC_samagbadgeaccess.md)<br> ↳[cef-amag-badge-access-failed-3](Ps/pC_cefamagbadgeaccessfailed3.md)<br> ↳[cef-amag-badge-access-failed-1](Ps/pC_cefamagbadgeaccessfailed1.md)<br> ↳[cef-amag-badge-access-failed-2](Ps/pC_cefamagbadgeaccessfailed2.md)<br> ↳[amag-badge-access](Ps/pC_amagbadgeaccess.md)<br><br> physical-access<br> ↳[s-amag-badge-access](Ps/pC_samagbadgeaccess.md)<br> ↳[cef-amag-badge-access-2](Ps/pC_cefamagbadgeaccess2.md)<br> ↳[cef-amag-badge-access-1](Ps/pC_cefamagbadgeaccess1.md)<br> ↳[amag-badge-access](Ps/pC_amagbadgeaccess.md)<br> | T1078 - Valid Accounts<br> | [<ul><li>9 Rules</li></ul><ul><li>4 Models</li></ul>](RM/r_m_amag_symmetry_access_control_Physical_Security.md)    |
 [Next Page -->>](2_ds_amag_symmetry_access_control.md)
 
-ATT&CK Matrix for Enterprise
-----------------------------
+MITRE ATT&CK® Framework for Enterprise
+--------------------------------------
 | Initial Access                                                      | Execution | Persistence                                                         | Privilege Escalation                                                | Defense Evasion                                                     | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
 | ------------------------------------------------------------------- | --------- | ------------------------------------------------------------------- | ------------------------------------------------------------------- | ------------------------------------------------------------------- | ----------------- | --------- | ---------------- | ---------- | ------------------- | ------------ | ------ |
 | [Valid Accounts](https://attack.mitre.org/techniques/T1078)<br><br> |           | [Valid Accounts](https://attack.mitre.org/techniques/T1078)<br><br> | [Valid Accounts](https://attack.mitre.org/techniques/T1078)<br><br> | [Valid Accounts](https://attack.mitre.org/techniques/T1078)<br><br> |                   |           |                  |            |                     |              |        |

DataSources/AMD/Pensando/RM/r_m_amd_pensando_Lateral_Movement.md

@@ -3,9 +3,9 @@ Vendor: AMD
 ### Product: [Pensando](../ds_amd_pensando.md)
 ### Use-Case: [Lateral Movement](../../../../UseCases/uc_lateral_movement.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|  56   |   20   |     5      |      2      |    2    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|  56   |   20   |         5          |      2      |    2    |
 
 | Event Type    | Rules    | Models    |
 | ---- | ---- | ---- |

DataSources/AMD/Pensando/RM/r_m_amd_pensando_Malware.md

@@ -3,9 +3,9 @@ Vendor: AMD
 ### Product: [Pensando](../ds_amd_pensando.md)
 ### Use-Case: [Malware](../../../../UseCases/uc_malware.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|   4   |   0    |     1      |      2      |    2    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|   4   |   0    |         1          |      2      |    2    |
 
 | Event Type    | Rules    | Models |
 | ---- | ---- | ------ |

DataSources/AMD/Pensando/ds_amd_pensando.md

@@ -2,17 +2,17 @@ Vendor: AMD
 ===========
 Product: Pensando
 -----------------
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|  56   |   20   |     5      |      2      |    2    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|  56   |   20   |         5          |      2      |    2    |
 
-|    Use-Case    | Event Types/Parsers    | MITRE TTP    | Content    |
+|    Use-Case    | Event Types/Parsers    | MITRE ATT&CK® TTP    | Content    |
 |:----:| ---- | ---- | ---- |
 | [Lateral Movement](../../../UseCases/uc_lateral_movement.md) |  network-connection-failed<br> ↳[pensando-flow-create](Ps/pC_pensandoflowcreate.md)<br><br> network-connection-successful<br> ↳[pensando-flow-create](Ps/pC_pensandoflowcreate.md)<br> | T1071 - Application Layer Protocol<br>T1090.003 - Proxy: Multi-hop Proxy<br>T1190 - Exploit Public Fasing Application<br>TA0010 - TA0010<br>TA0011 - TA0011<br> | [<ul><li>56 Rules</li></ul><ul><li>20 Models</li></ul>](RM/r_m_amd_pensando_Lateral_Movement.md) |
 |          [Malware](../../../UseCases/uc_malware.md)          |  network-connection-failed<br> ↳[pensando-flow-create](Ps/pC_pensandoflowcreate.md)<br><br> network-connection-successful<br> ↳[pensando-flow-create](Ps/pC_pensandoflowcreate.md)<br> | TA0011 - TA0011<br>    | [<ul><li>4 Rules</li></ul>](RM/r_m_amd_pensando_Malware.md)    |
 
-ATT&CK Matrix for Enterprise
-----------------------------
+MITRE ATT&CK® Framework for Enterprise
+--------------------------------------
 | Initial Access                                                                         | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control                                                                                                                                                                                                      | Exfiltration | Impact |
 | -------------------------------------------------------------------------------------- | --------- | ----------- | -------------------- | --------------- | ----------------- | --------- | ---------------- | ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------ | ------ |
 | [Exploit Public Fasing Application](https://attack.mitre.org/techniques/T1190)<br><br> |           |             |                      |                 |                   |           |                  |            | [Proxy: Multi-hop Proxy](https://attack.mitre.org/techniques/T1090/003)<br><br>[Application Layer Protocol](https://attack.mitre.org/techniques/T1071)<br><br>[Proxy](https://attack.mitre.org/techniques/T1090)<br><br> |              |        |

DataSources/APC/APC/RM/r_m_apc_apc_Abnormal_Authentication_&_Access.md

@@ -3,9 +3,9 @@ Vendor: APC
 ### Product: [APC](../ds_apc_apc.md)
 ### Use-Case: [Abnormal Authentication & Access](../../../../UseCases/uc_abnormal_authentication_&_access.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|  32   |   14   |     5      |      5      |    5    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|  32   |   14   |         5          |      2      |    2    |
 
 | Event Type    | Rules    | Models    |
 | ---- | ---- | ---- |

DataSources/APC/APC/RM/r_m_apc_apc_Compromised_Credentials.md

@@ -3,9 +3,9 @@ Vendor: APC
 ### Product: [APC](../ds_apc_apc.md)
 ### Use-Case: [Compromised Credentials](../../../../UseCases/uc_compromised_credentials.md)
 
-| Rules | Models | MITRE TTPs | Event Types | Parsers |
-|:-----:|:------:|:----------:|:-----------:|:-------:|
-|  58   |   25   |     10     |      5      |    5    |
+| Rules | Models | MITRE ATT&CK® TTPs | Event Types | Parsers |
+|:-----:|:------:|:------------------:|:-----------:|:-------:|
+|  58   |   25   |         10         |      2      |    2    |
 
 | Event Type    | Rules    | Models    |
 | ---- | ---- | ---- |