Skip to content
🚧 Early alpha — building the foundation. See the roadmap →

Tagged: MITRE

All Tags
MITRE
8 pages
5 related

MITRE frameworks (ATT&CK, D3FEND, ENGAGE, F3)

Pages with this tag

Framework landscape

1

Overview of common compliance frameworks and their data structures.

MITRE Fight Fraud Framework (F3) added as a recognized source

2

The owner asked for MITRE's Fight Fraud Framework (F3) across the knowledge base and wherever else it applies. F3 is now a one-click recognized import with a bundled recipe, and the framework pages list it. Records how F3 reuses ATT&CK ids and leaves open whether a shared id should resolve to the same concept.

The demo now carries the full MITRE F3 catalog and its hierarchy

3

Replaces synthetic F3 demo rows with the pinned public v1.2 workbook, real tactic notes and resolved hierarchy links. Existing filters suffice for sub-technique parents; shipped recipes and the F3-to-ATT&CK identity question remain unchanged.

Framework standards & tools

4

Reference guide to compliance frameworks, mapping standards, and GRC tools relevant to Crosswalker.

Framework versioning

5

How NIST, MITRE, CIS, and CRI handle version changes — migration guides, what breaks, and lessons for Crosswalker.

Framework data sources

6

Canonical acquisition, licence, workbook binding, recipe, row-count, and import-gotcha reference for sources Crosswalker recognizes.

CTID

7

Center for Threat-Informed Defense (MITRE Engenuity) — maintains ATT&CK control mappings, sensor mappings, and attack flow.

MITRE

8

MITRE Corporation — publishes ATT&CK, D3FEND, ENGAGE, the Fight Fraud Framework (F3) and funds the Center for Threat-Informed Defense.