├── .github └── workflows │ ├── gh-pages.yml │ └── validate-mappings.yml ├── .gitignore ├── DEVELOPERS.md ├── LICENSE ├── README.md ├── docs ├── mapping_format.md ├── mapping_methodology.md ├── scoring.md └── use_cases.md ├── images ├── DataFormatEntityDiagram.png ├── MappingMethodologyDiagram.png ├── PRPL-CTID-third.jpeg ├── aws_icon.png ├── azure_icon.svg ├── gcp_icon.svg ├── github-square-brands.svg └── tag-solid.svg ├── mappings.css ├── mappings.js ├── mappings ├── AWS │ ├── AWSArtifact.yaml │ ├── AWSAuditManager.yaml │ ├── AWSCertificateManager.yaml │ ├── AWSCloudEndure.yaml │ ├── AWSCloudHSM.yaml │ ├── AWSCloudTrail.yaml │ ├── AWSCloudWatch.yaml │ ├── AWSConfig.yaml │ ├── AWSDirectoryService.yaml │ ├── AWSFirewallManager.yaml │ ├── AWSIAM.yaml │ ├── AWSIOTDeviceDefender.yaml │ ├── AWSKeyManagementService.yaml │ ├── AWSNetworkFirewall.yaml │ ├── AWSOrganizations.yaml │ ├── AWSRDS.yaml │ ├── AWSResourceAccessManager.yaml │ ├── AWSS3.yaml │ ├── AWSSSO.yaml │ ├── AWSSecretsManager.yaml │ ├── AWSSecurityHub.yaml │ ├── AWSShield.yaml │ ├── AWSWebApplicationFirewall.yaml │ ├── AmazonCognito.yaml │ ├── AmazonDetective.yaml │ ├── AmazonGuardDuty.yaml │ ├── AmazonInspector.yaml │ ├── AmazonMacie.yaml │ ├── AmazonVirtualPrivateCloud.yaml │ ├── layers │ │ ├── AWSArtifact.json │ │ ├── AWSAuditManager.json │ │ ├── AWSCertificateManager.json │ │ ├── AWSCloudEndure.json │ │ ├── AWSCloudHSM.json │ │ ├── AWSCloudTrail.json │ │ ├── AWSCloudWatch.json │ │ ├── AWSConfig.json │ │ ├── AWSDirectoryService.json │ │ ├── AWSFirewallManager.json │ │ ├── AWSIAM.json │ │ ├── AWSIOTDeviceDefender.json │ │ ├── AWSKeyManagementService.json │ │ ├── AWSNetworkFirewall.json │ │ ├── AWSOrganizations.json │ │ ├── AWSRDS.json │ │ ├── AWSResourceAccessManager.json │ │ ├── AWSS3.json │ │ ├── AWSSSO.json │ │ ├── AWSSecretsManager.json │ │ ├── AWSSecurityHub.json │ │ ├── AWSShield.json │ │ ├── AWSWebApplicationFirewall.json │ │ ├── AmazonCognito.json │ │ ├── AmazonDetective.json │ │ ├── AmazonGuardDuty.json │ │ ├── AmazonInspector.json │ │ ├── AmazonMacie.json │ │ ├── AmazonVirtualPrivateCloud.json │ │ ├── platform.json │ │ └── tags │ │ │ ├── Amazon_Inspector.json │ │ │ ├── Auditing.json │ │ │ ├── Credentials.json │ │ │ ├── Database.json │ │ │ ├── Denial_of_Service.json │ │ │ ├── Identity.json │ │ │ ├── Internet_of_Things.json │ │ │ ├── IoT.json │ │ │ ├── Metrics.json │ │ │ ├── Network.json │ │ │ ├── Not_Mappable.json │ │ │ ├── Reports.json │ │ │ └── Storage.json │ └── valid_tags.txt ├── Azure │ ├── ATPForAzureSQLDatabase.yaml │ ├── AdaptiveApplicationControls.yaml │ ├── AlertsForAzureCosmosDB.yaml │ ├── AlertsForDNS.yaml │ ├── AlertsForResourceManager.yaml │ ├── AlertsForWindowsMachines.yaml │ ├── AlertsNetworkLayer.yaml │ ├── AzureADIdentitySecureScore.yaml │ ├── AzureADManagedIdentities.yaml │ ├── AzureADMultiFactorAuthentication.yaml │ ├── AzureADPasswordPolicy.yaml │ ├── AzureADPasswordProtection.yaml │ ├── AzureADRoleBasedAccessControl.yaml │ ├── AzureAutomationUpdateMGT.yaml │ ├── AzureBackup.yaml │ ├── AzureDDOS.yaml │ ├── AzureDNSAliasRecords.yaml │ ├── AzureDNSAnalytics.yaml │ ├── AzureDedicatedHSM.yaml │ ├── AzureDefenderForAppService.yaml │ ├── AzureDefenderForContainerRegistries.yaml │ ├── AzureDefenderForKeyVault.yaml │ ├── AzureDefenderForKubernetes.yaml │ ├── AzureDefenderForStorage.yaml │ ├── AzureFirewall.yaml │ ├── AzureKeyVault.yaml │ ├── AzurePolicy.yaml │ ├── AzurePrivateLink.yaml │ ├── AzureSentinel.yaml │ ├── AzureTrafficAnalytics.yaml │ ├── AzureVPN.yaml │ ├── AzureWebApplicationFirewall.yaml │ ├── CloudAppSecurity.yaml │ ├── ConditionalAccess.yaml │ ├── ContinuousAccessEvaluation.yaml │ ├── DockerHostHardening.yaml │ ├── FileIntegrityMonitoring.yaml │ ├── IdentityProtection.yaml │ ├── JustInTimeVMAccess.yaml │ ├── LICENSE │ ├── LinuxAuditdAndLogAnalytics.yaml │ ├── MicrosoftAntimalwareForAzure.yaml │ ├── MicrosoftDefenderForIdentity.yaml │ ├── NetworkSecurityGroups.yaml │ ├── PasswordlessAuthentication.yaml │ ├── PrivilegedIdentityManagement.yaml │ ├── SQLVulnerabilityAssessment.yaml │ ├── SecurityCenterRecommendations.yaml │ ├── VulnerabilityAssessmentQualys.yaml │ ├── layers │ │ ├── ATPForAzureSQLDatabase.json │ │ ├── AdaptiveApplicationControls.json │ │ ├── AlertsForAzureCosmosDB.json │ │ ├── AlertsForDNS.json │ │ ├── AlertsForResourceManager.json │ │ ├── AlertsForWindowsMachines.json │ │ ├── AlertsNetworkLayer.json │ │ ├── AzureADIdentitySecureScore.json │ │ ├── AzureADManagedIdentities.json │ │ ├── AzureADMultiFactorAuthentication.json │ │ ├── AzureADPasswordPolicy.json │ │ ├── AzureADPasswordProtection.json │ │ ├── AzureADRoleBasedAccessControl.json │ │ ├── AzureAutomationUpdateMGT.json │ │ ├── AzureBackup.json │ │ ├── AzureDDOS.json │ │ ├── AzureDNSAliasRecords.json │ │ ├── AzureDNSAnalytics.json │ │ ├── AzureDedicatedHSM.json │ │ ├── AzureDefenderForAppService.json │ │ ├── AzureDefenderforContainerRegistries.json │ │ ├── AzureDefenderforKeyVault.json │ │ ├── AzureDefenderforKubernetes.json │ │ ├── AzureDefenderforStorage.json │ │ ├── AzureFirewall.json │ │ ├── AzureKeyVault.json │ │ ├── AzurePolicy.json │ │ ├── AzurePrivateLink.json │ │ ├── AzureSentinel.json │ │ ├── AzureTrafficAnalytics.json │ │ ├── AzureVPN.json │ │ ├── AzureWebApplicationFirewall.json │ │ ├── CloudAppSecurity.json │ │ ├── ConditionalAccess.json │ │ ├── ContinuousAccessEvaluation.json │ │ ├── DockerHostHardening.json │ │ ├── FileIntegrityMonitoring.json │ │ ├── IdentityProtection.json │ │ ├── JustInTimeVMAccess.json │ │ ├── LinuxAuditdAndLogAnalytics.json │ │ ├── MicrosoftAntimalwareForAzure.json │ │ ├── MicrosoftDefenderForIdentity.json │ │ ├── NetworkSecurityGroups.json │ │ ├── PasswordlessAuthentication.json │ │ ├── PrivilegedIdentityManagement.json │ │ ├── SQLVulnerabilityAssessment.json │ │ ├── SecurityCenterRecommendations.json │ │ ├── VulnerabilityAssessmentQualys.json │ │ ├── platform.json │ │ └── tags │ │ │ ├── Adaptive_Network_Hardening.json │ │ │ ├── Analytics.json │ │ │ ├── Azure_Active_Directory.json │ │ │ ├── Azure_Defender.json │ │ │ ├── Azure_Defender_for_App_Service.json │ │ │ ├── Azure_Defender_for_SQL.json │ │ │ ├── Azure_Defender_for_Servers.json │ │ │ ├── Azure_Security_Center.json │ │ │ ├── Azure_Security_Center_Recommendation.json │ │ │ ├── Azure_Sentinel.json │ │ │ ├── Azure_VPN_Gateway.json │ │ │ ├── CASB.json │ │ │ ├── Containers.json │ │ │ ├── Credentials.json │ │ │ ├── DNS.json │ │ │ ├── Database.json │ │ │ ├── Encryption.json │ │ │ ├── File_system.json │ │ │ ├── Identity.json │ │ │ ├── Linux.json │ │ │ ├── MFA.json │ │ │ ├── Microsoft_365_Defender.json │ │ │ ├── Network.json │ │ │ ├── Passwords.json │ │ │ ├── Registry.json │ │ │ ├── Threat_Hunting.json │ │ │ ├── VPN.json │ │ │ ├── WAF.json │ │ │ ├── Web.json │ │ │ ├── Web_Access_Firewall.json │ │ │ └── Windows.json │ └── valid_tags.txt └── GCP │ ├── AccessTransparency.yaml │ ├── ActifioGo.yaml │ ├── AdvancedProtectionProgram.yaml │ ├── AnthosConfigManagement.yaml │ ├── ArtifactRegistry.yaml │ ├── AssuredWorkloads.yaml │ ├── BeyondCorpEnterprise.yaml │ ├── BinaryAuthorization.yaml │ ├── CertificateAuthorityService.yaml │ ├── Chronicle.yaml │ ├── CloudArmor.yaml │ ├── CloudAssetInventory.yaml │ ├── CloudCDN.yaml │ ├── CloudDataLossPrevention.yaml │ ├── CloudHSM.yaml │ ├── CloudIDS.yaml │ ├── CloudIdentity.yaml │ ├── CloudKeyManagement.yaml │ ├── CloudLogging.yaml │ ├── CloudNAT.yaml │ ├── CloudStorage.yaml │ ├── CloudVPN.yaml │ ├── ConfidentialVM.yaml │ ├── ConfigConnector.yaml │ ├── ContainerRegistry.yaml │ ├── DataCatalog.yaml │ ├── DeploymentManager.yaml │ ├── EndpointManagement.yaml │ ├── Firewalls.yaml │ ├── GKE.yaml │ ├── HybridConnectivity.yaml │ ├── IdentityAwareProxy.yaml │ ├── IdentityPlatform.yaml │ ├── IdentyAccessManagement.yaml │ ├── PacketMirroring.yaml │ ├── PolicyIntelligence.yaml │ ├── ReCAPTCHAEnterprise.yaml │ ├── ResourceManager.yaml │ ├── SCC.yaml │ ├── SecretManager.yaml │ ├── ShieldedVM.yaml │ ├── TerraformGoogle Cloud.yaml │ ├── TitanSecurityKey.yaml │ ├── VMManager.yaml │ ├── VPC.yaml │ ├── VPCServiceControls.yaml │ ├── VirusTotal.yaml │ ├── WebRisk.yaml │ ├── layers │ ├── AccessTransparency.json │ ├── ActifioGo.json │ ├── AdvancedProtectionProgram.json │ ├── AnthosConfigManagement.json │ ├── ArtifactRegistry.json │ ├── AssuredWorkloads.json │ ├── BeyondCorpEnterprise.json │ ├── BinaryAuthorization.json │ ├── CertificateAuthorityService.json │ ├── Chronicle.json │ ├── CloudArmor.json │ ├── CloudAssetInventory.json │ ├── CloudCDN.json │ ├── CloudDataLossPrevention.json │ ├── CloudHSM.json │ ├── CloudIDS.json │ ├── CloudIdentity.json │ ├── CloudKeyManagement.json │ ├── CloudLogging.json │ ├── CloudNAT.json │ ├── CloudStorage.json │ ├── CloudVPN.json │ ├── ConfidentialVM.json │ ├── ConfigConnector.json │ ├── ContainerRegistry.json │ ├── DataCatalog.json │ ├── DeploymentManager.json │ ├── EndpointManagement.json │ ├── Firewalls.json │ ├── GKE.json │ ├── HybridConnectivity.json │ ├── IdentityAwareProxy.json │ ├── IdentityPlatform.json │ ├── IdentyAccessManagement.json │ ├── PacketMirroring.json │ ├── PolicyIntelligence.json │ ├── ReCAPTCHAEnterprise.json │ ├── ResourceManager.json │ ├── SCC.json │ ├── SecretManager.json │ ├── ShieldedVM.json │ ├── TerraformGoogle Cloud.json │ ├── TitanSecurityKey.json │ ├── VMManager.json │ ├── VPC.json │ ├── VPCServiceControls.json │ ├── VirusTotal.json │ ├── WebRisk.json │ ├── platform.json │ ├── siemplify.json │ └── tags │ │ ├── Access_Control_Policies.json │ │ ├── Access_Management.json │ │ ├── Analytics.json │ │ ├── Antimalware.json │ │ ├── Antivirus.json │ │ ├── Auditing.json │ │ ├── Binary_Authorization.json │ │ ├── Certificate_Service.json │ │ ├── Cloud_IDS.json │ │ ├── Configuration_Management.json │ │ ├── Containers.json │ │ ├── Credentials.json │ │ ├── Data_Catalog.json │ │ ├── Data_Loss_Prevention.json │ │ ├── Data_Security.json │ │ ├── Encryption.json │ │ ├── Firewall.json │ │ ├── Identity.json │ │ ├── Intrusion_Detection_Service_(IDS).json │ │ ├── Kubernetes.json │ │ ├── Logging.json │ │ ├── Malware.json │ │ ├── Multi-Factor_Authentication.json │ │ ├── Network.json │ │ ├── Not_Mappable.json │ │ ├── OS_Security.json │ │ ├── Palo_Alto_Network's_Threat_Signatures.json │ │ ├── Passwords.json │ │ ├── Patch_Management.json │ │ ├── Phishing.json │ │ ├── Policy.json │ │ ├── Role_Based_Access_Control.json │ │ ├── SIEM.json │ │ ├── Security_Command_Center.json │ │ ├── Storage.json │ │ ├── Threat_Detection.json │ │ ├── VPN.json │ │ ├── Virtual_Private_Cloud.json │ │ ├── Vulnerability_Analysis.json │ │ └── Vulnerability_Management.json │ ├── siemplify.yaml │ └── valid_tags.txt └── tools ├── README.md ├── config ├── aws_markdown_summary_template.html ├── azure_markdown_summary_template.html ├── gcp_markdown_summary_template.html ├── mapping_schema.json ├── markdown_summary_config.json ├── navigator_layer_config.yaml └── navigator_layer_template.json ├── data └── .gitignore ├── db ├── database.py └── model.py ├── mapping_cli.py ├── mapping_driver.py ├── requirements.txt ├── utils ├── attack_data_source.py ├── mapping_validator.py └── utils.py └── visualizers ├── attack_navigator_visualizer.py ├── base_visualizer.py ├── markdown_summary_visualizer.py └── visualizers_collection.py /.github/workflows/gh-pages.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/.github/workflows/gh-pages.yml -------------------------------------------------------------------------------- /.github/workflows/validate-mappings.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/.github/workflows/validate-mappings.yml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/.gitignore -------------------------------------------------------------------------------- /DEVELOPERS.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/DEVELOPERS.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/README.md -------------------------------------------------------------------------------- /docs/mapping_format.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/docs/mapping_format.md -------------------------------------------------------------------------------- /docs/mapping_methodology.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/docs/mapping_methodology.md -------------------------------------------------------------------------------- /docs/scoring.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/docs/scoring.md -------------------------------------------------------------------------------- /docs/use_cases.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/docs/use_cases.md -------------------------------------------------------------------------------- /images/DataFormatEntityDiagram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/DataFormatEntityDiagram.png -------------------------------------------------------------------------------- /images/MappingMethodologyDiagram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/MappingMethodologyDiagram.png -------------------------------------------------------------------------------- /images/PRPL-CTID-third.jpeg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/PRPL-CTID-third.jpeg -------------------------------------------------------------------------------- /images/aws_icon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/aws_icon.png -------------------------------------------------------------------------------- /images/azure_icon.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/azure_icon.svg -------------------------------------------------------------------------------- /images/gcp_icon.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/gcp_icon.svg -------------------------------------------------------------------------------- /images/github-square-brands.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/github-square-brands.svg -------------------------------------------------------------------------------- /images/tag-solid.svg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/images/tag-solid.svg -------------------------------------------------------------------------------- /mappings.css: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings.css -------------------------------------------------------------------------------- /mappings.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings.js -------------------------------------------------------------------------------- /mappings/AWS/AWSArtifact.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSArtifact.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSAuditManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSAuditManager.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSCertificateManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSCertificateManager.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSCloudEndure.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSCloudEndure.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSCloudHSM.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSCloudHSM.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSCloudTrail.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSCloudTrail.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSCloudWatch.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSCloudWatch.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSConfig.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSConfig.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSDirectoryService.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSDirectoryService.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSFirewallManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSFirewallManager.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSIAM.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSIAM.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSIOTDeviceDefender.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSIOTDeviceDefender.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSKeyManagementService.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSKeyManagementService.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSNetworkFirewall.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSNetworkFirewall.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSOrganizations.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSOrganizations.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSRDS.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSRDS.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSResourceAccessManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSResourceAccessManager.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSS3.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSS3.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSSSO.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSSSO.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSSecretsManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSSecretsManager.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSSecurityHub.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSSecurityHub.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSShield.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSShield.yaml -------------------------------------------------------------------------------- /mappings/AWS/AWSWebApplicationFirewall.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AWSWebApplicationFirewall.yaml -------------------------------------------------------------------------------- /mappings/AWS/AmazonCognito.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AmazonCognito.yaml -------------------------------------------------------------------------------- /mappings/AWS/AmazonDetective.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AmazonDetective.yaml -------------------------------------------------------------------------------- /mappings/AWS/AmazonGuardDuty.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AmazonGuardDuty.yaml -------------------------------------------------------------------------------- /mappings/AWS/AmazonInspector.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AmazonInspector.yaml -------------------------------------------------------------------------------- /mappings/AWS/AmazonMacie.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AmazonMacie.yaml -------------------------------------------------------------------------------- /mappings/AWS/AmazonVirtualPrivateCloud.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/AmazonVirtualPrivateCloud.yaml -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSArtifact.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSArtifact.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSAuditManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSAuditManager.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSCertificateManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSCertificateManager.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSCloudEndure.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSCloudEndure.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSCloudHSM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSCloudHSM.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSCloudTrail.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSCloudTrail.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSCloudWatch.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSCloudWatch.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSConfig.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSConfig.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSDirectoryService.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSDirectoryService.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSFirewallManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSFirewallManager.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSIAM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSIAM.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSIOTDeviceDefender.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSIOTDeviceDefender.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSKeyManagementService.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSKeyManagementService.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSNetworkFirewall.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSNetworkFirewall.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSOrganizations.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSOrganizations.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSRDS.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSRDS.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSResourceAccessManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSResourceAccessManager.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSS3.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSS3.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSSSO.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSSSO.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSSecretsManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSSecretsManager.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSSecurityHub.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSSecurityHub.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSShield.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSShield.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AWSWebApplicationFirewall.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AWSWebApplicationFirewall.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AmazonCognito.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AmazonCognito.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AmazonDetective.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AmazonDetective.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AmazonGuardDuty.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AmazonGuardDuty.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AmazonInspector.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AmazonInspector.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AmazonMacie.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AmazonMacie.json -------------------------------------------------------------------------------- /mappings/AWS/layers/AmazonVirtualPrivateCloud.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/AmazonVirtualPrivateCloud.json -------------------------------------------------------------------------------- /mappings/AWS/layers/platform.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/platform.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Amazon_Inspector.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Amazon_Inspector.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Auditing.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Auditing.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Credentials.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Credentials.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Database.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Database.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Denial_of_Service.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Denial_of_Service.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Identity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Identity.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Internet_of_Things.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Internet_of_Things.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/IoT.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/IoT.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Metrics.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Metrics.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Network.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Network.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Not_Mappable.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Not_Mappable.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Reports.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Reports.json -------------------------------------------------------------------------------- /mappings/AWS/layers/tags/Storage.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/layers/tags/Storage.json -------------------------------------------------------------------------------- /mappings/AWS/valid_tags.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/AWS/valid_tags.txt -------------------------------------------------------------------------------- /mappings/Azure/ATPForAzureSQLDatabase.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/ATPForAzureSQLDatabase.yaml -------------------------------------------------------------------------------- /mappings/Azure/AdaptiveApplicationControls.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AdaptiveApplicationControls.yaml -------------------------------------------------------------------------------- /mappings/Azure/AlertsForAzureCosmosDB.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AlertsForAzureCosmosDB.yaml -------------------------------------------------------------------------------- /mappings/Azure/AlertsForDNS.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AlertsForDNS.yaml -------------------------------------------------------------------------------- /mappings/Azure/AlertsForResourceManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AlertsForResourceManager.yaml -------------------------------------------------------------------------------- /mappings/Azure/AlertsForWindowsMachines.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AlertsForWindowsMachines.yaml -------------------------------------------------------------------------------- /mappings/Azure/AlertsNetworkLayer.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AlertsNetworkLayer.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureADIdentitySecureScore.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureADIdentitySecureScore.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureADManagedIdentities.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureADManagedIdentities.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureADMultiFactorAuthentication.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureADMultiFactorAuthentication.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureADPasswordPolicy.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureADPasswordPolicy.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureADPasswordProtection.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureADPasswordProtection.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureADRoleBasedAccessControl.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureADRoleBasedAccessControl.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureAutomationUpdateMGT.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureAutomationUpdateMGT.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureBackup.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureBackup.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDDOS.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDDOS.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDNSAliasRecords.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDNSAliasRecords.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDNSAnalytics.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDNSAnalytics.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDedicatedHSM.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDedicatedHSM.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDefenderForAppService.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDefenderForAppService.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDefenderForContainerRegistries.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDefenderForContainerRegistries.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDefenderForKeyVault.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDefenderForKeyVault.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDefenderForKubernetes.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDefenderForKubernetes.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureDefenderForStorage.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureDefenderForStorage.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureFirewall.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureFirewall.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureKeyVault.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureKeyVault.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzurePolicy.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzurePolicy.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzurePrivateLink.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzurePrivateLink.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureSentinel.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureSentinel.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureTrafficAnalytics.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureTrafficAnalytics.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureVPN.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureVPN.yaml -------------------------------------------------------------------------------- /mappings/Azure/AzureWebApplicationFirewall.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/AzureWebApplicationFirewall.yaml -------------------------------------------------------------------------------- /mappings/Azure/CloudAppSecurity.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/CloudAppSecurity.yaml -------------------------------------------------------------------------------- /mappings/Azure/ConditionalAccess.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/ConditionalAccess.yaml -------------------------------------------------------------------------------- /mappings/Azure/ContinuousAccessEvaluation.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/ContinuousAccessEvaluation.yaml -------------------------------------------------------------------------------- /mappings/Azure/DockerHostHardening.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/DockerHostHardening.yaml -------------------------------------------------------------------------------- /mappings/Azure/FileIntegrityMonitoring.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/FileIntegrityMonitoring.yaml -------------------------------------------------------------------------------- /mappings/Azure/IdentityProtection.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/IdentityProtection.yaml -------------------------------------------------------------------------------- /mappings/Azure/JustInTimeVMAccess.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/JustInTimeVMAccess.yaml -------------------------------------------------------------------------------- /mappings/Azure/LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/LICENSE -------------------------------------------------------------------------------- /mappings/Azure/LinuxAuditdAndLogAnalytics.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/LinuxAuditdAndLogAnalytics.yaml -------------------------------------------------------------------------------- /mappings/Azure/MicrosoftAntimalwareForAzure.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/MicrosoftAntimalwareForAzure.yaml -------------------------------------------------------------------------------- /mappings/Azure/MicrosoftDefenderForIdentity.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/MicrosoftDefenderForIdentity.yaml -------------------------------------------------------------------------------- /mappings/Azure/NetworkSecurityGroups.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/NetworkSecurityGroups.yaml -------------------------------------------------------------------------------- /mappings/Azure/PasswordlessAuthentication.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/PasswordlessAuthentication.yaml -------------------------------------------------------------------------------- /mappings/Azure/PrivilegedIdentityManagement.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/PrivilegedIdentityManagement.yaml -------------------------------------------------------------------------------- /mappings/Azure/SQLVulnerabilityAssessment.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/SQLVulnerabilityAssessment.yaml -------------------------------------------------------------------------------- /mappings/Azure/SecurityCenterRecommendations.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/SecurityCenterRecommendations.yaml -------------------------------------------------------------------------------- /mappings/Azure/VulnerabilityAssessmentQualys.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/VulnerabilityAssessmentQualys.yaml -------------------------------------------------------------------------------- /mappings/Azure/layers/ATPForAzureSQLDatabase.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/ATPForAzureSQLDatabase.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AdaptiveApplicationControls.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AdaptiveApplicationControls.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AlertsForAzureCosmosDB.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AlertsForAzureCosmosDB.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AlertsForDNS.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AlertsForDNS.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AlertsForResourceManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AlertsForResourceManager.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AlertsForWindowsMachines.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AlertsForWindowsMachines.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AlertsNetworkLayer.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AlertsNetworkLayer.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureADIdentitySecureScore.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureADIdentitySecureScore.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureADManagedIdentities.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureADManagedIdentities.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureADMultiFactorAuthentication.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureADMultiFactorAuthentication.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureADPasswordPolicy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureADPasswordPolicy.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureADPasswordProtection.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureADPasswordProtection.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureADRoleBasedAccessControl.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureADRoleBasedAccessControl.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureAutomationUpdateMGT.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureAutomationUpdateMGT.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureBackup.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureBackup.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDDOS.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDDOS.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDNSAliasRecords.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDNSAliasRecords.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDNSAnalytics.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDNSAnalytics.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDedicatedHSM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDedicatedHSM.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDefenderForAppService.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDefenderForAppService.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDefenderforContainerRegistries.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDefenderforContainerRegistries.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDefenderforKeyVault.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDefenderforKeyVault.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDefenderforKubernetes.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDefenderforKubernetes.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureDefenderforStorage.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureDefenderforStorage.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureFirewall.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureFirewall.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureKeyVault.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureKeyVault.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzurePolicy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzurePolicy.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzurePrivateLink.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzurePrivateLink.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureSentinel.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureSentinel.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureTrafficAnalytics.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureTrafficAnalytics.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureVPN.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureVPN.json -------------------------------------------------------------------------------- /mappings/Azure/layers/AzureWebApplicationFirewall.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/AzureWebApplicationFirewall.json -------------------------------------------------------------------------------- /mappings/Azure/layers/CloudAppSecurity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/CloudAppSecurity.json -------------------------------------------------------------------------------- /mappings/Azure/layers/ConditionalAccess.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/ConditionalAccess.json -------------------------------------------------------------------------------- /mappings/Azure/layers/ContinuousAccessEvaluation.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/ContinuousAccessEvaluation.json -------------------------------------------------------------------------------- /mappings/Azure/layers/DockerHostHardening.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/DockerHostHardening.json -------------------------------------------------------------------------------- /mappings/Azure/layers/FileIntegrityMonitoring.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/FileIntegrityMonitoring.json -------------------------------------------------------------------------------- /mappings/Azure/layers/IdentityProtection.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/IdentityProtection.json -------------------------------------------------------------------------------- /mappings/Azure/layers/JustInTimeVMAccess.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/JustInTimeVMAccess.json -------------------------------------------------------------------------------- /mappings/Azure/layers/LinuxAuditdAndLogAnalytics.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/LinuxAuditdAndLogAnalytics.json -------------------------------------------------------------------------------- /mappings/Azure/layers/MicrosoftAntimalwareForAzure.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/MicrosoftAntimalwareForAzure.json -------------------------------------------------------------------------------- /mappings/Azure/layers/MicrosoftDefenderForIdentity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/MicrosoftDefenderForIdentity.json -------------------------------------------------------------------------------- /mappings/Azure/layers/NetworkSecurityGroups.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/NetworkSecurityGroups.json -------------------------------------------------------------------------------- /mappings/Azure/layers/PasswordlessAuthentication.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/PasswordlessAuthentication.json -------------------------------------------------------------------------------- /mappings/Azure/layers/PrivilegedIdentityManagement.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/PrivilegedIdentityManagement.json -------------------------------------------------------------------------------- /mappings/Azure/layers/SQLVulnerabilityAssessment.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/SQLVulnerabilityAssessment.json -------------------------------------------------------------------------------- /mappings/Azure/layers/SecurityCenterRecommendations.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/SecurityCenterRecommendations.json -------------------------------------------------------------------------------- /mappings/Azure/layers/VulnerabilityAssessmentQualys.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/VulnerabilityAssessmentQualys.json -------------------------------------------------------------------------------- /mappings/Azure/layers/platform.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/platform.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Adaptive_Network_Hardening.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Adaptive_Network_Hardening.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Analytics.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Analytics.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Active_Directory.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Active_Directory.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Defender.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Defender.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Defender_for_App_Service.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Defender_for_App_Service.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Defender_for_SQL.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Defender_for_SQL.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Defender_for_Servers.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Defender_for_Servers.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Security_Center.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Security_Center.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Security_Center_Recommendation.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Security_Center_Recommendation.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_Sentinel.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_Sentinel.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Azure_VPN_Gateway.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Azure_VPN_Gateway.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/CASB.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/CASB.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Containers.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Containers.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Credentials.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Credentials.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/DNS.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/DNS.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Database.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Database.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Encryption.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Encryption.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/File_system.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/File_system.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Identity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Identity.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Linux.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Linux.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/MFA.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/MFA.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Microsoft_365_Defender.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Microsoft_365_Defender.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Network.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Network.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Passwords.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Passwords.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Registry.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Registry.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Threat_Hunting.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Threat_Hunting.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/VPN.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/VPN.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/WAF.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/WAF.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Web.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Web.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Web_Access_Firewall.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Web_Access_Firewall.json -------------------------------------------------------------------------------- /mappings/Azure/layers/tags/Windows.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/layers/tags/Windows.json -------------------------------------------------------------------------------- /mappings/Azure/valid_tags.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/Azure/valid_tags.txt -------------------------------------------------------------------------------- /mappings/GCP/AccessTransparency.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/AccessTransparency.yaml -------------------------------------------------------------------------------- /mappings/GCP/ActifioGo.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ActifioGo.yaml -------------------------------------------------------------------------------- /mappings/GCP/AdvancedProtectionProgram.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/AdvancedProtectionProgram.yaml -------------------------------------------------------------------------------- /mappings/GCP/AnthosConfigManagement.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/AnthosConfigManagement.yaml -------------------------------------------------------------------------------- /mappings/GCP/ArtifactRegistry.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ArtifactRegistry.yaml -------------------------------------------------------------------------------- /mappings/GCP/AssuredWorkloads.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/AssuredWorkloads.yaml -------------------------------------------------------------------------------- /mappings/GCP/BeyondCorpEnterprise.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/BeyondCorpEnterprise.yaml -------------------------------------------------------------------------------- /mappings/GCP/BinaryAuthorization.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/BinaryAuthorization.yaml -------------------------------------------------------------------------------- /mappings/GCP/CertificateAuthorityService.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CertificateAuthorityService.yaml -------------------------------------------------------------------------------- /mappings/GCP/Chronicle.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/Chronicle.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudArmor.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudArmor.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudAssetInventory.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudAssetInventory.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudCDN.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudCDN.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudDataLossPrevention.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudDataLossPrevention.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudHSM.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudHSM.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudIDS.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudIDS.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudIdentity.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudIdentity.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudKeyManagement.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudKeyManagement.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudLogging.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudLogging.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudNAT.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudNAT.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudStorage.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudStorage.yaml -------------------------------------------------------------------------------- /mappings/GCP/CloudVPN.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/CloudVPN.yaml -------------------------------------------------------------------------------- /mappings/GCP/ConfidentialVM.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ConfidentialVM.yaml -------------------------------------------------------------------------------- /mappings/GCP/ConfigConnector.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ConfigConnector.yaml -------------------------------------------------------------------------------- /mappings/GCP/ContainerRegistry.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ContainerRegistry.yaml -------------------------------------------------------------------------------- /mappings/GCP/DataCatalog.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/DataCatalog.yaml -------------------------------------------------------------------------------- /mappings/GCP/DeploymentManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/DeploymentManager.yaml -------------------------------------------------------------------------------- /mappings/GCP/EndpointManagement.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/EndpointManagement.yaml -------------------------------------------------------------------------------- /mappings/GCP/Firewalls.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/Firewalls.yaml -------------------------------------------------------------------------------- /mappings/GCP/GKE.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/GKE.yaml -------------------------------------------------------------------------------- /mappings/GCP/HybridConnectivity.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/HybridConnectivity.yaml -------------------------------------------------------------------------------- /mappings/GCP/IdentityAwareProxy.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/IdentityAwareProxy.yaml -------------------------------------------------------------------------------- /mappings/GCP/IdentityPlatform.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/IdentityPlatform.yaml -------------------------------------------------------------------------------- /mappings/GCP/IdentyAccessManagement.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/IdentyAccessManagement.yaml -------------------------------------------------------------------------------- /mappings/GCP/PacketMirroring.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/PacketMirroring.yaml -------------------------------------------------------------------------------- /mappings/GCP/PolicyIntelligence.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/PolicyIntelligence.yaml -------------------------------------------------------------------------------- /mappings/GCP/ReCAPTCHAEnterprise.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ReCAPTCHAEnterprise.yaml -------------------------------------------------------------------------------- /mappings/GCP/ResourceManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ResourceManager.yaml -------------------------------------------------------------------------------- /mappings/GCP/SCC.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/SCC.yaml -------------------------------------------------------------------------------- /mappings/GCP/SecretManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/SecretManager.yaml -------------------------------------------------------------------------------- /mappings/GCP/ShieldedVM.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/ShieldedVM.yaml -------------------------------------------------------------------------------- /mappings/GCP/TerraformGoogle Cloud.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/TerraformGoogle Cloud.yaml -------------------------------------------------------------------------------- /mappings/GCP/TitanSecurityKey.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/TitanSecurityKey.yaml -------------------------------------------------------------------------------- /mappings/GCP/VMManager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/VMManager.yaml -------------------------------------------------------------------------------- /mappings/GCP/VPC.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/VPC.yaml -------------------------------------------------------------------------------- /mappings/GCP/VPCServiceControls.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/VPCServiceControls.yaml -------------------------------------------------------------------------------- /mappings/GCP/VirusTotal.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/VirusTotal.yaml -------------------------------------------------------------------------------- /mappings/GCP/WebRisk.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/WebRisk.yaml -------------------------------------------------------------------------------- /mappings/GCP/layers/AccessTransparency.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/AccessTransparency.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ActifioGo.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ActifioGo.json -------------------------------------------------------------------------------- /mappings/GCP/layers/AdvancedProtectionProgram.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/AdvancedProtectionProgram.json -------------------------------------------------------------------------------- /mappings/GCP/layers/AnthosConfigManagement.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/AnthosConfigManagement.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ArtifactRegistry.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ArtifactRegistry.json -------------------------------------------------------------------------------- /mappings/GCP/layers/AssuredWorkloads.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/AssuredWorkloads.json -------------------------------------------------------------------------------- /mappings/GCP/layers/BeyondCorpEnterprise.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/BeyondCorpEnterprise.json -------------------------------------------------------------------------------- /mappings/GCP/layers/BinaryAuthorization.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/BinaryAuthorization.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CertificateAuthorityService.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CertificateAuthorityService.json -------------------------------------------------------------------------------- /mappings/GCP/layers/Chronicle.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/Chronicle.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudArmor.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudArmor.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudAssetInventory.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudAssetInventory.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudCDN.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudCDN.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudDataLossPrevention.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudDataLossPrevention.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudHSM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudHSM.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudIDS.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudIDS.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudIdentity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudIdentity.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudKeyManagement.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudKeyManagement.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudLogging.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudLogging.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudNAT.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudNAT.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudStorage.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudStorage.json -------------------------------------------------------------------------------- /mappings/GCP/layers/CloudVPN.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/CloudVPN.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ConfidentialVM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ConfidentialVM.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ConfigConnector.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ConfigConnector.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ContainerRegistry.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ContainerRegistry.json -------------------------------------------------------------------------------- /mappings/GCP/layers/DataCatalog.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/DataCatalog.json -------------------------------------------------------------------------------- /mappings/GCP/layers/DeploymentManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/DeploymentManager.json -------------------------------------------------------------------------------- /mappings/GCP/layers/EndpointManagement.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/EndpointManagement.json -------------------------------------------------------------------------------- /mappings/GCP/layers/Firewalls.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/Firewalls.json -------------------------------------------------------------------------------- /mappings/GCP/layers/GKE.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/GKE.json -------------------------------------------------------------------------------- /mappings/GCP/layers/HybridConnectivity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/HybridConnectivity.json -------------------------------------------------------------------------------- /mappings/GCP/layers/IdentityAwareProxy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/IdentityAwareProxy.json -------------------------------------------------------------------------------- /mappings/GCP/layers/IdentityPlatform.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/IdentityPlatform.json -------------------------------------------------------------------------------- /mappings/GCP/layers/IdentyAccessManagement.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/IdentyAccessManagement.json -------------------------------------------------------------------------------- /mappings/GCP/layers/PacketMirroring.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/PacketMirroring.json -------------------------------------------------------------------------------- /mappings/GCP/layers/PolicyIntelligence.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/PolicyIntelligence.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ReCAPTCHAEnterprise.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ReCAPTCHAEnterprise.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ResourceManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ResourceManager.json -------------------------------------------------------------------------------- /mappings/GCP/layers/SCC.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/SCC.json -------------------------------------------------------------------------------- /mappings/GCP/layers/SecretManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/SecretManager.json -------------------------------------------------------------------------------- /mappings/GCP/layers/ShieldedVM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/ShieldedVM.json -------------------------------------------------------------------------------- /mappings/GCP/layers/TerraformGoogle Cloud.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/TerraformGoogle Cloud.json -------------------------------------------------------------------------------- /mappings/GCP/layers/TitanSecurityKey.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/TitanSecurityKey.json -------------------------------------------------------------------------------- /mappings/GCP/layers/VMManager.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/VMManager.json -------------------------------------------------------------------------------- /mappings/GCP/layers/VPC.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/VPC.json -------------------------------------------------------------------------------- /mappings/GCP/layers/VPCServiceControls.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/VPCServiceControls.json -------------------------------------------------------------------------------- /mappings/GCP/layers/VirusTotal.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/VirusTotal.json -------------------------------------------------------------------------------- /mappings/GCP/layers/WebRisk.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/WebRisk.json -------------------------------------------------------------------------------- /mappings/GCP/layers/platform.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/platform.json -------------------------------------------------------------------------------- /mappings/GCP/layers/siemplify.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/siemplify.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Access_Control_Policies.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Access_Control_Policies.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Access_Management.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Access_Management.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Analytics.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Analytics.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Antimalware.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Antimalware.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Antivirus.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Antivirus.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Auditing.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Auditing.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Binary_Authorization.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Binary_Authorization.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Certificate_Service.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Certificate_Service.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Cloud_IDS.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Cloud_IDS.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Configuration_Management.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Configuration_Management.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Containers.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Containers.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Credentials.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Credentials.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Data_Catalog.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Data_Catalog.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Data_Loss_Prevention.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Data_Loss_Prevention.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Data_Security.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Data_Security.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Encryption.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Encryption.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Firewall.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Firewall.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Identity.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Identity.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Intrusion_Detection_Service_(IDS).json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Intrusion_Detection_Service_(IDS).json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Kubernetes.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Kubernetes.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Logging.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Logging.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Malware.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Malware.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Multi-Factor_Authentication.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Multi-Factor_Authentication.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Network.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Network.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Not_Mappable.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Not_Mappable.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/OS_Security.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/OS_Security.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Palo_Alto_Network's_Threat_Signatures.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Palo_Alto_Network's_Threat_Signatures.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Passwords.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Passwords.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Patch_Management.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Patch_Management.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Phishing.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Phishing.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Policy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Policy.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Role_Based_Access_Control.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Role_Based_Access_Control.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/SIEM.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/SIEM.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Security_Command_Center.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Security_Command_Center.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Storage.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Storage.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Threat_Detection.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Threat_Detection.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/VPN.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/VPN.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Virtual_Private_Cloud.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Virtual_Private_Cloud.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Vulnerability_Analysis.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Vulnerability_Analysis.json -------------------------------------------------------------------------------- /mappings/GCP/layers/tags/Vulnerability_Management.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/layers/tags/Vulnerability_Management.json -------------------------------------------------------------------------------- /mappings/GCP/siemplify.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/siemplify.yaml -------------------------------------------------------------------------------- /mappings/GCP/valid_tags.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/mappings/GCP/valid_tags.txt -------------------------------------------------------------------------------- /tools/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/README.md -------------------------------------------------------------------------------- /tools/config/aws_markdown_summary_template.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/aws_markdown_summary_template.html -------------------------------------------------------------------------------- /tools/config/azure_markdown_summary_template.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/azure_markdown_summary_template.html -------------------------------------------------------------------------------- /tools/config/gcp_markdown_summary_template.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/gcp_markdown_summary_template.html -------------------------------------------------------------------------------- /tools/config/mapping_schema.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/mapping_schema.json -------------------------------------------------------------------------------- /tools/config/markdown_summary_config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/markdown_summary_config.json -------------------------------------------------------------------------------- /tools/config/navigator_layer_config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/navigator_layer_config.yaml -------------------------------------------------------------------------------- /tools/config/navigator_layer_template.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/config/navigator_layer_template.json -------------------------------------------------------------------------------- /tools/data/.gitignore: -------------------------------------------------------------------------------- 1 | *.json 2 | -------------------------------------------------------------------------------- /tools/db/database.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/db/database.py -------------------------------------------------------------------------------- /tools/db/model.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/db/model.py -------------------------------------------------------------------------------- /tools/mapping_cli.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/mapping_cli.py -------------------------------------------------------------------------------- /tools/mapping_driver.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/mapping_driver.py -------------------------------------------------------------------------------- /tools/requirements.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/requirements.txt -------------------------------------------------------------------------------- /tools/utils/attack_data_source.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/utils/attack_data_source.py -------------------------------------------------------------------------------- /tools/utils/mapping_validator.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/utils/mapping_validator.py -------------------------------------------------------------------------------- /tools/utils/utils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/utils/utils.py -------------------------------------------------------------------------------- /tools/visualizers/attack_navigator_visualizer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/visualizers/attack_navigator_visualizer.py -------------------------------------------------------------------------------- /tools/visualizers/base_visualizer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/visualizers/base_visualizer.py -------------------------------------------------------------------------------- /tools/visualizers/markdown_summary_visualizer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/visualizers/markdown_summary_visualizer.py -------------------------------------------------------------------------------- /tools/visualizers/visualizers_collection.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/center-for-threat-informed-defense/security-stack-mappings/HEAD/tools/visualizers/visualizers_collection.py --------------------------------------------------------------------------------