Who We Are
- - - Who We Are
    - Learn more about MITRE Engenuity’s journey as a hub for transformative innovation.
  - - How We Engage
    - We forge innovative partnerships to generate whole-of-nation solutions to complex technological problems.
  - - Contact Us
    - Connect with a member of the MITRE Engenuity team and ensure your inquiry gets to the right people.
Cybersecurity
- - - Cybersecurity
    - We are relentlessly advancing the art of threat-informed defense, anchored by a belief that we can improve our defenses with a systemic application of a deep understanding of adversary tradecraft and technology.
  - - ATT&CK Evaluations
    - We offer objective analysis of cyber products and features – see our latest results.
  - - Center for Threat-Informed Defense
    - Read more about the cutting-edge research and development being done with input from our participant organizations, featuring some of the top security operations centers.
Growing Impact
- - - Growing Impact
    - We deliver positive public impact through advanced technological innovation projects.
  - - Embedded Capture the Flag
    - MITRE Engenuity’s Embedded Capture the Flag Competition is developing tomorrow’s cyber workforce today.
  - - Safely Operating Aircraft Remotely
    - Preparing UAS Operators for public safety missions.
News & Insights
- - - News & Insights
    - We are leading the leading edge of innovation. Explore the latest news, insights, R&D, and special projects from our advanced tech experts and partners.
  - - Subscribe to Our Newsletters
    - Our tech foundation is addressing the complex problems that face our nation today. Find out how you can join our efforts as we spur innovation for public good.
      
      Subscribe
Search
- - - Search
      
      Search for:

THREAT REPORT ATT&CK MAPPER (TRAM) v1

This is TRAM v1. View the current release.

Project Summary

Published : Sep 30, 2021

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®. TRAM enables researchers to test and refine Machine Learning (ML) models for identifying ATT&CK techniques in prose-based threat intel reports and allows threat intel analysts to train ML models and validate ML results.

Through research into automating the mapping of cyber threat intel reports to ATT&CK, TRAM aims to reduce the cost and increase the effectiveness of integrating ATT&CK into cyber threat intelligence across the community. Threat intel providers, threat intel platforms, and analysts should be able to use TRAM to integrate ATT&CK more easily and consistently into their products.

Problem

Mapping new threat intel reports to ATT&CK is difficult, error prone, and time consuming.

SOLUTION

Develop an open-source platform for researching the application of NLP and ML to identify TTPs in threat intel reports and allow analysts to validate those TTPs.

IMPACT

Accelerate research into automated TTP identification in threat intel reports to greatly reduce the time and effort required to integrate new intelligence into cyber operations.