Updated Library 1.3.4 - 06142018

Library:
- minor updates to ti from a data schema perspective

Export Example:
- updated document with the latest updates

docker-compose
- I reduced the memory size of elasticsearch to 4GB to start

Jupyter Notebooks
- ran the updated library to make sure all the functions were working properly

Author: Cyb3rWard0g

attackcti/attack_api.py

@@ -558,7 +558,7 @@ def get_techniques_used_by_software(self, software_name=None):
                         #'system_requirements' : t['system_requirements'],
                         #'network_requirements' : t['network_requirements'],
                         #'remote_support' : t['remote_support'],
-                        'contributors' : t['contributors'],
+                        #'contributors' : t['contributors'],
                         #'technique_references' : t['technique_references'],
                         #'detectable_by_common_defenses' : t['detectable_by_common_defenses'],
                         #'detectable_explanation' : t['detectable_explanation'],
@@ -604,7 +604,7 @@ def get_techniques_used_by_group(self, group_name=None):
                         #'system_requirements' : t['system_requirements'],
                         #'network_requirements' : t['network_requirements'],
                         #'remote_support' : t['remote_support'],
-                        'contributors' : t['contributors'],
+                        #'contributors' : t['contributors'],
                         #'technique_references' : t['technique_references'],
                         #'detectable_by_common_defenses' : t['detectable_by_common_defenses'],
                         #'detectable_explanation' : t['detectable_explanation'],

export_example/all_attack.xlsx

@@ -1,11 +1,13 @@
 # HELK CTI
 
-Integrating ATT&CK CTI with [@THE_HELK](https://twitter.com/THE_HELK)
+Integrating [@MITREattack](https://twitter.com/MITREattack) CTI with [@THE_HELK](https://twitter.com/THE_HELK)
+
+![alt text](../../resources/images/HELK_MITREattack.png "HELK and MITREattack")
 
 # Goals
 
 * Provide an easy way to explore and interact with up to date ATT&CK content available in STIX via public TAXII server
-* Take advantage of Elasticsearch and Kibana's open-source full-text search and analytics engine availab in the [HELK](https://github.com/Cyb3rWard0g/HELK)
+* Take advantage of Elasticsearch and Kibana's open-source full-text search and analytics engine available in the [HELK](https://github.com/Cyb3rWard0g/HELK)
 * Help security analysts during the transition from the ATT&CK MediaWiki API to the STIX/TAXII 2.0 API
 * Learn how to integrate ATT&CK data with an open source project
 
@@ -24,6 +26,7 @@ The project is currently in an alpha stage, which means that the code and the fu
 
 * [HELK](https://github.com/Cyb3rWard0g/HELK)
 * [ATTACK-PYTHON-CLIENT](https://github.com/Cyb3rWard0g/ATTACK-Python-Client)
+* [attackcti library](https://pypi.org/project/attackcti/)
 * [MITRE CTI](https://github.com/mitre/cti)
 * [OASIS CTI TAXII Client](https://github.com/oasis-open/cti-taxii-client)
 * [OASIS CTI Python STIX2](https://github.com/oasis-open/cti-python-stix2)
@@ -178,3 +181,5 @@ sudo docker logs --follow helk-elasticsearch
 Feedback is appreciated!! I would love to know if there is anything that the integration is missing. Maybe more data? was it useful??. Let us know! :) #SharingIsCaring
 
 # TO-Do
+[ ] Create a dashboard per Matrix (Enterprise, PRE and Mobile)
+[ ] Explore Vega Viz with ATT&CK data

integrations/helk_cti/README.md

@@ -7,7 +7,7 @@ services:
     volumes:
       - ./helk-elasticsearch/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml
     environment:
-      - "ES_JAVA_OPTS=-Xms6g -Xmx6g"
+      - "ES_JAVA_OPTS=-Xms4g -Xmx4g"
     ulimits:
       memlock:
         soft: -1

integrations/helk_cti/docker-compose.yml

@@ -13,7 +13,7 @@
 
 setuptools.setup(
     name="attackcti",
-    version="0.1.3",
+    version="0.1.4",
     author="Roberto Rodriguez",
     author_email="[email protected]",
     description="ATTACK CTI Libary",