The only 'solution' I thought of is linking a CVE to a CWE and then to a CAPEC (Method found in this link: How to find CAPEC items related to a CVE) but I am unable to get from a CAPEC attack pattern to a technique/tactic in the ATT&CK matrix.

(On a side note what is the difference between CAPEC and the ATT&CK matrix? They both seem to serve the same purpose to me)

  • Many an unfortunate soul has be tasked over the years with doing this. Good Luck! – user10216038 Jan 21 at 17:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.