The Big Picture of APT Attacks Targeting Japan — APT Incident STIX Database
summary
JPCERT/CC describes a system that converts incident records of Japan-targeting APT attacks into STIX 2.0 and stores them in an open-source database on GitHub. The system analyzes campaigns, threat groups, malware, intrusion and lateral-movement techniques, and victim organization attributes, visualizes attack timelines, and uses those timelines to classify targets and infer attacker intent while sharing technical lessons from encoding incidents in STIX.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 5:27APT attacks in Japan
- 11:43APT timeline and damage trends
- 20:59STIX database overview
- 23:26STIX objects and visualization
- 31:48TTP matrix analysis
- 36:24Notable attack methods
- 43:51Summary and challenges
related talks
55mRevealing the Attack Operations Targeting Japan
01h 01mIntroduction To STIX/TAXII 2 Standards
39mThe PR3TACK Initiative: Building the World’s First Preemptive Tactics & Countermeasures Knowledgebas
28mWho Did It? Getting Started with Threat Actor Profiling
35mThese Aren't the Threats You're Looking For: How Our APT Focus Ruins CTI
13mAPTGen: An Approach towards Generating Practical Dataset Labelled with Targeted...
28mThreatIntelGPT: STIX from Chaos
44mUnmasking APTs: An Automated Approach for Real-World Threat Attribution