/
Mitre lookup: MitreAlertsExtendedDefinition

Mitre lookup: MitreAlertsExtendedDefinition

[ 1 Purpose ] [ 2 Open lookup ] [ 3 Use lookup ]

Purpose

Use this lookup template to add custom alerts to the Mitre app

You can edit the lookup once installed to add your custom alerts to the Mitre application. You will also be able to map alerts to multiple tactics and techniques. The application will then pulls and maps them to the matrix, correctly displaying the coverage.

Open lookup

Once you have installed the lookup, you can use the Open button at the top right of the card in Exchange to access the Lookup Management area, where you can apply filters to find it and later manage it as required. You can also access the Lookup Management area via the Navigation pane (Data Search area → Lookup Management tab).

Use lookup

After installing the lookup, you can use it in the related application mentioned above for their specific purposes. Apart from that, you can use it anywhere in the platform to enrich values when applicable. To do this, you must use the adequate syntax in queries to correlate values, as explained in this article.

Related content

Mitre/SecOps lookup: SecOpsAlertDescription
Mitre/SecOps lookup: SecOpsAlertDescription
More like this
Application: MITRE ATT&CK Adviser
Application: MITRE ATT&CK Adviser
More like this
App configuration
App configuration
More like this
MITRE ATT&CK Adviser
MITRE ATT&CK Adviser
More like this
Mitre/SecOps lookup: SecOpsFWAuthorizedAccess
Mitre/SecOps lookup: SecOpsFWAuthorizedAccess
More like this
Mitre/SecOps lookup: SecOpsAUTHAuthorizedAccess
Mitre/SecOps lookup: SecOpsAUTHAuthorizedAccess
More like this