Skip to main content
Version: 5.1

Initial Content Set

Description

The base distribution of the MITRE ATT&CK module contains a set of system objects that will be available in Search Anywhere Framework.

Content Initialization Process

When installing or updating the module followed by a Search Anywhere Framework restart, a base content set for MITRE ATT&CK is initialized.

It includes objects such as:

  • Dashboards
  • Tags
  • Reference books

In addition to creating the objects themselves, a content version for MITRE ATT&CK is created in the Content Management module, where all created system objects can be viewed.

The content version can be updated later. If system objects existed previously, they are updated manually.

For more information about content management, see here