Skip to content

YAML introduction

Jump to bottom
Marcus Bakker edited this page Dec 20, 2021 · 9 revisions

YAML stands for "YAML Ain't Markup Language" and is a human-readable data serialisation language. Its footprint is smaller than XML and more readable compared to JSON.

DeTT&CT uses YAML files to administrate data sources, visibility, techniques and groups. The following file types can be identified:

Editing YAML files

Overview

  1. Home
  2. Introduction
  3. Installation and requirements
  4. Getting started / How to
  5. Changelog
  6. Future developments
  7. ICS - Inconsistencies

Data sources

  1. Introduction
  2. DeTT&CT data sources
  3. Data sources per platform
  4. Data quality
  5. Scoring data quality
  6. Improvement graph

Visibility Coverage

  1. Introduction
  2. Scoring visibility
  3. Improvement graph

Detection coverage

  1. Introduction
  2. Scoring detection
  3. Improvement graph

Threat actor group mapping

  1. Introduction

YAML administration files

  1. Introduction
  2. Data sources
  3. Techniques
  4. Groups
  5. DeTT&CT Editor
Clone this wiki locally