pbom-dev / OSCAR

A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain

pbom-dev/OSCAR Issues

Duplicate ID T1098
Updated 2 months ago
Typo in technique 130
Updated 5 months ago3
Reserve a prefix for "experimental" or "local definition"
Closed 6 months ago4
Possibly wrong type category assigned to D1171 "Implement Web Application Firewall"
Updated 6 months ago1
Attack Stories
Closed a year ago
New technique - Proprietary data stolen & Customers compromised
Updated a year ago1
Update on mitigations and detections
Updated a year ago
New content for Initial Access tactic techniques
Closed a year ago
New content for Reconnaissance tactic techniques
Closed a year ago
New content for Persistence tactic techniques
Closed a year ago
New content for Credential Access tactic techniques
Closed a year ago
New content for Defense Evasion, Credential Access and Persistence tactics techniques
Closed a year ago
New content for Resource Development tactic techniques
Closed a year ago
New content for Exfiltration tactic techniques
Closed a year ago
New content for Lateral Movement tactic techniques
Closed a year ago
New content for Privilege Escalation tactic techniques
Closed a year ago
New content for Collection tactic techniques
Closed a year ago
New content for Impact tactic techniques
Closed a year ago
New technique - Compromised Token T0112
Closed a year ago
New technique - Inadequate CI/CD workflow permissions
Updated a year ago
Fix bug - missing amount per tactic in matrix.json
Updated a year ago
New content for Execution tactic techniques
Closed a year ago
Content for Code Security realm techniques
Closed a year ago1
Github action for generating data for website
Closed a year ago1
New reconnaissance technique for "localized deployments"
Updated a year ago1
modify "misconfiguration of security services" under defense evasion
Updated a year ago2
Different options or categories for Impact
Updated a year ago3
template for mitigation and detection
Closed a year ago1
Create access token technique
Updated a year ago
Mitigation 1201 - Restrict egresss traffic from CICD
Closed a year ago
Create mitigation "Verify package authenticity"
Updated a year ago
Update contributing.md
Updated a year ago1
Author "Dependency Confusion" technique
Closed a year ago
Update CONTRIBUTE.md file
Updated a year ago1
Create linter/validator for content yaml files
Updated a year ago
Consolidating changes to main branch
Closed a year ago1
Add template yaml for techniques
Updated a year ago