CLOAK (Concealment Layers for Online Anonymity and Knowledge) in MITRE Navigator

OSS Support
,
1

We’ve been using CLOAK recently to tag intel.

To do this, we built a lightweight script to turn the CLOAK Framework to STIX objects.

The latest version is here: https://downloads.ctibutler.com/cloak2stix-manual-output/cloak-bundle-v26.06.01.json

One of our design goals was to also make the bundle compatible with the ATT&CK Navigator, which it is.

You can use the CLOAK with Navigator like so

  1. Open Navigator
  2. Select Create New Layer
  3. Select more options
  4. Enter
    1. STIX Bundle: https://downloads.ctibutler.com/cloak2stix-manual-output/cloak-bundle-v26.06.01.json
    2. Bundle version: 260601
    3. Bundle domain: cloak