Security Vault Generator
Quickly parse, format, and output common frameworks/content for Obsidian.md.
There is a strong focus on MITRE ATT&CK because it provides a solid and generally accepted framework that can be used to bind notes to.
I ripped this out in 1-2 days so it's only at minimum viable product.
This should have been an Obsidian plugin but I didn't want to JS.
Docs
Quickstart
This assumes all packages have been installed via PIP. See Installation for steps on this process.
Just execute the proper build
subcommand and generator.py
will:
- Clone necessary repositories.
- Parse all artifacts.
- Embed frontmatter with tagging.
- Format them to
.md
files. - And dump the files to disk in a directory of your choice.
Assuming your vault is named TheVault
, these commands should work to build out the MITRE ATT&CK framework and LOLBAS:
Tip: Select a directory in the target Obsidian vault as an output directory using the -od
flag for each subcommand.
python3 generator.py mitre-attack build -od ~/TheVault/MITRE\ Attack/
python3 generator.py lolbas build -od ~/TheVault/LOLBAS/
python3 generator.py mitre-attack link --attack-directory ~/TheVault/MITRE\ Attack/
Now all you have to do is open the vault in Obsidian:
Engaging "graph view" and applying a filter with group colors on tags should yield output similar to the following, where green nodes are LOLBAS notes and red are MITRE ATT&CK:
Tip: Here's the filter I used. You'll have to go about grouping by isolating the tags.
tag:#lolbas OR tag:#mitre/attack/technique