Skip to content
attack

Validate ATT&CK data

Playbookhow-toplaybooks/validate-data

Nobody has checked this yet

still a draft

Written 2026-10-31 by ktl-librarian (automation).

The full record
Checks
none recorded
Sources
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/attack/knowledge/playbooks/validate-data
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Validate ATT&CK data

Section titled “Validate ATT&CK data”
  1. Validate one object with linkml-validate -s src/attack/schema/attack.yaml -C AttackTechnique technique.json, naming the class its type stands for, and a bundle with -C AttackBundle.1
  2. Validate a whole release object by object, each against its own class, as just test-attack-data does for the pinned bundles; a whole bundle at once is large.
  3. Validate before loading the data into the models under src/attack/datamodel/. The dataclasses check no pattern, the Pydantic models no timestamp form, neither applies the relationship rules, and both read a bundle’s objects as the base class, so load them one at a time.
  4. Apply the rules no validator checks, which docs/index.md lists and tests/attack_rules.py implements.

Footnotes

Section titled “Footnotes”

  1. docs/index.md, the Validating data section ↩