Datasets

Introduction

This page represents the datasets available within the M&NTIS Platform.

These datasets were generated during a lab, following the execution of an attack or a scenario.

The datasets are presented as a list, sorted by default according to the creation date.

The list can be sorted differently by clicking on the chosen column.

Dataset Properties

The information presented in this list for a given dataset includes:

Its name (the name of the original attack or scenario),
Its type (attack or scenario),
Its creation date,
The number of attack techniques used,
Its description (the description of the original attack or scenario).

Search Features

It is possible to narrow this list by applying filters (type, tactics, techniques) or by performing a text search.

Actions

From this list, it is possible to view the details of the dataset or to download it.

Button	Action
	Download dataset
	View dataset details

Dataset Details

This page allows you to view the content of a dataset.

The content is likely to be more extensive in the case of a scenario (a sequence of multiple attacks) than in the case of a single attack.

It will also vary depending on the configuration of the associated lab.

Dataset from an Attack

This page first displays general information about the dataset:

The name of the attack (at the top of the page),
Information about the dataset content (creation date, attack duration, number of available PCAP files, number of available log files),
The MITRE ATT&CK tactics used in this attack,
The MITRE ATT&CK techniques used in this attack.

Then, through different tabs, the content of the dataset is presented.

It is also possible to download the dataset from this page by clicking the DOWNLOAD button.

Dataset from a Scenario

The information presented is the same as for an attack but is generally more extensive, particularly regarding the number of MITRE ATT&CK tactics and techniques used.