Research a threat or a vulnerability
You know whether a vulnerability or an adversary matters to you, and where that intelligence comes from.
- 1SPECTERSPECTER
Find your way around SPECTER
The header shows Soveryne and SPECTER on the left and your profile button (your initials) on the right. The navigation on the left has six pages:
Open this step → - 2SPECTERCVEs
Search for a CVE or a product
The search box on this page searches the whole catalogue, not only the CVEs on screen. Typing alone does not search; you start the search yourself.
Open this step → - 3SPECTERCVEs
Narrow it down with a CPE
A CPE (Common Platform Enumeration) name identifies a product, and optionally a version, in a standard way. The CPE filter finds the CVEs whose recorded applicability matches that product.
Open this step → - 4SPECTERCVEs
Open the CVE and read its applicability
In the results, choose the CVE ID.
Open this step → - 5SPECTERThreat intelligence: adversaries, techniques and malware
Look up an adversary
Adversaries is the page SPECTER opens on. It shows one APT group and the techniques it uses as a graph. SPECTER selects the first group on the page for you.
Open this step → - 6SPECTERThreat intelligence: adversaries, techniques and malware
Explore its techniques
Techniques lists the MITRE ATT&CK techniques and subtechniques. In the graph, each technique is drawn as "T1059 · Command and Scripting Interpreter", and a Subtechnique line connects a technique to each of its subtechniques. In List…
Open this step → - 7SPECTERSources and source health
Check where the intelligence comes from
Source health shows when each source was last brought up to date. Each row is one source, identified by a short source identifier in the Source Id column.
Open this step → - 8ATLASFindings and attack paths
See it on your own hosts in ATLAS
Open Findings in the header. The summary next to the heading reads, for example, "20 open · 4 critical · 1 accepted".
Open this step →