Skip to content

mitre-attack/attack-stix-data

View on GitHub ↗Related repositories →

STIX data representing MITRE ATT&CK

active 2024-02-012026-07-04 (UTC)

Partial coverage17,324 / 22,203 hourly files (78%) · 2 absent upstream · 4,879 failed, retryable2024-01-302026-08-12 (UTC)— sampled evenly across the window, so rankings and trends hold; absolute counts scale up.
Events
227
Pushes
9
Pull requests
2
Issues
17
Stars
136
Forks
38

Activity over time

Daily event counts in the loaded window

Line chart, 885 days from 2024-02-01 to 2026-07-04. Pushes: 9 total, peak 2 in a day. Pull requests: 2 total, peak 1 in a day. Issues: 17 total, peak 3 in a day. Comments: 16 total, peak 3 in a day. Stars: 136 total, peak 3 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
jondricek24519
elucchesileon4102
rubinatorz3002
Michael677803011
morzen1000
y0nde1001
LuchsHub1000
adpare1100
seansica1100
jecarr1000
cyphos-ai1000
clemiller1100
adampennin1000
dxridoyking20-lab1001

Recent activity

Latest issues, pull requests and releases

  • Issue#43jondricek2026-01-06 15:29
    v13.1 having Duplicated G0097 and S0302 spanning both [enterprise-attack and mobile-attack] Stix JSON files
  • Issue#41jondricek2026-01-02 21:01
    Please update Usage docs when introducing new fields
  • Issue comment#41jondricek2026-01-02 21:01
    Please update Usage docs when introducing new fields
  • Issue#24jondricek2026-01-02 17:59
    <"x_mitre_is_subtechnique": false> field is missing for most of the techniques.
  • Issue#31elucchesileon2026-01-02 15:00
    Broken Links to data source entries in STIX file
  • Issue comment#17elucchesileon2026-01-02 14:52
    mobile-attack-11.1.json - a record missing "description" and "kill_chain_phases
  • Issue comment#65dxridoyking20-lab2026-01-01 22:46
    Update information to point to the ATT&CK Data Model repository
  • Issue#35jondricek2025-12-31 17:26
    Missing reference for x_mitre_platforms property on relationships
  • Issue comment#35jondricek2025-12-31 17:26
    Missing reference for x_mitre_platforms property on relationships
  • Issue comment#32jondricek2025-12-31 17:23
    Question: Do relationships include custom Attack properties?
  • Issue comment#7elucchesileon2025-12-30 18:46
    Dangling refs to malware in enterprise file
  • Issue#29jondricek2025-12-23 19:22
    Invalid UUID in enterprise-attack.json
  • Issue comment#29jondricek2025-12-23 19:22
    Invalid UUID in enterprise-attack.json
  • Issue#15jondricek2025-12-23 18:42
    STIX 2.1 Bundles don't use spec_version
  • Issue comment#11jondricek2025-12-23 18:38
    In USAGE, replace links to the STIX 2.0 spec to links to the STIX 2.1 spec
  • Issue#11jondricek2025-12-23 18:38
    In USAGE, replace links to the STIX 2.0 spec to links to the STIX 2.1 spec
  • Issue comment#18jondricek2025-12-23 18:28
    Remove duplicate external reference with malformed URL
  • Issue#66jondricek2025-12-22 16:59
    Data Inconsistency in enterprise-attack-16.0.json: Campaign C0038 last_seen date error
  • Pull request#65jondricek2025-12-19 21:32
  • Issue#64rubinatorz2025-12-05 14:35
    Difference between data component "Permissions Request" and "Permissions Requests" in Mobile ATT&CK
  • Releasejondricek2025-11-13 15:06
    ATT&CK version 18.1
  • Issue comment#61rubinatorz2025-10-29 14:00
    Getting All Data Components That Detect A Technique
  • Issue comment#61rubinatorz2025-10-29 09:20
    Getting All Data Components That Detect A Technique
  • Issue comment#61y0nde2025-10-29 05:15
    Getting All Data Components That Detect A Technique
  • Releasejondricek2025-10-28 13:35
    ATT&CK version 18.0

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 136 stars here means stars gained during the window, not the repo's star count.