Frameworks & Standards
MITRE ATT&CK
MITRE ATT&CK is a public knowledge base of adversary tactics and techniques based on real-world observations. It helps security teams model how attackers behave and where defenses need coverage.
Buyer question
"How does Legra change the risk picture for adversary techniques such as data manipulation, credential abuse, exfiltration, or lateral movement?"
Legra fit
| Assessment area | Legra fit | Status |
|---|---|---|
| Data manipulation | Change history, validation gates, and branch review help teams identify unauthorized or malformed changes. | Native fit |
| Credential abuse | Workspace membership restricts data access; teams must also protect accounts and devices. | Partial fit |
| Exfiltration impact | Encryption and access controls help protect confidential data; authorized exports still require handling controls. | Native fit |
| Lateral movement | Separate workspace membership limits access across projects; endpoint and account security remain deployment responsibilities. | Partial fit |
| Threat model coverage | ATT&CK mapping itself is an external security exercise, not a Legra feature. | External responsibility |
What Legra can say
Legra gives security teams concrete technical controls to map against ATT&CK techniques:
- Signed commits help identify unauthorized authorship and tampering.
- Branches isolate untrusted imports, agent output, and experiments before production merge.
- SHACL validation can catch data-shape attacks and malformed semantic updates.
- Membership reviews and revocation help contain inappropriate access.
- Encryption helps protect workspace confidentiality.
- Provenance and events improve investigation after suspicious changes.
Assessment boundary
ATT&CK is a threat-modeling knowledge base, not a certification program. Legra supplies controls and evidence that can be mapped to selected ATT&CK techniques during a threat-informed security assessment. The choice of relevant techniques, adversary scenarios, and residual-risk rating belongs to the buyer's security team.