v1.0.3

Version 1.0.3 - TAXII 2.1 Envelope Resource Fix

This release fixes a critical TAXII 2.1 specification compliance issue related to the Envelope resource structure.

Changes:

• Fixed incorrect key name in Envelope resource endpoints:
  • Changed items to objects to align with TAXII 2.1 specification
  • Affects all endpoints returning Envelope resources

Breaking Change Notice: This update modifies the response structure of all Envelope resource endpoints. Clients expecting the non-compliant items key will need to update their implementations to use the spec-compliant objects key.

We recommend all users upgrade to this version to maintain compatibility with other TAXII 2.1 implementations. This change ensures proper interoperability with other TAXII 2.1 clients and servers.

For more details on the Envelope resource structure, please refer to the TAXII 2.1 Specification.

v1.0.2

Version 1.0.2 - TAXII 2.1 Compliance Hotfix

This release introduces several key fixes and improvements to enhance our API's compliance with the TAXII 2.1 specification and improve overall consistency.

Changes:

• Fixed the Discovery Endpoint to return API root paths with a leading '/'.
• Corrected the Get API Root Information Endpoint to return versions as an array of strings instead of a single string.
• Implemented consistent snake_case naming convention for all API properties:
  • maxContentLength is now max_content_length
  • canRead is now can_read
  • canWrite is now can_write

This update significantly improves our API's adherence to the TAXII 2.1 specification and provides a more consistent interface for our users. While these changes enhance the API's functionality and consistency, they do not introduce any breaking changes. Users of the API are encouraged to update to this version to benefit from these improvements.

v1.0.1

Version 1.0.1 - Content-Type Header Hotfix

This release introduces a hotfix that resolves an issue with the content-type header in our REST API responses.

Changes:

• Fixed a bug where the content-type header was being incorrectly set on all outgoing HTTP responses.

This patch ensures that the API now correctly sets the content-type header, improving compatibility and adherence to TAXII 2.1 specification. Users of the API should experience no breaking changes and are encouraged to update to this version.

v1.0.0

We are excited to announce the release of version 1.0.0 of the ATT&CK Workbench TAXII 2.1 API Server. This API provides access to the MITRE ATT&CK knowledge base using the TAXII 2.1 specification.

Key features:

• Retrieve STIX 2.1 representations of ATT&CK techniques, groups, software, and other objects
• Browse and search ATT&CK content using TAXII 2.1 endpoints
• Access the latest ATT&CK content in a machine-readable format

The API is now live and accessible at: https://attack-taxii.mitre.org/

For more information and API documentation, please visit the ATT&CK Workbench TAXII 2.1 API Server page.

We appreciate your support and feedback. If you have any questions or encounter any issues, please let us know.

Thank you,
The MITRE ATT&CK Team