Security knowledge graph edges

The relationships between ATT&CK, CWE and CAPEC objects as one edge list — source, relation, destination — ready for graph queries and traversal.

Table: demo.security.security_graph_edges
Source: Opteryx table built from MITRE ATT&CK, CWE and CAPEC
Rows
Updated

Query it in Studio Use the OData API

Preview

The first ten rows

Live from the table, no sign-in needed.

SELECT src_type, src_id, relation, dst_type, dst_id, source_corpus
  FROM demo.security.security_graph_edges
 LIMIT 10

Example questions

Ask it something

Run any of these here, or open it in Studio to change the SQL. Studio is free to start: 100 queries a day.

What kinds of relationship does the graph hold?

SELECT src_type, relation, dst_type, COUNT(*) AS edges
  FROM demo.security.security_graph_edges
 GROUP BY src_type, relation, dst_type
 ORDER BY edges DESC
 LIMIT 10

Edit in Studio

What does the Frankenstein campaign (C0001) connect to?

SELECT relation, dst_type, dst_id
  FROM demo.security.security_graph_edges
 WHERE src_id = 'C0001'
 ORDER BY dst_type, dst_id

Edit in Studio

Schema

Columns

Column	Type
src_type	VARCHAR
src_id	VARCHAR
relation	VARCHAR
dst_type	VARCHAR
dst_id	VARCHAR
view_id	INT64
source_corpus	VARCHAR