Mapping of CERT Insider Threat Behaviors to MITRE ATT&CK Techniques

A mapping of insider threat behaviors documented by the CERT Division to corresponding techniques in the MITRE ATT&CK framework. The dataset is a 5.5 KB Excel file authored by Adel Alshamrani and last updated on June 2, 2026. It is shared under a CC-BY-4.0 license on the figshare platform.

Use Cases

• Mapping insider threat behaviors to ATT&CK techniques based on the described relationship.
• Training threat detection models based on the behavioral mapping.
• Validating security controls against known insider threat patterns based on the mapping.
• Developing educational or training materials on insider threat techniques.

Strengths

• Dataset is small (5.5 KB), facilitating quick download and inspection.
• Explicitly maps two established cybersecurity frameworks (CERT and MITRE ATT&CK).
• Has a clear, permissive license (CC-BY-4.0).

Limitations

• Row count is unknown, which may limit suitability assessment.
• Column-level documentation is absent; field semantics must be inferred after download.
• Description metadata is limited; actual data quality requires manual inspection after download.

Provenance

Source

Author: Adel Alshamrani. Platform: figshare.

Collection Method

Likely a manual or analytical mapping of behavioral descriptions to a structured framework.

Freshness

Last updated 2026-06-02 17:27:30; freshness should be verified.