authentication token not provided.

[morzen]

Hello,

i tried to follow this instruction but I am always met by this error:

morzen@kali  ~  npm config set @mitre-attack:registry https://npm.pkg.github.com     
morzen@kali  ~  npm install @mitre-attack/attack-data-model                          
npm ERR! code E401
npm ERR! 401 Unauthorized - GET https://npm.pkg.github.com/@mitre-attack%2fattack-data-model - authentication token not provided

npm ERR! A complete log of this run can be found in:
npm ERR!     /home/morzen/.npm/_logs/2025-01-27T15_55_28_418Z-debug-0.log
 ✘ morzen@kali  ~  sudo npm install @mitre-attack/attack-data-model                     
npm ERR! code E401
npm ERR! 401 Unauthorized - GET https://npm.pkg.github.com/@mitre-attack%2fattack-data-model - authentication token not provided

npm ERR! A complete log of this run can be found in:
npm ERR!     /root/.npm/_logs/2025-01-27T15_55_34_848Z-debug-0.log
 ✘ morzen@kali  ~  sudo npm config set @mitre-attack:registry https://npm.pkg.github.com
 morzen@kali  ~  sudo npm install @mitre-attack/attack-data-model                     
npm ERR! code E401
npm ERR! 401 Unauthorized - GET https://npm.pkg.github.com/@mitre-attack%2fattack-data-model - authentication token not provided

npm ERR! A complete log of this run can be found in:
npm ERR!     /root/.npm/_logs/2025-01-27T15_55_47_121Z-debug-0.log
 ✘ morzen@kali  ~  

I do not find your database easy to use on the developer side, the excel document is not easily linked with different types of data for example technique is separated from software which is separated from groups etc the only link I found was that at least techniques and tactics were showing on the technique page.

Then TAXII and STIX also have next to no documentation making their use near impossible, it's the same for the Python library. The schema here though looks great https://mitre-attack.github.io/attack-data-model/docs/sdo/group.schema but I am unable to use it.

To tell you how annoying it is to try to get data out of MITRE ATT&CK I had to create a scrapping program to get the data I wished linked with the profile I wished. But I am not going to lie it is starting to get annoying to maintain so it would be nice to be able to download the data from the source in a structured manner.
Would help tremendously for my PhD.

kind regards,

[jondricek]

Thank you for providing feedback on the installation process. You are correct that we missed a required step, which is that in order to install from the GitHub Package Registry, you also need to set a GitHub Personal Access Token in your ~/.npmrc file. I have just updated the Readme to include those details here: https://github.com/mitre-attack/attack-data-model?tab=readme-ov-file#installation

STIX is a format that we use, but do not maintain the actual definition of. It has extensive documentation on its own website here: https://oasis-open.github.io/cti-documentation/stix/intro.html. The Resources page on their site has the in depth details you are likely looking for, both for STIX and TAXII.

Thank you for your feedback on our python library as well. We do strive to continue to improve the documentation, and pull requests are always welcome. While we use the library ourselves, it does need to be cleaned up a bit, and your comment here is a reminder of that. I highly recommend you check out the examples folder in the python library which has many examples that you can use to tie different pieces of information together: https://github.com/mitre-attack/mitreattack-python/tree/master/examples

Hopefully this answers some of your questions, and best of luck on your PhD!