Concepts

Concepts that will help flow manager customers get the most out of their Attack Flow databases.

  less than a minute  

To use and get the most out of Flow Manager, it’s helpful to understand a few key technologies.

  • Knowledge Graphs - Provides a brief introduction to graphs and the specific type used by Flow Builder
  • Attack Flows - Provides basic definitions of attack flows and their conceptual use.
  • Flow Builder - Provides a detailed walk through for craeting flows in the FLow Builder V1 webapp produced by the Mitre Engiunity Center for Threat Informed Defense (CTID).
  • SPARQL - SPARQL is a query language for graphs. Flow Builder uses SPARQL as the primary way to retrieve flow data from the graph database. This tutorial provides several useful query examples covering key concepts.
  • SPARQL Create SPARQL can also be used to create flows. This quick example will show you how.
Knowledge Graphs

Get some basic information about what knowledge graphs are and how to use them.

ATTACK FLOW

The basics of what Attack Flow is and how it can be used.

Flow Builder V1

How to create a flow in json-schema format using flow builder version 1 that can then be uploaded to Flow Manager.

SPARQL

How to write the SPARQL queries that are important for using Flow Manager.

SPARQL CREATE

How to create flows using SPARQL queries.

SPARQL UPDATE

How to update flows using SPARQL queries.


Last modified December 7, 2022: updates, primarily to the Getting Started index (eb50eb7)