# Interfacing OpenSearch with Framework Mittre Attack and threat intellingence

**URL:** <https://forum.opensearch.org/t/interfacing-opensearch-with-framework-mittre-attack-and-threat-intellingence/11759>\
**Category:** General Feedback\
**Tags:** community-meeting, feature-request, alerting\
**Created:** [December 11, 2022, 1:59pm UTC](https://forum.opensearch.org/t/interfacing-opensearch-with-framework-mittre-attack-and-threat-intellingence/11759 "2022-12-11T13:59:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![oelbarnoussi](https://avatars.discourse-cdn.com/v4/letter/o/91b2a8/32.png) [@oelbarnoussi](https://forum.opensearch.org/u/oelbarnoussi)\
**Post date:** [December 11, 2022, 1:59pm UTC](https://forum.opensearch.org/t/interfacing-opensearch-with-framework-mittre-attack-and-threat-intellingence/11759/1 "2022-12-11T13:59:45Z")

</div>

Hello team,

Hope you doing good 🙂

Please, can you help me or can you share with me a documentation about the interfacing of Opensearch with the Framework Mittre Attach and feeds threat intelegent MISSP (is it possible already?)

some one’s have any documentation of the creation of use cases (pass the hash, Brute Force Attack) because I can not find it ?

Thank you in advance

---

<div class="post-metadata">

**Author:** ![cwmmoore](https://avatars.discourse-cdn.com/v4/letter/c/7ba0ec/32.png) [@cwmmoore](https://forum.opensearch.org/u/cwmmoore)\
**Post date:** [December 20, 2022, 6:49pm UTC](https://forum.opensearch.org/t/interfacing-opensearch-with-framework-mittre-attack-and-threat-intellingence/11759/2 "2022-12-20T18:49:12Z")

</div>

@oelbarnoussi Hi, thanks for the question.  
OpenSearch recently released the new Security Analytics plugin in 2.4 as an experimental feature.  
Security Analytics is a Security Information and Event Management (SIEM) system that has been developed to protect OpenSearch from external security threats and cyber attacks. It uses configurable detectors to monitor threat conditions defined by established security rules, many of which are based on a repository of adversary tactics and techniques maintained by the [MITRE ATT&CK](https://attack.mitre.org/) organization. You can find documentation about the plugin here:

> **[About Security Analytics](https://opensearch.org/docs/latest/security-analytics/index/)**
>
> About Security Analytics

I think this may address some of the questions you’ve asked here. If you have some specific questions about Security Analytics, feel free to post them here on the forum.  
Thanks,  
Chris