MAEC Compatibility

The MAEC Compatibility Program provides for a "Capability" — that is, a specific function or functions of a tool, service, or repository — to be reviewed and registered as officially "MAEC-Compatible," thereby assisting organizations in understanding is using the MAEC Language and how it might suit their needs in discussing, analyzing, detecting, or preventing malware.

MAEC-Compatible tools, services, and repositories supporting one or more of the three functionalities must meet the appropriate requirements identified for those roles. Please review the complete set of requirements to fully understand MAEC Compatibility.

Content Creation

A Tool or Service that creates or aids in the process of creating new MAEC files, including those that consolidate existing MAEC Output Format documents into a single file.

The following sub-types of the Content Creation functionality are defined:

  • Static Analysis Content Creation: a Tool or Service that performs some static analysis of one or more input Malware Instances and outputs the results in a MAEC Output Format document.
  • Dynamic Analysis Content Creation: a Tool or Service that performs some dynamic analysis (i.e., instrumented execution) of an input Malware Instance and outputs the results in a MAEC Output Format document.
  • Authoring Content Creation: a Tool or Service that supports the manual creation and editing of MAEC Output Format documents.
Content Storage

A Repository of MAEC Content made available to the community (free or pay).

Content Consumption

A Tool or Service that accepts MAEC Output Format documents as input and either displays their content to the User or uses them to perform some action (remediation, SIM, etc.).

See the MAEC Compatibility Program or email maec@mitre.org for information on how to register your tool(s), service(s), or repository(ies) as MAEC-Compatible.

 

Back to top

Page Last Updated: April 18, 2014