Future Work

Additional OHIs

Along with the OHIs that are currently being collected, the team is always on the lookout for additional data that should be collected. The collection of additional OHIs will allow insider threat programs to become more robust and allow practitioners to see which OHIs are the most common.

Data Contributions

Contributors to the Insider Threat Knowledge Base are founders of the community’s first cross-sector, multi-organizational, community-sourced body of Insider Threat data inspired by MITRE ATT&CK®. With this knowledge base of insider threat tactics, techniques, and procedures (TTPs) as a foundation, defenders will detect, mitigate, and emulate insider actions on IT systems and stop them.

Visit our project page to contact us about contributing data.