The following diagram illustrates the relationships between the databases.
The directionality of the arrows indicates the directionality of the relationship. Most items are linked to one another backward and forward, exceptions being MITRE ATT&CK data.
graph TD
Incident <--> |References| C[Timeline Entry]
Incident <--> |References| Task
Alert <--> |References| Incident
subgraph Alert Database
direction BT
Alert
end
subgraph Task Database
direction BT
Task
end
subgraph Incident Database
direction BT
Incident
end
subgraph Timeline Database
direction BT
C
end
subgraph IOC Database
direction BT
IOC
end
subgraph Asset Database
direction BT
Asset
end
subgraph Account Database
direction BT
Account
end
subgraph Tactics Database
direction BT
Tactic
end
subgraph Techniques Database
direction BT
Technique
end
C <--> |References| IOC
C <--> |References| Asset
C <--> |References| Account
C --> |References| Tactic
C --> |References| Technique