Cybersecurity-Projects/PROJECTS/advanced/honeypot-network/migrations/010_mitre.sql

24 lines
739 B
SQL

-- ©AngelaMos | 2026
-- 010_mitre.sql
-- +goose Up
CREATE TABLE mitre_detections (
id BIGSERIAL PRIMARY KEY,
session_id TEXT NOT NULL,
technique_id TEXT NOT NULL,
tactic TEXT NOT NULL,
confidence INTEGER NOT NULL DEFAULT 50,
source_ip TEXT NOT NULL,
service_type service_type NOT NULL,
evidence TEXT,
detected_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
);
CREATE INDEX idx_mitre_technique ON mitre_detections (technique_id);
CREATE INDEX idx_mitre_tactic ON mitre_detections (tactic);
CREATE INDEX idx_mitre_session ON mitre_detections (session_id);
CREATE INDEX idx_mitre_detected ON mitre_detections (detected_at DESC);
-- +goose Down
DROP TABLE IF EXISTS mitre_detections;