TRAM Configuration

TRAM’s configuration file is located in the conf/ directory.

The YAML configuration file contains all the configuration TRAM requires to boot up. An example configuration file is below:

host: 0.0.0.0
port: 9999
taxi-local: taxii-server 
build: True
json_file: enterprise-attack.json

A few key things to note:

• Host: the IP address TRAM is available at
• Port: the port you serve TRAM on
• Taxii-local:
  • (default) Taxii-server: sets the config to build the database from TAXII
  • Json-local: will use a
• Build: whether (True) or not (False) the database will be built
• Json_file: the name of the json to locally build from

On the first run of TRAM, it will need to build the database.

By default, TRAM will reach out to the ATT&CK TAXII server to get the latest ATT&CK data from there. If you try running TRAM behind a proxy, get an SSL error, or do not want to reach out to TAXII, you can build the database from a local JSON file.

1. (to do this ensure there is no tram.db file in the tram/database directory)
2. Download the JSON from here: https://raw.githubusercontent.com/mitre/cti/master/enterprise-attack/enterprise-attack.json
3. Save the JSON in the tram/models directory
4. Edit the tram/conf/config.yaml to
   1. taxii-local: local-json
   2. build: True
5. run the program python tram.py
6. the database will then be built using the JSON