# Data licensing and attribution

This notice separates original HECAVEX material from third-party records. A file being publicly reachable does not by itself grant reuse rights beyond the terms below.

## HECAVEX original data

Original HECAVEX summaries, classifications, evidence labels, case-graph structure, analyst guidance and other curated fields in these paths are licensed under [Creative Commons Attribution 4.0 International](https://creativecommons.org/licenses/by/4.0/), unless an individual record states otherwise:

- `data/atlas/`
- `data/pivots/`
- `data/osint/`
- `data/attack/intelligence/reviewed-evidence.json`
- `data/attack/operations/`
- `data/attack/detections/`
- `data/attack/governance/`
- `data/catalogue.json` and `data/public-manifest.json`

Reuse should credit “HECAVEX Labs”, link to `https://labs.hecavex.com/`, identify material changes and retain source, review-date and limitation fields.

## MITRE ATT&CK material

`data/attack/catalogue/enterprise.json` and `data/attack/intelligence/official-actor-procedures.json` are generated from MITRE ATT&CK. MITRE remains authoritative, and those records remain subject to the [MITRE ATT&CK Terms of Use](https://attack.mitre.org/resources/terms-of-use/). HECAVEX does not relicense them as original HECAVEX data.

## Reviewed evidence and source material

HECAVEX-authored selection, normalization and assessment fields in reviewed evidence are covered by CC BY 4.0. Source titles, quotations, vendor or government assessments, linked publications and underlying third-party facts remain subject to their publishers' rights. A citation records provenance; it is not a redistribution grant.

## Trademarks, services and external resources

Company names, product names, logos and trademarks belong to their owners. OSINT directory inclusion does not relicense a service or endorse it. Provider access conditions, API terms and quotas can change independently of this repository.

## Software and brand

The MIT License in `LICENSE` applies to HECAVEX-authored software, not datasets or third-party material. Neither MIT nor CC BY grants rights to HECAVEX names, marks or visual identity beyond nominative attribution.

## No warranty

The software and data are provided on a best-effort basis without warranties, continuous monitoring or an operational-response SLA. Dataset limitations remain part of the reuse context.