Reuse boundary
Licensing and attribution
Software, original HECAVEX data and third-party source material have different rights. This page keeps those boundaries explicit.
Software
HECAVEX-authored software in the Labs repository is distributed under the MIT License. The licence text and copyright notice must remain with copies or substantial portions of the software.
HECAVEX original data
Original HECAVEX summaries, classifications, evidence labels, case-graph structure and analyst guidance identified in the data licensing notice are licensed under CC BY 4.0. Credit “HECAVEX Labs”, link to this property, identify changes and preserve source, review-date and limitation fields.
MITRE ATT&CK
The generated Enterprise ATT&CK catalogue and official procedure relationships remain subject to the MITRE ATT&CK Terms of Use. MITRE remains authoritative; HECAVEX does not relicense these records as original HECAVEX data.
Reviewed evidence and cited sources
HECAVEX-authored selection, normalization and assessment fields can be reused under CC BY 4.0. Source titles, quotations, vendor or government assessments and linked publications retain their publishers' rights. A citation records provenance; it is not a redistribution grant.
Trademarks and external services
Company names, product names, logos and trademarks belong to their owners. OSINT directory inclusion does not relicense or endorse a service, and provider terms or access conditions can change independently.
No warranty or endorsement
The software and data are provided on a best-effort basis without warranties, continuous monitoring or an operational-response SLA. Attribution does not imply endorsement of a derivative work. Dataset-specific limitations remain part of the reuse context.