Initial scaffold: .gitignore, config, requirements, data seeds, directory structure

data/mitre_attack.json

@@ -0,0 +1,22 @@
+{
+  "version": "15.1",
+  "sha256": "placeholder_will_be_updated_on_first_download",
+  "source": "https://raw.githubusercontent.com/mitre/cti/master/enterprise-attack/enterprise-attack.json",
+  "tactics": [
+    {"id": "TA0001", "name": "Initial Access"},
+    {"id": "TA0002", "name": "Execution"},
+    {"id": "TA0003", "name": "Persistence"},
+    {"id": "TA0004", "name": "Privilege Escalation"},
+    {"id": "TA0005", "name": "Defense Evasion"},
+    {"id": "TA0006", "name": "Credential Access"},
+    {"id": "TA0007", "name": "Discovery"},
+    {"id": "TA0008", "name": "Lateral Movement"},
+    {"id": "TA0009", "name": "Collection"},
+    {"id": "TA0010", "name": "Exfiltration"},
+    {"id": "TA0011", "name": "Command and Control"},
+    {"id": "TA0040", "name": "Impact"},
+    {"id": "TA0042", "name": "Resource Development"},
+    {"id": "TA0043", "name": "Reconnaissance"}
+  ],
+  "techniques": []
+}