google / google/dfiq

Support Analysis Suggestions in Approaches

Open
#4 2 comments 0 reactions 1 assignee Claimed by @RyanDFIR View on GitHub
enhancement
Dominant language
Python
Stars
314
Forks
30
PR merge metrics
No merged PRs in 30d

Description

## Expected Behavior
The project should support the description of "analysis suggestions" in the approach definition file. I would propose a new subsection `suggestion` under the `view` section.

There are cases, where typical (malicious) activity has similarities from one threat actor to another. It would be helpful to integrate such hints, so that analysts can get an idea what to look for.

## Actual Behavior
Feature not included.

## Steps to Reproduce the Problem
not applicable

## Specifications

- Version: 1.0.0
- Platform: not applicable

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.