mitre-attack / mitre-attack/attack-navigator

Identify overlapping TTPs when multiple groups are selected (intersection weight)

Open
#150 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement icebox Points: 8 timescale/long-term
Dominant language
TypeScript
Stars
2.5k
Forks
715
Avg merge
7h 33m
Merged PRs (30d)
4

Description

When selecting multiple threat groups from the multi-select dropdown it would be helpful if the TTP cell selected showed how many threat groups from the selection use that particular TTP.

For example, if a user selects 5 threat groups and a particular TTP is used by 3 of those it would be helpful to identify for that TTP that 3 groups use this. Essentially identifying the intersection weight of a TTP across threat groups.

This helps prioritize defenses since we can identify a set of threat groups we want to focus our defenses against and the tool will show us which TTPs are more commonly used by that set of groups.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are named. Start at the multi-select threat-group dropdown and the TTP cell rendering, then trace how selected groups and their TTPs are represented. Done means each displayed TTP identifies how many selected groups use it, including the example of 3 out of 5 groups.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.