mitre-attack / mitre-attack/attack-navigator
Feature request: Adding a platform attribute per technique to enable coloring when using filters.
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 2.5k
- Forks
- 715
- Avg merge
- 7h 33m
- Merged PRs (30d)
- 4
Description
Technique T1531 (Account Access Removal) is a technique that applies to platforms: ['windows', 'mac', 'linux'].
At my workplace we have multiple platforms available, and we have different detection results on each platform.
For this example, let's imagine I have coverage for T1531 on platforms ['windows', 'linux'] but not for mac. I would like to be able to set a platform attribute (a list of supported platforms) on technique level, that will be respected when using filtering in MITRE navigator.
If I give the technique a score, it will be colored. But if I would like to see my MITRE threat coverage for only the Mac platform, it would still be colored since there is no attribute to check this (?).
See image below for example:
Currently I am using one .json file per platform to get around this.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file or test is identified in the issue. Start by tracing how technique scores, platform data, and filtering are represented in the Navigator, then inspect the existing JSON annotation flow. Done means a technique can carry supported platforms and platform filtering colors it only when the selected platform applies.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100