mitre-attack / mitre-attack/attack-navigator

Support for dual-scored techniques

Open
#5 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement icebox Points: 8 seeking feedback timescale/long-term
Dominant language
TypeScript
Stars
2.5k
Forks
715
Avg merge
7h 33m
Merged PRs (30d)
4

Description

The idea of being able to associate two independent scores with a given technique was raised with an external ATT&CK user.

As an example, this would allow a user to assign both a defensive coverage score (some quantification of how confident they are in their ability to detect the technique) and an adversary-prevalence score (some quantification of how frequently a given adversary uses that technique).

Given these two scores, the technique might be color-coded with the top-left being derived from the defensive score and the bottom-right color derived from the adversary score.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points to inspect. Start by locating the existing technique scoring and color-coding paths, then define how two independent scores are stored and rendered; done should support defensive and adversary-prevalence scores with the described diagonal color treatment.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
frontend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.