mitre-attack / mitre-attack/attack-navigator

Synchronize Layer Upgrade Differences with ATT&CK Changelog Types

Open
#676 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
2.5k
Forks
715
Avg merge
7h 33m
Merged PRs (30d)
4

Description

In April 2023, ATT&CK updated the types of changes it tracks (https://attack.mitre.org/resources/updates/updates-april-2023/) to break out "Changes" and "Minor Changes" into the following categories

  • Major version changes: ATT&CK objects that have a major version change. (e.g., 1.0 → 2.0)
  • Minor version changes: ATT&CK objects that have a minor version change. (e.g., 1.0 → 1.1)
  • Other version changes: ATT&CK objects that have a version change of any other kind. (e.g. 1.0 → 1.2)
  • Patches: ATT&CK objects that have been patched while keeping the version the same. (e.g., 1.0 → 1.0 but something like a typo, a URL, or some metadata was fixed)

Workbench is going to update to follow this convention soon. Navigator should follow suit.

https://github.com/center-for-threat-informed-defense/attack-workbench-frontend/issues/562

Example

This is what the Navigator looks like currently when upgrading a layer file

Image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Navigator's current layer-file upgrade flow and compare its displayed difference types with the ATT&CK April 2023 update. Read the linked Workbench issue for the related convention. Done means the upgrade view distinguishes major, minor, other, and patch changes consistently with that convention.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.