mitre-attack / mitre-attack/attack-stix-data
mobile-attack-11.1.json - a record missing "description" and "kill_chain_phases
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 671
- Forks
- 145
- PR merge metrics
- No merged PRs in 30d
Description
Mobile-Attack object: missing "description" property (as shown below) and "kill_chain_phases" list is empty:
{
"x_mitre_domains": [
"mobile-attack"
],
"object_marking_refs": [],
"id": "attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799",
"type": "attack-pattern",
"created": "2017-10-25T14:48:30.462Z",
"revoked": true,
"external_references": [
{
"source_name": "mitre-mobile-attack",
"url": "https://attack.mitre.org/techniques/T1425",
"external_id": "T1425"
}
],
"modified": "2018-10-17T01:05:10.699Z",
"name": "Insecure Third-Party Libraries",
"kill_chain_phases": [],
"x_mitre_version": "1.0",
"x_mitre_data_sources": [],
"spec_version": "2.1",
"x_mitre_attack_spec_version": "2.1.0"
},
Added details. Actually, there are 14 of them in 'Mobile-Attack' missing 'description' field:
"attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799"
"attack-pattern--1f96d624-8409-4472-ad8a-30618ee6b2e2"
"attack-pattern--45dcbc83-4abc-4de1-b643-e528d1e9df09"
"attack-pattern--51aedbd6-2837-4d15-aeb0-cb09f2bf22ac"
"attack-pattern--6b846ad0-cc20-4db6-aa34-91561397c5e2"
"attack-pattern--831e3269-da49-48ac-94dc-948008e8fd16"
"attack-pattern--a21a6a79-f9a1-4c87-aed9-ba2d79536881"
"attack-pattern--a9cab8f6-4c94-4c9b-9e7d-9d863ff53431"
"attack-pattern--b765efd1-02e6-4e67-aebf-0fef5c37e54b"
"attack-pattern--b928b94a-4966-4e2a-9e61-36505b896ebc"
"attack-pattern--c91c304a-975d-4501-9789-0db1c57afd3f"
"attack-pattern--e30cc912-7ea1-4683-9219-543b86cbdec9"
"attack-pattern--f296fc9c-2ff5-43ee-941e-6b49c438270a"
"attack-pattern--f9e4f526-ac9d-4df5-8949-833a82a1d2df"
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with mobile-attack-11.1.json and inspect the 14 listed attack-pattern objects, beginning with attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799. Compare the records with the referenced MITRE ATT&CK technique pages or source data to determine the missing descriptions and appropriate kill_chain_phases; done means all 14 objects contain the correct values and remain valid STIX data.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- json
- Domain
- data, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100