mitre-attack / mitre-attack/attack-stix-data

mobile-attack-11.1.json - a record missing "description" and "kill_chain_phases

Open
#17 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
671
Forks
145
PR merge metrics
No merged PRs in 30d

Description

Mobile-Attack object: missing "description" property (as shown below) and "kill_chain_phases" list is empty:

    {
        "x_mitre_domains": [
            "mobile-attack"
        ],
        "object_marking_refs": [],
        "id": "attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799",
        "type": "attack-pattern",
        "created": "2017-10-25T14:48:30.462Z",
        "revoked": true,
        "external_references": [
            {
                "source_name": "mitre-mobile-attack",
                "url": "https://attack.mitre.org/techniques/T1425",
                "external_id": "T1425"
            }
        ],
        "modified": "2018-10-17T01:05:10.699Z",
        "name": "Insecure Third-Party Libraries",
        "kill_chain_phases": [],
        "x_mitre_version": "1.0",
        "x_mitre_data_sources": [],
        "spec_version": "2.1",
        "x_mitre_attack_spec_version": "2.1.0"
    },

Added details. Actually, there are 14 of them in 'Mobile-Attack' missing 'description' field:
"attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799"
"attack-pattern--1f96d624-8409-4472-ad8a-30618ee6b2e2"
"attack-pattern--45dcbc83-4abc-4de1-b643-e528d1e9df09"
"attack-pattern--51aedbd6-2837-4d15-aeb0-cb09f2bf22ac"
"attack-pattern--6b846ad0-cc20-4db6-aa34-91561397c5e2"
"attack-pattern--831e3269-da49-48ac-94dc-948008e8fd16"
"attack-pattern--a21a6a79-f9a1-4c87-aed9-ba2d79536881"
"attack-pattern--a9cab8f6-4c94-4c9b-9e7d-9d863ff53431"
"attack-pattern--b765efd1-02e6-4e67-aebf-0fef5c37e54b"
"attack-pattern--b928b94a-4966-4e2a-9e61-36505b896ebc"
"attack-pattern--c91c304a-975d-4501-9789-0db1c57afd3f"
"attack-pattern--e30cc912-7ea1-4683-9219-543b86cbdec9"
"attack-pattern--f296fc9c-2ff5-43ee-941e-6b49c438270a"
"attack-pattern--f9e4f526-ac9d-4df5-8949-833a82a1d2df"

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with mobile-attack-11.1.json and inspect the 14 listed attack-pattern objects, beginning with attack-pattern--11bd699b-f2c2-4e48-bf46-fb3f8acd9799. Compare the records with the referenced MITRE ATT&CK technique pages or source data to determine the missing descriptions and appropriate kill_chain_phases; done means all 14 objects contain the correct values and remain valid STIX data.

Written by the indexing model from the issue text.

Assessment

Tech stack
json
Domain
data, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.