mitre-attack / mitre-attack/attack-stix-data

Kill Chain (phase_name) may not match Tactic (x_mitre_shortname)

Open
#37 1 comment 0 reactions 1 assignee View on GitHub

@ElJocko is already working on this.

Since Apr 26, 2023.

Dominant language
Python
Stars
671
Forks
145
No merged PRs in 30d

Description

In the 13.0 release, some techniques in the ICS bundle have kill_chain_phases.phase_name that don't match the x_mitre_shortname in any of the tactics in the bundle. Relevant documentation here.

For example, technique: attack-pattern--7374ab87-0782-41f8-b415-678c0950bb2a has a collection-ics kill_chain_phases.phase_name. However, there is no x-mitre-tactic with a collection-ics x_mitre_shortname.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.