Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add simulated mitigations functionality #326

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

peterhgombos
Copy link
Contributor

By choosing a mitigation in the new mitigation menu, you can delete edges in the current mitigation. Then, doing path finding or using the pre built queries will disregard this edge. This can allow you to check what happens if you remove some edges in your environment, for instance group memberships.

This functionality makes the Adversary Resilience Methodology (https://posts.specterops.io/introducing-the-adversary-resilience-methodology-part-one-e38e06ffd604) easier to perform, as you no longer need to perform destructive actions on your database in order to find what a change does in your environment.

I'm not sure if "Mitigations" is a descriptive enough term, but I couldn't think of anything else. Open to suggestions here.

Things missing:

  • Persisting number of added mitigations on reboots.
  • Adding a few more pre-built queries
  • Exhaustive testing of the pre-built queries
  • Documentation

By choosing a mitigation in the new mitigation menu, you can delete
edges in the current mitigation. Then, doing path finding or using the
pre built queries will disregard this edge. This can allow you to check
what happens if you remove some edges in your environment, for instance
group memberships.
@cnotin
Copy link
Contributor

cnotin commented Apr 30, 2020

Very good idea! What I do currently is that I backup the db and delete edges just to see, then restore. But that would be way more convenient!

@peterhgombos
Copy link
Contributor Author

Now also remembering how many mitigations has been added. :)

Copy link

@byt3n33dl3 byt3n33dl3 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Damn, The Graph was Demo****

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants