Skip to content
This repository has been archived by the owner on Dec 11, 2023. It is now read-only.

CSV techniques for mitigations, groups and software #23

Conversation

emmanvg
Copy link
Contributor

@emmanvg emmanvg commented Apr 27, 2020

Generates CSV data for all Groups (GXXXX) and Mitigations (MXXXX) objects matched against the ATT&CK ID (TXXXX) via Relationships. All the content is sorted by the Technique ID first, followed by the Group or Mitigation ID.

In this script the Technique ID is the primary column and it is performed to the complete data set but it might contain design elements relevant to mitre-attack/attack-website#135

@isaisabel isaisabel self-requested a review April 27, 2020 12:26
Copy link
Contributor

@isaisabel isaisabel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a solid script. I added a few inline comments, mostly just documentation-level stuff. Additional thoughts:

  • Would it be difficult to add a "software" mapping (operation) option? It seems like it should be almost identical to the do_groups functionality. This would be especially easy if do_mitigations and do_groups were refactored into a single function as proposed in the inline review.
  • Should target develop, not master. We do staged releases on this repo.
  • Addition of this script should also be documented in the changelog. See the raw develop changelog for a formatting example.

scripts/README.md Outdated Show resolved Hide resolved
scripts/filter_techniques_by_category.py Outdated Show resolved Hide resolved
scripts/filter_techniques_by_category.py Outdated Show resolved Hide resolved
scripts/filter_techniques_by_category.py Outdated Show resolved Hide resolved
@emmanvg emmanvg changed the base branch from master to develop April 27, 2020 17:35
…mapping`

add support to for `software` operation, fix issue not allowing mobile-attack operations
@emmanvg
Copy link
Contributor Author

emmanvg commented Apr 29, 2020

@isaisabel, let me know if I missed anything. Hopefully all your suggestions have been incorporated.

@emmanvg emmanvg changed the title CSV techniques for mitigations and groups CSV techniques for mitigations, groups and software Apr 29, 2020
scripts/technique_mappings_to_csv.py Outdated Show resolved Hide resolved
Add `tqdm` module to provide estimate of procedure completion
@isaisabel isaisabel merged commit dc7a8a9 into mitre-attack:develop May 1, 2020
@emmanvg emmanvg deleted the csv-techniques-for-mitigations-and-groups branch May 1, 2020 14:32
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants