Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[UX] Add links to the MITRE website to the tags in finding view flyout panel #837

Open
2 tasks
xeniatup opened this issue Dec 9, 2023 · 0 comments
Open
2 tasks
Assignees

Comments

@xeniatup
Copy link

xeniatup commented Dec 9, 2023

#827

This issue covers the improvements to the links from findings flyout to the MITRE website to provide user with additional information of the potential attack.

  • 1. Add links to the MITRE pages to the finding view flyout
  • 2. Provide additional links to the tactics in addition to the mitigation techniques.

1. To allow user to drill down to the description of identified threat we need to add a link to the corresponding page on the MITRE website from a finding view flyout panel (similar to the detection rule view flyout).

The detection rule view for the reference:
image (2)

The current view of the finding flyout:

Screenshot 2023-12-08 at 3 38 46 PM

2. Provide additional links to the tactics in addition to the mitigation techniques.

Currently we're providing the links to the specific mitigation techniques. It would be good for additional context to also identify the tags for the tactics (e.g. attack.exfiltration pointing to https://attack.mitre.org/tactics/TA0010/ ) and add the links to those.
The example below shows one tag being linked, and another one is missing the link.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants