Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Type column is limited and might work better if mapped to Mitre #46

Open
PeterM1981 opened this issue Oct 17, 2020 · 1 comment
Open
Labels
enhancement New feature or request

Comments

@PeterM1981
Copy link

Currently the "Type" column on the timeline is very limiting. I suggest 2 possible improvements:

  1. The values in the type column are customizable, with a separate config file that could be edited to allow this.

  2. The "Type" column be renamed to "Technique" and the selection matching Mitre with these options:

  • Initial Access
  • Execution
  • Persistence
  • Privilege Escalation
  • Defense Evasion
  • Credential Access
  • Discovery
  • Lateral Movement
  • Collection
  • Command and Control
  • Exfiltration
  • Impact

A second column could then be added called "ID", the selection in this drop down would be dependent on what had been selected for the technique, for example if "Initial Access" had been selected in the Technique column, then the list of ID's from here: https://attack.mitre.org/tactics/TA0001/ would be available in the ID column.

Mitre doesn't change that often but an API connection to the attack matrix would be best for keeping these up to date (i don't know if they offer that). either that or maintained by the devoted Aurora community :-)

@cyb3rfox cyb3rfox added the enhancement New feature or request label Oct 31, 2020
@cyb3rfox
Copy link
Owner

That makes sense but needs some reworking. I think the best way to go is to allow the user to edit the options available in these dropdowns. I'll come up with something

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants