Skip to content

Improve Navigator Layer Usability #140

@0xC0FFEEEE

Description

@0xC0FFEEEE

As it currently stands, all platform specific techniques are annotated in the navigator layer json, regardless of whether they are 'in scope' of the DeTTECT yaml by way of applicability to the system or systems to which a data source has been mapped.

This is slightly problematic as the MITRE navigator lacks granular technique selection functionality, meaning it's not possible to quickly select techniques based on specific annotations or those with a color. The less time spent modifying the layer within navigator itself the better, so as to limit the potential for accidental changes.

This could be made easier by DeTTECT with a couple of new output options or default behaviors:

  • Don't annotate techniques for an applicable_to with a score of 0%, this way the 'select annotated' option can be used to only modify the relevent techniques (i.e. either those with coverage, or the inverse through the navigators 'invert selection' option)
  • Set the navigator score based on DeTTECT score percentage, meaning technique color can be removed in order to use the score-based gradient.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions