Skip to content

TR-3506 MITRE MAP Update#413

Merged
pyth0n1c merged 6 commits intomainfrom
TR-3506_mitre_update
Jun 10, 2025
Merged

TR-3506 MITRE MAP Update#413
pyth0n1c merged 6 commits intomainfrom
TR-3506_mitre_update

Conversation

@josehelps
Copy link
Copy Markdown
Contributor

@josehelps josehelps commented Jun 5, 2025

Updated to support latest navigator 5.1.0 also leveraging all the new features .. looks much nicer

xxx in ~/splunk/contentctl/security_content on develop ● λ poetry run contentctl report --enrichments
Successfully parsed [1730] Atomic Red Team Tests!
Performing MITRE Enrichment using the repository at external_repos/cti...Done!
   DEPLOYMENTS Progress: [100%]...Done!
       LOOKUPS Progress: [100%]...Done!
        MACROS Progress: [100%]...Done!
       STORIES Progress: [100%]...Done!
     BASELINES Progress: [100%]...Done!
INVESTIGATIONS Progress: [  0%]...Done!
  DATA_SOURCES Progress: [100%]...Done!
     PLAYBOOKS Progress: [100%]...Done!
    DETECTIONS Progress: [100%]...Done!
    DASHBOARDS Progress: [100%]...Done!
Creating GitHub Badges...
Generating coverage.json...

✅ MITRE ATT&CK Navigator layer file written to: reporting/coverage.json
📊 Coverage Summary:
   Total Detections: 1772
   Covered Techniques: 314
   Tactics with Coverage: 314

🗺️  To view the layer:
   1. Go to https://mitre-attack.github.io/attack-navigator/
   2. Click 'Open Existing Layer'
   3. Select the file: reporting/coverage.json
Reporting successfully written to 'reporting'

Uploading image.png…

@josehelps josehelps requested a review from pyth0n1c June 5, 2025 23:29
import pathlib
from typing import List, Union
from datetime import datetime
from typing import Any, Dict, List, Set, TypedDict, Union
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since Python 3.9, it is not recommended to import simple(r) types from typing like list, dict, or set. This should just be used directly. For example instead of
x:List[str]
instead use
x:list[str]

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

corrected

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I updated I updated attack_enrichment.py as well along these lines.

josehelps and others added 3 commits June 5, 2025 16:59
syntax.
Bump bugfix release in pyproject.
Remove pandas requirement, which
is not used, from pyproject.toml
name = "contentctl"

version = "5.5.3"
version = "5.5.4"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bumped patch version in prep for release.

Also, pandas dependency was removed as it is not required.

@pyth0n1c pyth0n1c merged commit b6b7fcd into main Jun 10, 2025
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants