Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Apply the right platform & architecture when generating a scenario from OCTI  #1713

Closed
jborozco opened this issue Oct 21, 2024 · 0 comments · Fixed by #2003
Closed

Apply the right platform & architecture when generating a scenario from OCTI  #1713

jborozco opened this issue Oct 21, 2024 · 0 comments · Fixed by #2003
Assignees
@savacano28 @guillaumejparis @isselparra @jborozco
Labels
feature use for describing a new feature to develop solved The issue has been solved
Milestone
Release 1.10.0

Comments

@jborozco
Copy link

jborozco commented Oct 21, 2024 •
edited by RomuDeuxfois
Loading

Use case

  • When I create a simulation based on a report that was targeting windows, I want my simulation to only have injects for windows
  • When I have a TTP that is not covered for a platform I want to be aware that we couldn't leverage all phases
  • When I have more that one platform in my report I want my simulation simulate both by default
  • When I have an architecture specified in my report I want only injects targrting this architecture to be populated

Current Workaround

Rework manually my list of injects

Proposed Solution

OpenCTI Side:

  • Add in the form two new selectfields: platforms (multiple) & architecture (single)
  • Can be optional

OpenBAS Side:

  • Filter the injects by platform & architecture based on OpenCTI form
  • Have a way to alert that some ttp were not covered
@jborozco jborozco added feature use for describing a new feature to develop needs triage use to identify issue needing triage from Filigran Product team labels Oct 21, 2024
@jborozco jborozco added this to the Release 1.9.0 milestone Oct 21, 2024
@jborozco jborozco self-assigned this Oct 21, 2024
@jborozco jborozco removed the needs triage use to identify issue needing triage from Filigran Product team label Oct 21, 2024
@jborozco jborozco changed the title Apply the right platform injects when creating a simulation from a report Apply the right platform & architecture when genrating a scenario from OCTI  Oct 22, 2024
@RomuDeuxfois RomuDeuxfois self-assigned this Oct 23, 2024
@savacano28 savacano28 self-assigned this Oct 23, 2024
@labo-flg labo-flg mentioned this issue Oct 29, 2024
Closed
@RomuDeuxfois RomuDeuxfois changed the title Apply the right platform & architecture when genrating a scenario from OCTI  Apply the right platform & architecture when generating a scenario from OCTI  Oct 29, 2024
@RomuDeuxfois RomuDeuxfois removed their assignment Nov 5, 2024
@jborozco jborozco modified the milestones: Release 1.9.0, Release 1.10.0 Nov 8, 2024
@jborozco jborozco self-assigned this Nov 18, 2024
@savacano28 savacano28 mentioned this issue Nov 21, 2024
Closed
5 tasks
@savacano28 savacano28 self-assigned this Nov 25, 2024
This was referenced Nov 25, 2024
Merged
Merged
@labo-flg labo-flg mentioned this issue Nov 27, 2024
Open
@savacano28 savacano28 mentioned this issue Dec 6, 2024
Merged
5 tasks
savacano28 added a commit that referenced this issue Dec 12, 2024
@savacano28
[backend] Apply the right platform & architecture when generating a s…
321a6ca 
…cenario from OCTI (#1713)
@RomuDeuxfois RomuDeuxfois added the solved The issue has been solved label Dec 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@savacano28 savacano28

@guillaumejparis guillaumejparis

@isselparra isselparra

@jborozco jborozco

Labels
feature use for describing a new feature to develop solved The issue has been solved
Projects
None yet
Milestone
Release 1.10.0
5 participants
@savacano28 @guillaumejparis @isselparra @jborozco @RomuDeuxfois