Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change flow of ATT&CK Configuration #1009

Closed
mssalvatore opened this issue Mar 1, 2021 · 1 comment
Closed

Change flow of ATT&CK Configuration #1009

mssalvatore opened this issue Mar 1, 2021 · 1 comment
Labels
Enhancement Issue that describes an enhancement to a current feature. MITRE ATT&CK UI User Interface

Comments

@mssalvatore
Copy link
Collaborator

This issue is a follow up to #1006

Currently, when you submit an ATT&CK configuration in the web UI, the flow is:

  1. ATT&CK configuration is submitted to the back-end.
  2. The back-end converts the ATT&CK configuration into a regular configuration and applies the new configuration.
  3. The front-end pulls the new, regular configuration from the back-end.

The ATT&CK configuration does not contain enough information for the front-end to simply determine whether or not it is safe. Therefore, the front-end relies on the back-end to translate the ATT&CK config into a regular config before it can evaluate safety. The front-end can then only warn the user, not prevent submission as in #1000.

Ideally, the modal dialog shown when unsafe ATT&CK configurations are submitted would be identical to when regular configurations were submitted. To resolve this

  1. Create a new endpoint on the back-end that translates an ATT&CK config into a regular configuration. Return the regular configuration to the caller
  2. Modify the front-end to call the new endpoint
  3. In the front-end, verify that the config returned from the new endpoint is safe. Show the appropriate modal dialog.
  4. If the config is safe or the user has acknowledged the risk, submit the new config to the backend.
@mssalvatore mssalvatore added Enhancement Issue that describes an enhancement to a current feature. UI User Interface labels Mar 1, 2021
@VakarisZ
Copy link
Contributor

ATT&CK report is getting removed in #2440

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement Issue that describes an enhancement to a current feature. MITRE ATT&CK UI User Interface
Projects
None yet
Development

No branches or pull requests

2 participants