Description

• Adding MITRE ATT&CK names to the Command output display.
• Moving the Command output "Show in Raw Logs" button to the bottom to accommodate the larger size of the MITRE ATT&CK names
• Created a list of mitre attack entities (mitreAttackDictionary.ts) including campaigns, datasources, groups, mitigations, software, & techniques.
  • The list is created by downloading enterprise-attack.json from Mitre's github.com/mitre/cti/ and saving it to our codebase
  • Then parsing and transforming the json with a short node script process-enterprise-attack.js
  • Could we automate this somehow? @GoldingAustin & @sang2925 ?

Testing

• Currently we are only parsing the Enterprise Techniques. There are also Mobile and ICS techniques in the github.com/mitre/cti/ v12 codebase. Should we add those too?

Screenshots