MITRE ATT&CKcon 2.0: Tracking and Measuring ATT&CK Coverage with ATTACK2Jira (Lightning Talk); Mauricio Velazco
0 likes692 views
The document outlines the development of Attack2Jira, a tool designed to track and measure ATT&CK coverage while leveraging Jira's API. It allows for management of ATT&CK techniques as entities and includes features for collaboration, reporting, and automating the setup of Jira projects. The tool creates custom fields and issues for each ATT&CK technique to facilitate tracking and maturity assessment.
Related topics:1 of 6
Downloaded 60 times
More Related Content
What's hot (19)
Ad
Similar to MITRE ATT&CKcon 2.0: Tracking and Measuring ATT&CK Coverage with ATTACK2Jira (Lightning Talk); Mauricio Velazco (9)
Ad
More from MITRE - ATT&CKcon (20)
Recently uploaded (20)
MITRE ATT&CKcon 2.0: Tracking and Measuring ATT&CK Coverage with ATTACK2Jira (Lightning Talk); Mauricio Velazco
- 1. Tracking & Measuring ATT&CK coverage with attack2jira Mauricio Velazco @mvelazco https://github.com/mvelazc0/
- 2. Requirements ✘ Manage ATT&CK techniques as entities ✘ Track state/maturity over time ✘ Interface that allows collaboration: log work, attach documentation, comments, etc. ✘ Basic reporting
- 3. Attack2jira ✘ Leverages JIRA’s Api and Roberto’s attackcti library (https://github.com/hunters-forge/ATTACK-Python-Client) ✘ Automates the process of setting up a JIRA project that can be used to track and measure ATT&CK coverage: ✘ Creates a JIRA Project ✘ Creates custom fields: url, tactic & maturity. ✘ Hides unnecessary fields ✘ Creates JIRA issues for each ATT&CK technique
- 4. Demo 1
- 5. Demo 2
- 6. Tracking & Measuring ATT&CK coverage with attack2jira Mauricio Velazco @mvelazco https://github.com/mvelazc0/ https://github.com/mvelazc0/attack2jira