Skip to content

v1.2.2

Compare
Choose a tag to compare
@debifrank debifrank released this 26 Aug 20:42
· 49 commits to main since this release
73de580
  • All APIs have been enabled.
    • This allows for full CRUD operations on the Assessments/Scenarios/Events/Templates collections.
  • New Metrics API added to enable retrieving interesting data about ETM usage.
  • APIs require API Key Authentication and Authorization.
    • Keys have permissions sets that restrict their privileges to only what is assigned to them.
    • Key management added to the Admin Dashboard UI.
  • MITRE ATT&CK implementation has been refactored to make maintaining the project much easier.
    • To update the ATT&CK data, just download the relevant ICS/Mobile/Enterprise JSON data files from the MITRE GitHub repository, delete the corresponding JSON files in ETM, and load the application.
    • When the compiled data files are not found, they will be recompiled with the new MITRE provided data files.
  • MITRE ATT&CK selection has been refactored as well.
    • Accordions were removed and have been replaced with a sliding sub-menu system.
    • This should increase usability/productivity/accuracy when selecting a technique to associate with a given event.
  • Various bugs were identified and corrected.
  • Breadcrumbs have been introduced into the three major workflows
  • Event factor info helpers now include information regarding BLS methodologies for completing a threat scenario