Download as PDF, PPTX
Uploaded byMauricio Velazco
ATT&CKcon 2.0 2019 - Tracking and measuring your ATT&CK coverage with ATT&CK2Jira
Attack2jira is a tool that leverages JIRA's API and the ATTACK-Python-Client library to automate the process of setting up a JIRA project for tracking and measuring coverage of ATT&CK techniques. It creates a JIRA project with custom fields for URLs, tactics, and maturity levels. Then it creates a JIRA issue for each ATT&CK technique to interface collaboration on work logging, documentation, and comments while providing basic reporting.
More Related Content
Similar to ATT&CKcon 2.0 2019 - Tracking and measuring your ATT&CK coverage with ATT&CK2Jira
ATT&CKcon 2.0 2019 - Tracking and measuring your ATT&CK coverage with ATT&CK2Jira
- 1. Tracking & Measuring ATT&CK coverage with attack2jira MauricioVelazco @mvelazco https://github.com/mvelazc0/
- 2. Requirements ✘ Manage ATT&CK techniquesas entities ✘ Track state/maturity over time ✘ Interface that allows collaboration: log work, attach documentation, comments, etc. ✘ Basic reporting
- 3. Attack2jira ✘ Leverages JIRA’sApi and Roberto’s attackcti library (https://github.com/hunters-forge/ATTACK-Python-Client) ✘ Automates the process of setting up a JIRA project that can be used to track and measure ATT&CK coverage: ✘ Creates a JIRA Project ✘ Creates custom fields: url, tactic & maturity. ✘ Hides unnecessary fields ✘ Creates JIRA issues for each ATT&CK technique
- 4.
- 5.
- 6. Tracking & Measuring ATT&CK coverage with attack2jira MauricioVelazco @mvelazco https://github.com/mvelazc0/ https://github.com/mvelazc0/attack2jira https://attack.atlassian.net