Giter Club home page Giter Club logo

attack2jira's Introduction

attack2jira

The MITRE ATT&CK Framework is a great tool security teams can leverage to, among many other things, measure the security posture of an organization against tactics and techniques used in the wild by real threat actors.

At the time of writing, ATT&CK covers 266 Techniques across 12 Tactics. If done manually, tracking this posture's state over time can become a tedious and challenging task. Blue/Purple teams require the proper tools that allow them to efficiently tackle this challenge and focus on whats important.

attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage. No more spreadsheets !

Visit the Wiki to view the Demos. attack2jira was first presented at ATT&CKCon 2.0. For more context, read this blog post.

To allow the community to experiment with this approach, I created a Jira instance hosting the ATTACK project with attack2jira: https://attack.atlassian.net/jira/software/c/projects/ATTACK/issues/

attack2jira was designed to be used with Jira Cloud. Specifically, Jira Software.

Tested on Kali Linux 2018.4 and Windows 10 1830 under Python 3.6 and Python 3.7.

Quick Start Guide

Installation

$ git clone https://github.com/mvelazc0/attack2jira.git
$ pip3 install -r attack2jira/requirements.txt

Jira Software

Usage

Print the help menu

$ python3 attack2jira.py -h

Create the Jira ATTACK project and issues

$ python3 attack2jira.py -url https://yourjiracloud.atlassian.net -u [email protected] -a initialize

Create the Jira ATTACK project with custom project and key

$ python3 attack2jira.py -url https://yourjiracloud.atlassian.net -u [email protected] -a initialize -p 'ATTACK Coverage' -k ATT

Export an ATTACK Navigator JSON layer

$ python3 attack2jira.py -url https://yourjiracloud.atlassian.net -u [email protected] -a export

$ python3 attack2jira.py -url https://yourjiracloud.atlassian.net -u [email protected] -a export -hide

Demo

Demo1 @att&ckcon 2019

Acknoledgments

Authors

License

This project is licensed under the BSD 3-Clause License - see the LICENSE file for details

attack2jira's People

Contributors

jakbruh avatar mvelazc0 avatar ohlindoh avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

attack2jira's Issues

I can create a project using postman hititng the end points but not using ur code.

Hi there,
This project is great, ive downloaded it and have it installed but sadly I keep getting unauthorized. probably not enough permissions.
So what ive done is manually created the project using postman and I am able to do that with the correct permissions.
I dont know I am unable to run the script using the correct login and api key.
Any help?

[!] Error creating options for the datasources custom field.

Heya,

Mine crashes out at the datasources custom field, help!

[] Authenticating to https://[redacted].atlassian.net...
[!] Success!
[
] Creating the Att&ck project...
[!] Success!
[*] Creating custom fields ...
[!] Successfully created 'tactic' custom field.
[!] Successfully created 'maturity' custom field.
[!] Successfully created 'url' custom field.
[!] Successfully created 'datasources' custom field.
[!] Successfully created 'id' custom field.
[!] Error creating options for the datasources custom field.

Unfortunately if I try to rerun where it left off, it kicks another error:
[] Authenticating to ...
[!] Success!
[
] Creating the Att&ck project...
[!] Error creating Jira project. Does it already exist ?

Cheers,
Glyn.

Error creating options for the datasources custom field

Hello,

Huge fan of the project.

I am installing on Jira Software Cloud and keep tripping up on the 400 error that was picked up before.

[!] Success!
[] Creating the Att&ck project...
[!] Success!
[
] Creating custom fields ...
[!] Successfully created 'tactic' custom field.
[!] Successfully created 'maturity' custom field.
[!] Successfully created 'url' custom field.
[!] Successfully created 'datasources' custom field.
[!] Successfully created 'id' custom field.
[!] Error creating options for the datasources custom field.
....

2021-01-12 19:36:15,145:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:16,177:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/95ecc380-afe9-11e4-9b6c-751b66dd541e/ HTTP/1.1" 200 249
2021-01-12 19:36:16,189:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:17,220:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/062767bd-02d2-4b72-84ba-56caef0f8658/ HTTP/1.1" 200 235
2021-01-12 19:36:17,227:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:18,263:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/2f669986-b40b-4423-b720-4396ca6a462b/ HTTP/1.1" 200 241
2021-01-12 19:36:18,270:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:19,295:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/02c3ef24-9cd4-48f3-a99f-b74ce24f1d34/ HTTP/1.1" 200 235
2021-01-12 19:36:19,898:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/95ecc380-afe9-11e4-9b6c-751b66dd541e/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 1934657
2021-01-12 19:36:23,164:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/062767bd-02d2-4b72-84ba-56caef0f8658/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 367403
2021-01-12 19:36:25,106:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/2f669986-b40b-4423-b720-4396ca6a462b/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 201701
2021-01-12 19:36:26,506:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/02c3ef24-9cd4-48f3-a99f-b74ce24f1d34/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 174589
2021-01-12 19:36:27,345:DEBUG:Starting new HTTPS connection (1): xxxxxxxxx.atlassian.net:443
2021-01-12 19:36:27,563:DEBUG:https://xxxxxxx.atlassian.net:443 "POST //rest/globalconfig/1/customfieldoptions/customfield_10029 HTTP/1.1" 400 None

Unable to create Jira Project

Great project! Appreciate the contribution to the detection eng community.

I'm experiencing an issue where a new project is not being created with the initialize argument. This is on Cloud Jira Core (Free).

Jira API Token for <REDACTED>:
[*] Authenticating to https://<REDACTED>.atlassian.net...
[!] Success!
[*] Creating the Att&ck project...
[!] Error creating Jira project. Does it already exist ?

I can confirm that the project does not exist and no existing projects have the "ATTACK" key, nor is a project created after running this script.

Is this a known issue?

Error creating Jira issue for T1001

I am installing on Jira Software Cloud with it tripping up on the below

[*] Creating Jira issues for ATT&CK's techniques...
[!] Error creating Jira issue for T1001
{"errorMessages":[],"errors":{"customfield_10038":"Field 'customfield_10038' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10034":"Field 'customfield_10034' cannot be set.
It is not on the appropriate screen, or unknown.","customfield_10035":"Field 'customfield_10035' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10036":"Field 'customfield_10036' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10037":"Field 'customfield_10037' cannot be set. It is not on the appropriate screen, or unknown."}}

Error creating Jira issue

Hi @mvelazco and Hi @olindoverrillo,
Thank you for sharing your works. I am trying to implement this for our environment. But while creating the JIRA issue for TTPs I am getting the following error message. Are there any thoughts on how we can resolve this issue. Please let me know if you need any additional information? Thank you for your time. :)

[*] Authenticating to https://dev.atlassian.net...
[!] Success!
[*] Creating the Att&ck project...
[!] Success!
[!] Found custom fields
[*] Adding custom fields to ATTACK's default screen tab ...
[!] Done!.
[*] Hiding unnecessary fields from ATTACK's issue layout...
[!] Done.
[*] Obtaining ATT&CK's techniques...
[!] Done!
[*] Creating Jira issues for ATT&CK's techniques...
400
	[!] Error creating Jira issue for T1531

Enhance adding custom fields to screen

The current way of adding the custom fields to the Project's screens is pretty bad. Need to be more elegant and only add the custom fields where it corresponds.

Error creating Jira issue for T1001

I tried running this in a free trial version and everything went smoothly. When trying to run in on my company's instance I got the following error. Is there something custom with my company's instance that I need to look for in order to figure out what may be causing this? I am running the latest version from the master branch and have tried with multiple API keys.

[*] Creating Jira issues for ATT&CK's techniques... [!] Error creating Jira issue for T1001 {"errorMessages":[],"errors":{"customfield_10110":"Field 'customfield_10110' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10111":"Field 'customfield_10111' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10112":"Field 'customfield_10112' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10113":"Field 'customfield_10113' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10114":"Field 'customfield_10114' cannot be set. It is not on the appropriate screen, or unknown."}}

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.