mvelazc0 / attack2jira Goto Github PK
View Code? Open in Web Editor NEWattack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage
License: BSD 3-Clause "New" or "Revised" License
attack2jira automates the process of standing up a Jira environment that can be used to track and measure ATT&CK coverage
License: BSD 3-Clause "New" or "Revised" License
Hi @mvelazco and Hi @olindoverrillo,
Thank you for sharing your works. I am trying to implement this for our environment. But while creating the JIRA issue for TTPs I am getting the following error message. Are there any thoughts on how we can resolve this issue. Please let me know if you need any additional information? Thank you for your time. :)
[*] Authenticating to https://dev.atlassian.net...
[!] Success!
[*] Creating the Att&ck project...
[!] Success!
[!] Found custom fields
[*] Adding custom fields to ATTACK's default screen tab ...
[!] Done!.
[*] Hiding unnecessary fields from ATTACK's issue layout...
[!] Done.
[*] Obtaining ATT&CK's techniques...
[!] Done!
[*] Creating Jira issues for ATT&CK's techniques...
400
[!] Error creating Jira issue for T1531
attack2jira does not currently support Sub-technique relationships or visualizations.
Great project! Appreciate the contribution to the detection eng community.
I'm experiencing an issue where a new project is not being created with the initialize argument. This is on Cloud Jira Core (Free).
Jira API Token for <REDACTED>:
[*] Authenticating to https://<REDACTED>.atlassian.net...
[!] Success!
[*] Creating the Att&ck project...
[!] Error creating Jira project. Does it already exist ?
I can confirm that the project does not exist and no existing projects have the "ATTACK" key, nor is a project created after running this script.
Is this a known issue?
Hello,
Huge fan of the project.
I am installing on Jira Software Cloud and keep tripping up on the 400 error that was picked up before.
[!] Success!
[] Creating the Att&ck project...
[!] Success!
[] Creating custom fields ...
[!] Successfully created 'tactic' custom field.
[!] Successfully created 'maturity' custom field.
[!] Successfully created 'url' custom field.
[!] Successfully created 'datasources' custom field.
[!] Successfully created 'id' custom field.
[!] Error creating options for the datasources custom field.
....
2021-01-12 19:36:15,145:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:16,177:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/95ecc380-afe9-11e4-9b6c-751b66dd541e/ HTTP/1.1" 200 249
2021-01-12 19:36:16,189:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:17,220:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/062767bd-02d2-4b72-84ba-56caef0f8658/ HTTP/1.1" 200 235
2021-01-12 19:36:17,227:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:18,263:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/2f669986-b40b-4423-b720-4396ca6a462b/ HTTP/1.1" 200 241
2021-01-12 19:36:18,270:DEBUG:Starting new HTTPS connection (1): cti-taxii.mitre.org:443
2021-01-12 19:36:19,295:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/02c3ef24-9cd4-48f3-a99f-b74ce24f1d34/ HTTP/1.1" 200 235
2021-01-12 19:36:19,898:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/95ecc380-afe9-11e4-9b6c-751b66dd541e/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 1934657
2021-01-12 19:36:23,164:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/062767bd-02d2-4b72-84ba-56caef0f8658/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 367403
2021-01-12 19:36:25,106:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/2f669986-b40b-4423-b720-4396ca6a462b/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 201701
2021-01-12 19:36:26,506:DEBUG:https://cti-taxii.mitre.org:443 "GET /stix/collections/02c3ef24-9cd4-48f3-a99f-b74ce24f1d34/objects/?match%5Btype%5D=attack-pattern HTTP/1.1" 200 174589
2021-01-12 19:36:27,345:DEBUG:Starting new HTTPS connection (1): xxxxxxxxx.atlassian.net:443
2021-01-12 19:36:27,563:DEBUG:https://xxxxxxx.atlassian.net:443 "POST //rest/globalconfig/1/customfieldoptions/customfield_10029 HTTP/1.1" 400 None
Feature request to be able to specify the project/key for new ATT&CK projects in Jira.
I tried running this in a free trial version and everything went smoothly. When trying to run in on my company's instance I got the following error. Is there something custom with my company's instance that I need to look for in order to figure out what may be causing this? I am running the latest version from the master branch and have tried with multiple API keys.
[*] Creating Jira issues for ATT&CK's techniques... [!] Error creating Jira issue for T1001 {"errorMessages":[],"errors":{"customfield_10110":"Field 'customfield_10110' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10111":"Field 'customfield_10111' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10112":"Field 'customfield_10112' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10113":"Field 'customfield_10113' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10114":"Field 'customfield_10114' cannot be set. It is not on the appropriate screen, or unknown."}}
I am installing on Jira Software Cloud with it tripping up on the below
[*] Creating Jira issues for ATT&CK's techniques...
[!] Error creating Jira issue for T1001
{"errorMessages":[],"errors":{"customfield_10038":"Field 'customfield_10038' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10034":"Field 'customfield_10034' cannot be set.
It is not on the appropriate screen, or unknown.","customfield_10035":"Field 'customfield_10035' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10036":"Field 'customfield_10036' cannot be set. It is not on the appropriate screen, or unknown.","customfield_10037":"Field 'customfield_10037' cannot be set. It is not on the appropriate screen, or unknown."}}
Hi there,
This project is great, ive downloaded it and have it installed but sadly I keep getting unauthorized. probably not enough permissions.
So what ive done is manually created the project using postman and I am able to do that with the correct permissions.
I dont know I am unable to run the script using the correct login and api key.
Any help?
Getting error below when I run the command
python3 attack2jira.py -url https://yourjiracloud.atlassian.net -u [email protected] -a export
Traceback (most recent call last):
File "/opt/attack2jira/lib/jirahandler.py", line 363, in get_technique_maturity
technique_id=re.search(r"(([A-Za-z0-9_]+))", issue['fields']['summary']).group(1)
AttributeError: 'NoneType' object has no attribute 'group'
Jira may have deprecated the endpoint used and hide_unwanted_fields() is no longer working.
The current way of adding the custom fields to the Project's screens is pretty bad. Need to be more elegant and only add the custom fields where it corresponds.
Heya,
Mine crashes out at the datasources custom field, help!
[] Authenticating to https://[redacted].atlassian.net...
[!] Success!
[] Creating the Att&ck project...
[!] Success!
[*] Creating custom fields ...
[!] Successfully created 'tactic' custom field.
[!] Successfully created 'maturity' custom field.
[!] Successfully created 'url' custom field.
[!] Successfully created 'datasources' custom field.
[!] Successfully created 'id' custom field.
[!] Error creating options for the datasources custom field.
Unfortunately if I try to rerun where it left off, it kicks another error:
[] Authenticating to ...
[!] Success!
[] Creating the Att&ck project...
[!] Error creating Jira project. Does it already exist ?
Cheers,
Glyn.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.