{ "id": "JFXftJml8DpmuCPBA9rL", "name": "Add details about your new PBA", "dod": "You should add your new PBA's details to the configuration.", "description": "In order to make sure that the new `ScheduleJobs` PBA is shown in the configuration on the Monkey Island, you need to add its details to the configuration file(s).

\n\nSince this particular PBA is related to the MITRE techniques [T1168](https://attack.mitre.org/techniques/T1168) and [T1053](https://attack.mitre.org/techniques/T1053), make sure to link the PBA with these techniques in the configuration as well.

\n\nEach part of the configuration has an important role \n- *enum* — contains the relevant PBA's class name(s)\n- *title* — holds the name of the PBA which is displayed in the configuration on the Monkey Island\n- *info* — consists of an elaboration on the PBA's working which is displayed in the configuration on the Monkey Island\n- *attack_techniques* — has the IDs of the MITRE techniques associated with the PBA\n\n## Manual test \nOnce you think you're done...\n- Run the Monkey Island\n- You should be able to see your new PBA under the \"Monkey\" tab in the configuration, along with its information when you click on it\n- Further, when you enable/disable the associated MITRE techniques under the ATT&CK tab in the configuration, the PBA should also be enabled/disabled\n\n", "summary": "- The PBA details in this file are reflected on the Monkey Island in the PBA configuration.\n- PBAs are also linked to the relevant MITRE techniques in this file, whose results can then be seen in the MITRE ATT&CK report on the Monkey Island.", "hunksOrder": [ "monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py_0" ], "tests": [], "hints": [ "Have a look at the details of the other techniques." ], "play_mode": "all", "swimmPatch": { "monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py": { "diffType": "MODIFIED", "fileDiffHeader": "diff --git a/monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py b/monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py\nindex f1fe0f6f..b231f96c 100644\n--- a/monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py\n+++ b/monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py", "hunks": [ { "swimmHunkMetadata": { "hunkComments": [] }, "hunkDiffLines": [ "@@ -68,16 +68,7 @@", " \"Removes the file afterwards.\",", " \"attack_techniques\": [\"T1166\"]", " },", "- {", "+ # Swimmer: ADD DETAILS HERE!", "- \"type\": \"string\",", "- \"enum\": [", "- \"ScheduleJobs\"", "- ],", "- \"title\": \"Job scheduling\",", "- \"safe\": True,", "- \"info\": \"Attempts to create a scheduled job on the system and remove it.\",", "- \"attack_techniques\": [\"T1168\", \"T1053\"]", "- },", " {", " \"type\": \"string\",", " \"enum\": [" ] } ] } }, "app_version": "0.3.5-1", "file_version": "1.0.4", "hunksOrder": [ "monkey/monkey_island/cc/services/config_schema/definitions/post_breach_actions.py_0" ], "last_commit_sha_for_swimm_patch": "9d9e8168fb2c23367b9947273aa1a041687b3e2e" }