p59342861
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Report attack matrix headers now link to attack technique type description on mitre

This commit is contained in:
VakarisZ 2019-11-25 11:28:47 +02:00
parent 1dc6949829
commit 111b762f23
3 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
monkey/monkey_island/cc/services/attack/attack_schema.py
View File

@ -5,6 +5,7 @@ SCHEMA = {
"execution": { "execution": {
"title": "Execution", "title": "Execution",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0002/",
"properties": { "properties": {
"T1059": { "T1059": {
"title": "T1059 Command line interface", "title": "T1059 Command line interface",
@ -62,6 +63,7 @@ SCHEMA = {
"defence_evasion": { "defence_evasion": {
"title": "Defence evasion", "title": "Defence evasion",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0005/",
"properties": { "properties": {
"T1197": { "T1197": {
"title": "T1197 BITS jobs", "title": "T1197 BITS jobs",
@ -92,6 +94,7 @@ SCHEMA = {
"credential_access": { "credential_access": {
"title": "Credential access", "title": "Credential access",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0006/",
"properties": { "properties": {
"T1110": { "T1110": {
"title": "T1110 Brute force", "title": "T1110 Brute force",
@ -129,6 +132,7 @@ SCHEMA = {
"discovery": { "discovery": {
"title": "Discovery", "title": "Discovery",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0007/",
"properties": { "properties": {
"T1018": { "T1018": {
"title": "T1018 Remote System Discovery", "title": "T1018 Remote System Discovery",
@ -163,6 +167,7 @@ SCHEMA = {
"lateral_movement": { "lateral_movement": {
"title": "Lateral movement", "title": "Lateral movement",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0008/",
"properties": { "properties": {
"T1210": { "T1210": {
"title": "T1210 Exploitation of Remote services", "title": "T1210 Exploitation of Remote services",
@ -203,6 +208,7 @@ SCHEMA = {
"collection": { "collection": {
"title": "Collection", "title": "Collection",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0009/",
"properties": { "properties": {
"T1005": { "T1005": {
"title": "T1005 Data from local system", "title": "T1005 Data from local system",
@ -218,6 +224,7 @@ SCHEMA = {
"command_and_control": { "command_and_control": {
"title": "Command and Control", "title": "Command and Control",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0011/",
"properties": { "properties": {
"T1090": { "T1090": {
"title": "T1090 Connection proxy", "title": "T1090 Connection proxy",
@ -248,6 +255,7 @@ SCHEMA = {
"exfiltration": { "exfiltration": {
"title": "Exfiltration", "title": "Exfiltration",
"type": "object", "type": "object",
"link": "https://attack.mitre.org/tactics/TA0010/",
"properties": { "properties": {
"T1041": { "T1041": {
"title": "T1041 Exfiltration Over Command and Control Channel", "title": "T1041 Exfiltration Over Command and Control Channel",

2
monkey/monkey_island/cc/ui/src/components/report-components/AttackReport.js
View File

@ -7,7 +7,7 @@ import '../../styles/report/AttackReport.scss'
import AuthComponent from '../AuthComponent'; import AuthComponent from '../AuthComponent';
import {ScanStatus} from '../attack/techniques/Helpers'; import {ScanStatus} from '../attack/techniques/Helpers';
import Collapse from '@kunukn/react-collapse'; import Collapse from '@kunukn/react-collapse';
import Matrix from './attack/Matrix'; import Matrix from './attack/ReportMatrix';
import T1210 from '../attack/techniques/T1210'; import T1210 from '../attack/techniques/T1210';
import T1197 from '../attack/techniques/T1197'; import T1197 from '../attack/techniques/T1197';

2
monkey/monkey_island/cc/ui/src/components/report-components/attack/Matrix.js → monkey/monkey_island/cc/ui/src/components/report-components/attack/ReportMatrix.js
View File

@ -19,7 +19,7 @@ class MatrixComponent extends React.Component {
} }
let tech_type = this.state.schema.properties[type_key]; let tech_type = this.state.schema.properties[type_key];
columns.push({ columns.push({
Header: tech_type.title, Header: () => (<a href={tech_type.link}>{tech_type.title}</a>),
id: type_key, id: type_key,
accessor: x => MatrixComponent.renderTechnique(x[tech_type.title]), accessor: x => MatrixComponent.renderTechnique(x[tech_type.title]),
style: {'whiteSpace': 'unset'} style: {'whiteSpace': 'unset'}