search

Cyb3rWard0g / Invoke-ATTACKAPI

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
MIT License
365 stars 82 forks source link

Not outputting results #2

Closed glennbarrett closed 6 years ago

glennbarrett commented 6 years ago

I'm not sure if something changed with the API, but the tool does not appear to be outputting results. Here is what I see when running the basic Invoke-AttackAPI -Category -Technique

Note: It looks like if you run the GET queries manually in the browser, they do return data there. Maybe a parsing issue?

attack_api

Cyb3rWard0g commented 6 years ago

Hey @glennbarrett ! You have to first import the module and then you can start using the page selector switches to access the data. The way how the script works is by first pulling pretty much everything from the MITRE ATTACK framework via its API when you import it. So what you have in your image is the script pulling everything back to your computer. Then, that data is filtered by the switches (Tactic, Technique, group, software) and properties such as ID, Description, Name, etc. So do the following:

import-module invoke-ATTACKAPI.ps1 import

Invoke-ATTACKAPI -Category -Technique | more technique

Let me know if this makes sense and if you were able to get it to work. :)

glennbarrett commented 6 years ago

Ah, got it. Yep, that works perfectly. Thanks!