search

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.36k stars 161 forks source link

Can not import Atomic index and Mitre CTI on CE-7.1.1 #139

Closed fopson closed 3 years ago

fopson commented 3 years ago

I heard about this awesome tool a few days ago during SANS purple team summit and have just deployed an instance to try it out.

I followed your how to videos and deployed CE-7.1.1. Everything seem to be working great exept when I try to import some CTIs more specifically the Atomic Red team in and the Mitre attack CTI.

I can successfully import the covid19-campaign as well as the Iranian_TTP_Bundle. As show in the bellow, the campains and test cases are successfully discovered and when I hit submit, I get a Data import confirmation prompt after which (upon clicking on confirm) the campains and test cases are successfully imported.

01 02 03

When trying to do the same for the Atomic Red index as well as the Mitre CTI downloaded from the respective github pages, the campains and test cases are successfully discovered but these times when I hit submit, nothing happens. I don't get the data import confirmation prompt and the screen just stays the same.

04 05 06 07

The VM is an ubuntu 20.04 LTS with: 4 CPUs 6 GB Ram 50 GB Storage

I know you recommended 100+ GB for storage. Could the fact that I am using 50GB be causing the issue?

carlvonderheid commented 3 years ago

You are correct, this is a bug and have a fix. We will release a hotfix this evening. Thanks for the heads up!

carlvonderheid commented 3 years ago

Should be fixed in 7.1.2 release.

fopson commented 3 years ago

Upgraded to 7.1.2 and was to do the import. Thanks for the quick fix.

You are probably working on this already but may I propose a feature for future releases? The ability to import information from Mitre Shield and map it so that the Mitre Shield advise appears on the blue side as a suggestion whenever somebody chooses a Mitre ID on the red side.

Thanks again for this great tool. It is going to make tracking our progress so much easier!