search

SecurityRiskAdvisors / VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.35k stars 159 forks source link

Unable to view Test Case Phase via GraphQL API #184

Closed inance closed 1 year ago

inance commented 2 years ago

Describe the bug I'm using GraphQL to view TestCase objects, but it does not appear that Phase is available via the API.

To Reproduce Steps to reproduce the behavior: Query GraphQL for TestCase data. Documentation does not show Phase or PhaseID as an available data field.

Expected behavior Would like to be able to gather phase information for test cases when querying through GraphQL.

SRAPSpencer commented 2 years ago

After discussing with the team we understand the request and have added it to our request tracker.

inance commented 2 years ago

Thank you very much. If I can clarify anything, let me know. If it helps: I want to use GraphQL to pull down a list of TestCases from a campaign and organize them by the Phase they were assigned. It is included when exporting a report, but not with GraphQL (unless there's something I'm missing).

atropineal commented 1 year ago

+1 for this :) I'm currently using the API to generate a MITRE ATT&CK navigator JSON file. Because of the lack of phase data from the GraphQL API, a TTP associated with more than 1 tactic will be associated with all tactics. My workaround was to add phase tags to test cases with TTPs that apply to more than 1 tactic.

thebleucheese commented 1 year ago

+1 for this :) I'm currently using the API to generate a MITRE ATT&CK navigator JSON file. Because of the lack of phase data from the GraphQL API, a TTP associated with more than 1 tactic will be associated with all tactics. My workaround was to add phase tags to test cases with TTPs that apply to more than 1 tactic.

@atropineal and @inance this addition to the API (along with the ability to update Test Cases and also pull the Kill Chain data with Assessments) will be in the next release, we're testing internally right now

atropineal commented 1 year ago

Woohoo! And thank you so much for this fabulous tool.

doodleincode commented 1 year ago

This has been addressed in ce-8.6.1.