VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios
1.35k
stars
159
forks
source link
Ability to create a campaign template and test case templates from an assessment campaign #197
Sometimes I need to create a custom campaign on the fly, in line with emergent client needs during interactive PT. Sometimes that custom campaign needs to include test cases which were not previously defined. Additionally, sometimes I create an assessment campaign from a template, but then I add/remove test cases, and the reshaped campaign is eventually useful enough to retain as its own template. This involves a lot of to-and-fro between templates and assessment instances.
What would be really convenient for me, cutting down workflow, would be the ability to convert an assessment campaign into a campaign template. The newly-created campaign template would respect the same ordering as the assessment campaign, re-use test cases that are already templates, and create new templates for test cases that do not exist (eliding any assessment-specific details, perhaps only copying title, description, TTP and phase across).
Sometimes I need to create a custom campaign on the fly, in line with emergent client needs during interactive PT. Sometimes that custom campaign needs to include test cases which were not previously defined. Additionally, sometimes I create an assessment campaign from a template, but then I add/remove test cases, and the reshaped campaign is eventually useful enough to retain as its own template. This involves a lot of to-and-fro between templates and assessment instances.
What would be really convenient for me, cutting down workflow, would be the ability to convert an assessment campaign into a campaign template. The newly-created campaign template would respect the same ordering as the assessment campaign, re-use test cases that are already templates, and create new templates for test cases that do not exist (eliding any assessment-specific details, perhaps only copying title, description, TTP and phase across).