search

center-for-threat-informed-defense / attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
https://ctid.io/attack-flow
Apache License 2.0
522 stars 83 forks source link

Feature Request: Add auto-filtering/highlighting of Technique IDs based on Tactic IDs #114

Open frloudet opened 8 months ago

frloudet commented 8 months ago

When working on the flow chart and creating an "action", the Tactic IDs and Technique IDs are all available through an autocomplete drop down menu which is great.

As an iteration over this feature, it would be quite useful to add an auto-filtering/highlighting feature: When a Tactic ID is selected, only the relevant Technique IDs would be shown (or highlighted, leaving the others visible as well) in the related Technique IDs drop down values.

Thanks and well done for this attack flow app!

mehaase commented 8 months ago

Great idea! Tagging @mikecarenzo for awareness.