center-for-threat-informed-defense / attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

https://ctid.io/attack-flow

Apache License 2.0

527 stars 84 forks source link

Add Conti Ransomware Attack Flow #38

Closed alaanasser00 closed 2 years ago

alaanasser00 commented 2 years ago

Info based on: https://thedfirreport.com/2021/05/12/conti-ransomware/

mehaase commented 2 years ago

Thank you for creating a report @alaanasser00, we really appreciate it! The build is failing due to some timestamp fields. This is our bug, not your fault, but the quickest way to merge your PR is to edit the .json file. Could you please go through the .json file and delete each line that says "timestamp":""? That would fix the build and then I will merge it.

sonarcloud[bot] commented 2 years ago

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

codecov[bot] commented 2 years ago

Codecov Report

Merging #38 (c521185) into main (6e006fb) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #38   +/-   ##
=======================================
  Coverage   96.81%   96.81%           
=======================================
  Files           5        5           
  Lines         220      220           
=======================================
  Hits          213      213           
  Misses          7        7

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 6e006fb...c521185. Read the comment docs.

mehaase commented 2 years ago

This report is very well done and has great detail. Thank you again for the submission. If you have any feedback on Attack Flow itself (schema, tools, documentation, etc.) please post it here or email me directly (mhaase at mitre dot org).

alaanasser00 commented 2 years ago

Thank you! Looking forward to getting involved and contributing to the community. Best regards,