search

mitre-attack / attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices
https://mitre-attack.github.io/attack-navigator
Apache License 2.0
2.01k stars 592 forks source link

Feature Request: UI to enable differentiation between one set of data vs another #493

Open bbutz-nydig opened 2 years ago

bbutz-nydig commented 2 years ago

I am looking for a way to take a layer I have created for my detection coverage and highlight relevant techniques used by a specific threat group so that I can easily see what coverage I have in place vs that group's known techniques.

Currently, it appears that when I have a layer loaded with relevant detection techniques, I can change the background of the techniques by my threat group.

Alternatively, I would like to keep the background color (which represents my detection scoring) and identify techniques used by my threat group in another way, such as changing the Border of the cell to a Bold Red, or some other characteristic.

This way I can demonstrate that for a specific threat group, I either need detection logic or that I have sufficient detection logic for each of the techniques employed by that group.

ovcrash commented 1 year ago

This would be excellent to show purple teaming data vs which technics threat actors are using.