search

mitre / caldera

Automated Adversary Emulation Platform
https://caldera.mitre.org
Apache License 2.0
5.54k stars 1.06k forks source link

JSON Profiles from attack.mitre.org/groups don't display abilities in Adversary view #1364

Closed serracloud closed 4 years ago

serracloud commented 4 years ago

I am trying to troubleshoot why Caldera won't load abilities from the threat groups located on https://attack.mitre.org/groups. This worked in 2.5.1, but I don't know where to start troubleshooting why the abilities won't load in 2.6.3.

I tried re-downloading and installing the JSON files but that creates duplicate entries which i cannot seem to remove from the Adversary or Compass drop downs. It looks like these files are converten into yml files but not sure where. Happy to send logs & screenshots if someone can point me in the right direction.

Pic with Super Spy shows a profile with abilities properly loading. Other Pics show the JSONs loaded and what they all look like when selected.

Default Abilities Loading Empty Adversary Loaded Menus

serracloud commented 4 years ago

It looks like when I upload the JSON that has all the technique numbers, these never get translated into the generated yml files that live in ../caldera/data/adversaries/. The phases are blank when I open the ymls. I tried browsing the code to find the file that's supposed to be doing this but no luck at the time of this comment.

khyberspache commented 4 years ago

We are taking a look at this today

khyberspache commented 4 years ago

@wbooth

wbooth commented 4 years ago

@serracloud looks like there were some breaking changes to the plugin recently. I'll take a look and clean them up. In the mean time-- check that the score for each technique is a positive number.

serracloud commented 4 years ago

@serracloud looks like there were some breaking changes to the plugin recently. I'll take a look and clean them up. In the mean time-- check that the score for each technique is a positive number.

Thanks @wbooth. I can confirm the scores are definitely 1 in absolute value.

privateducky commented 4 years ago

@wbooth closing this issue as your fix should have solved this. re-open if the problem persists.

serracloud commented 4 years ago

Took me a while to get to this, but the updates did not fix the issue. Let me know if you would like a new ticket number or if you prefer to reopen this.