mitre / caldera

Automated Adversary Emulation Platform
https://caldera.mitre.org
Apache License 2.0
5.54k stars 1.05k forks source link

"Learned" Facts Don't Populate in Add Potential Link Modal #3041

Open d3vco opened 1 month ago

d3vco commented 1 month ago

Describe the bug In Caldera v5, "learned" facts (facts parsed by abilities earlier in the operation) do not appear in the Add Potential Link modal for selection.

To Reproduce Steps to reproduce the behavior (using Caldera v5 on Linux):

  1. Create a new operation using basic fact source.
  2. Execute the "Find local users" ability. Note in the output that the parser has identified several host.user.name fact values.
  3. In the "Add Potential Link" modal, select the "Find user processes" ability.
  4. Note that the ability requires a host.user.name value, but none of the values learned in the previous step populate as options in the form.

Expected behavior When navigating the "Add Potential Link" form, both "Learned" and "Imported" values of required facts should appear as options with a checkbox. This is the behavior in Caldera v4.2.

Tested On:

Additional context I assume in the Magma version of the Operation page, the fact source is only queried once when the operation is first created. Therefore, facts "learned" during the operation are never pulled and don't appear as options in the "Add Potential Link" modal. I intend to investigate when I have time.