rabobank-cdc / DeTTECT

Detect Tactics, Techniques & Combat Threats
GNU General Public License v3.0
2.05k stars 333 forks source link

Add detection score when generating technique administration file #76

Open nbeguier opened 2 years ago

nbeguier commented 2 years ago

The following command, give us a technique administration file, but only with a visibility score, not any detection score.

python dettect.py ds -fd sample-data/data-sources-endpoints.yaml --yaml

As long as there is no way to configure this score in the editor, by default to -1, I've added a way to use custom key-value pair, "detection_score" in this case, to specify a detection score.

It allows us to manage everything from the Data Sources panel in the editor. Managing this score directly from Techniques panel was and still is possible, but it's longer because you need to edit every techniques one by one.