Skip to content

Commit

Permalink
[Security Solution] Updates MITRE ATT&CK framework to v15.1 (elasti…
Browse files Browse the repository at this point in the history
…c#183463)

## Summary

Addresses: elastic#166152 for `8.15.0`

[Flaky test runner result
(internal)](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5996)

Updates MITRE ATT&CK mappings to `v15.1`. Last update was to `v14.1` in
elastic#174120.

To update,  I modified 


https://github.com/elastic/kibana/blob/44e38acd71a7a64fb0df08f01ff9abfada1fec1c/x-pack/plugins/security_solution/scripts/extract_tactics_techniques_mitre.js#L22

to point to the `ATT&CK-v15.1` tag.

Then ran `yarn extract-mitre-attacks` from the root `security_solution`
plugin directory, and then `node scripts/i18n_check.js --fix` from
Kibana root to regen the i18n files.

## Acceptance Criteria

- [x] User can map and use new MITRE techniques in Security Solution
- [ ] The user-facing documentation is updated with the new version
(elastic/security-docs#5222)
- [ ] [MITRE ATT&CK®
coverage](https://www.elastic.co/guide/en/security/master/rules-coverage.html)
page

## Test Criteria

- [x] Verify that new techniques (see the changelog link above) are
available for mapping on the Rule Creation page under "Advanced
settings"
- [x] Verify that new techniques are available on the MITRE ATT&CK
coverage page


### For maintainers

- [ ] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Kibana Machine <[email protected]>
  • Loading branch information
dplumlee and kibanamachine authored May 30, 2024
1 parent d4e96b8 commit dff2754
Show file tree
Hide file tree
Showing 5 changed files with 206 additions and 72 deletions.
Loading

0 comments on commit dff2754

Please sign in to comment.