1.1.7 - Data Sources

✅ 1.1.7 (2025/03/08) 🚀

Overview:

This update enhances the log source filtering feature to improve user experience and threat-hunting efficiency. The new system remembers filter selections, dynamically hides techniques that don't match selected log sources, and improves usability by refining how "All" selection works.

Changes & Enhancements

• Persistent Log Source Filtering - User-selected log sources are now saved and persist across page reloads using localStorage.
• Dynamic Technique Display - Techniques now dynamically hide if they do not match the selected log sources.
• Expanded Log Source List - Added a comprehensive list of 41 ATT&CK log sources, including:
  • Active Directory, Application Log, Cloud Storage, File, Firewall, Kernel, Network Traffic, Windows Registry, WMI, and more.
• Improved Filtering Logic
  • Selecting "All" enables all log sources and unchecks others.
  • If any specific log source is selected, "All" is unchecked.
  • If all individual sources are selected, "All" is automatically rechecked and others are unchecked.
• Technique HTML Update - Each technique is now embedded with data-log-sources to support filtering.
• Base Template Update (base.html)
  • Moved log source filtering panel to the right side of the screen for better visibility.
  • Defaulted all log sources to be checked initially.

🚀 This update ensures a smoother, more precise experience when filtering and hunting across MITRE ATT&CK techniques.

Let me know if you need any tweaks before finalizing! 🎯