Skip to content

v0.1.2: Populate ATT&CK v17 detection graph; word-boundary truncation

Choose a tag to compare

@cyanheads cyanheads released this 01 Jun 02:15
· 19 commits to main since this release
v0.1.2
8eb1d6f

Populate ATT&CK v17 detection graph; word-boundary truncation

Both fixes address data-extraction bugs in attack-service.ts.

Fixed:

  • Detection fields (summary, data_sources, indicators) were empty for every technique; ATT&CK v17 removed x_mitre_detection/x_mitre_data_sources from attack-patterns. Now walks the v17 detection-strategy graph: detects relationship → x-mitre-detection-strategy → x-mitre-analytic → x_mitre_log_source_references. (#1)

  • Technique/mitigation/procedure text was hard-cut mid-word via .slice(N) with no indicator. New truncate() helper cuts on word boundaries and appends an ellipsis; applied in attack-service.ts and both tool files; mitigation cap raised 300 → 600 chars. (#2)

100 tests pass; bun run devcheck clean.