Skip to content

[Request] Update changelog_helper to handle updated detection schema #188

@jondricek

Description

@jondricek

Is your feature request related to a problem?

This is not a problem yet. But the October 2025 ATT&CK release plans to update the schema around data sources, data components, etc. which is detailed here: mitre-attack/attack-data-model#14. When that goes into effect, https://github.com/mitre-attack/mitreattack-python/blob/master/mitreattack/diffStix/changelog_helper.py will need to be updated to handle how changes are made between ATT&CK releases.

Describe the solution you'd like

The output of the changelog_helper.py script should appropriately show the current data source and data component objects as being deprecated. It should also know about and show the new detection strategy, log source, and analytic objects as being added. This issue here may become out of date if the schema changes further, so the latest information at mitre-attack/attack-data-model#14 should always be referenced.

Describe alternatives you've considered

Since the ATT&CK team uses ATT&CK Workbench to create ATT&CK releases, one day this functionality should be baked into ATT&CK Workbench, per this GitHub issue: center-for-threat-informed-defense/attack-workbench-frontend#573

Additional context

None at this time

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions