-
Notifications
You must be signed in to change notification settings - Fork 150
Description
Is your feature request related to a problem?
This is not a problem yet. But the October 2025 ATT&CK release plans to update the schema around data sources, data components, etc. which is detailed here: mitre-attack/attack-data-model#14. When that goes into effect, https://github.com/mitre-attack/mitreattack-python/blob/master/mitreattack/diffStix/changelog_helper.py will need to be updated to handle how changes are made between ATT&CK releases.
Describe the solution you'd like
The output of the changelog_helper.py script should appropriately show the current data source and data component objects as being deprecated. It should also know about and show the new detection strategy, log source, and analytic objects as being added. This issue here may become out of date if the schema changes further, so the latest information at mitre-attack/attack-data-model#14 should always be referenced.
Describe alternatives you've considered
Since the ATT&CK team uses ATT&CK Workbench to create ATT&CK releases, one day this functionality should be baked into ATT&CK Workbench, per this GitHub issue: center-for-threat-informed-defense/attack-workbench-frontend#573
Additional context
None at this time