Skip to content

v1.6.0

Compare
Choose a tag to compare
@marcusbakker marcusbakker released this 08 Mar 14:22
· 244 commits to master since this release

CLI

  • With the financial sponsorship of the Cyber Security Sharing & Analytics (CSSA), we added support for ATT&CK ICS to DeTT&CT.
    • In the current ATT&CK release of ICS, there are inconsistencies between the data on the ICS wiki and the STIX objects. Be aware that the ICS data from STIX is leading for DeTT&CT, and thus not the wiki because that cannot be accessed via an API. For more information see this page: 7. ICS - Inconsistencies.
  • Improved the data source statistics (python3 dettect.py ge -ds) by adding:
    • The option to only include data sources for selected platforms.
    • The corresponding ATT&CK platforms per data source in the output.
  • Removed the interactive menu. We have decided to do this for the following reasons:
    • Our list of improvements and new features for DeTT&CT is long. Therefore, we want to spend as much time as possible on improving the core of DeTT&CT and less on maintaining functionality that is already provided differently.
    • The interactive menu has not been kept up to date with the latest features and thus features available from the command-line interface.
  • Removed the functionality to update the technique administration YAML file to ATT&CK with sub-techniques.
  • Numerous small improvements.
  • Updated all Python dependencies.
    • Due to Pandas being updated to version 1.4.0, the minimal required Python version is now 3.8.

Editor