-
Notifications
You must be signed in to change notification settings - Fork 10
Add Frameworks and Versions
Table of Contents:
Mappings Explorer is designed to have additional mappings projects added in the future. Follow these steps to add a new project on the website.
- Add mappings source files in
src/mapex_convert/mappings
- Add new parser in
src/mapex_convert
to convert mappings files into the unified schema - Define new project in
load_projects()
function insite_builder.py
and add all the appropriate information, including framework description, versions, and any resources that will be downloadable from the website (ex. scope documentation). Try to make the framework description roughly the same length as the ones for the other projects in order to make the homepage look as cohesive as possible. - Add new project to nav bar (
_navigation
) and footer (_footer
) - Write function to get capability descriptions, if necessary. Some projects (security stack) have capability descriptions in the mappings source files. Other projects (CVE and NIST) have description dictionaries built from API calls.
In future mappings projects, coverage of existing projects should increase. Follow these steps to add a new version combination to an existing mapping framework.
- Add new mappings file in
src/mapex_convert/mappings
- If going from one possible version to multiple, adjust the project parser as necessary as the parser may not be set up to look for multiple versions
- Add version combinations to project's validVersions array
As future ATT&CK versions get released, new ATT&CK versions will need to be added to the website.
All that is needed to add future ATT&CK versions is to update the all_attack_versions
and attack_domains
variables in site_builder.py
, being sure to update the matrix-specific versions of those variables as well in build_matrix
. ATT&CK versions that don't have any mappings will not have pages built out for them but the matrix view will be available.
- Check out the Mappings Explorer website
- Check out the Mappings Editor beta
- Learn more about the Center for Threat-Informed Defense