Skip to content

Commit

Permalink
[Security Solution] Updates MITRE ATT&CK framework to v14.1 (#174120)
Browse files Browse the repository at this point in the history
**Resolves: #171680

## Summary

Addresses: #166152 for `8.14.0`
and #171680

[Flaky test runner result
(internal)](https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/5147)

Updates MITRE ATT&CK mappings to `v14.1`. Last update was to `v13.1` in
#166536.

To update,  I modified 


https://github.com/elastic/kibana/blob/b0c6cc9777d220b3823ab9b1bbe08c5056f7016e/x-pack/plugins/security_solution/scripts/extract_tactics_techniques_mitre.js#L22

to point to the `ATT&CK-v14.1` tag.

Then ran `yarn extract-mitre-attacks` from the root `security_solution`
plugin directory, and then `node scripts/i18n_check.js --fix` from
Kibana root to regen the i18n files.

## Acceptance Criteria

- [x] User can map and use new MITRE techniques in Security Solution
- [ ] The user-facing documentation is updated with the new version -
Ticket [here](elastic/security-docs#4550)
- [ ] [MITRE ATT&CK®
coverage](https://www.elastic.co/guide/en/security/master/rules-coverage.html)
page

## Test Criteria

- [x] Verify that new techniques (see the changelog link above) are
available for mapping on the Rule Creation page under "Advanced
settings"
- [x] Verify that new techniques are available on the MITRE ATT&CK
coverage page


### For maintainers

- [ ] This was checked for breaking API changes and was [labeled
appropriately](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Kibana Machine <[email protected]>
  • Loading branch information
dplumlee and kibanamachine authored Apr 5, 2024
1 parent 392ef7b commit 1f2a3f0
Show file tree
Hide file tree
Showing 6 changed files with 269 additions and 61 deletions.
Loading

0 comments on commit 1f2a3f0

Please sign in to comment.