MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-22 23:07:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix: [d3fend] sort keys to make jq_all_the_things happy

Browse source
This commit is contained in:
Christophe Vandeplas 2024-05-28 07:48:22 +02:00
parent 2b3d62705d
commit 0528a62d9b
No known key found for this signature in database
GPG key ID: BDC48619FFDC5A5B
2 changed files with 21 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
galaxies/mitre-d3fend.json
View file

@ -2,17 +2,9 @@
"description": "A knowledge graph of cybersecurity countermeasures.", "description": "A knowledge graph of cybersecurity countermeasures.",
"icon": "user-shield", "icon": "user-shield",
"kill_chain_order": { "kill_chain_order": {
"Model": [ "Deceive": [
"Asset-Inventory", "Decoy-Environment",
"Network-Mapping", "Decoy-Object"
"Operational-Activity-Mapping",
"System-Mapping"
],
"Harden": [
"Application-Hardening",
"Credential-Hardening",
"Message-Hardening",
"Platform-Hardening"
], ],
"Detect": [ "Detect": [
"File-Analysis", "File-Analysis",
@ -23,19 +15,27 @@
"Process-Analysis", "Process-Analysis",
"User-Behavior-Analysis" "User-Behavior-Analysis"
], ],
"Isolate": [
"Execution-Isolation",
"Network-Isolation"
],
"Deceive": [
"Decoy-Environment",
"Decoy-Object"
],
"Evict": [ "Evict": [
"Credential-Eviction", "Credential-Eviction",
"File-Eviction", "File-Eviction",
"Process-Eviction" "Process-Eviction"
], ],
"Harden": [
"Application-Hardening",
"Credential-Hardening",
"Message-Hardening",
"Platform-Hardening"
],
"Isolate": [
"Execution-Isolation",
"Network-Isolation"
],
"Model": [
"Asset-Inventory",
"Network-Mapping",
"Operational-Activity-Mapping",
"System-Mapping"
],
"Restore": [ "Restore": [
"Restore-Access", "Restore-Access",
"Restore-Object" "Restore-Object"

4
tools/gen_mitre_d3fend.py
View file

@ -248,8 +248,8 @@ json_cluster = {
# save the Galaxy and Cluster file # save the Galaxy and Cluster file
with open(os.path.join('..', 'galaxies', galaxy_fname), 'w') as f: with open(os.path.join('..', 'galaxies', galaxy_fname), 'w') as f:
# do not sort_keys as it would break the kill_chain_order # sort_keys, even if it breaks the kill_chain_order , but jq_all_the_things requires sorted keys
json.dump(json_galaxy, f, indent=2, ensure_ascii=False) json.dump(json_galaxy, f, indent=2, sort_keys=True, ensure_ascii=False)
f.write('\n') # only needed for the beauty and to be compliant with jq_all_the_things f.write('\n') # only needed for the beauty and to be compliant with jq_all_the_things
with open(os.path.join('..', 'clusters', galaxy_fname), 'w') as f: with open(os.path.join('..', 'clusters', galaxy_fname), 'w') as f: