Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to get Tactics by Platform? #164

Open
MaurizioCasciano opened this issue Jun 3, 2021 · 1 comment
Open

How to get Tactics by Platform? #164

MaurizioCasciano opened this issue Jun 3, 2021 · 1 comment

Comments

@MaurizioCasciano
Copy link

I am looking for the proper way to return the Tactics of the PRE Platform within the Enterprise domain.
https://attack.mitre.org/matrices/enterprise/pre/
Screenshot from 2021-06-03 15-35-42

In this case I need to return only Reconnaissance and Resource Development.
The only way I'm able to think about this is by first getting all the techniques by platform, and then returning the corresponding platforms. https://github.com/mitre/cti/blob/master/USAGE.md#techniques-by-platform
Screenshot from 2021-06-03 15-39-34

Needless to say that it seems a lot of work for getting just two objects. Is this the only approach?

@isaisabel
Copy link
Member

Unfortunately yes, that's the only reliable, extensible answer. I believe PRE is the only platform which has its own tactics, the other tactics are a mix of the other platforms.

However, because the PRE tactics come first in the matrix, in this case specifically you can retrieve those tactics' IDs from the matrix object, and then use that ID to get the tactic objects themselves. Again, that won't really work for other platforms/tactics, but in the case of PRE it works fine.

I'll leave this open so that we can later create a code snippet in the USAGE document for this use case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants