Skip to content

[8.7] [Security Solution][Detections] Updates MITRE ATT&CK mappings to v12.1 (#151931)#152007

Merged
kibanamachine merged 2 commits intoelastic:8.7from
kibanamachine:backport/8.7/pr-151931
Feb 23, 2023
Merged

[8.7] [Security Solution][Detections] Updates MITRE ATT&CK mappings to v12.1 (#151931)#152007
kibanamachine merged 2 commits intoelastic:8.7from
kibanamachine:backport/8.7/pr-151931

Conversation

@kibanamachine
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 8.7:

Questions ?

Please refer to the Backport tool documentation

elastic#151931)

## Summary

Updates MITRE ATT&CK mappings to `v12.1`, see `detection-rules` repo
update here: elastic/detection-rules#2422. Last
update was to `v11.3` in elastic#137122.

To update,  I modified

https://github.com/elastic/kibana/blob/1a19148c1818b9af3b7735a0b6001bbb6bd8d7ba/x-pack/plugins/security_solution/scripts/extract_tactics_techniques_mitre.js#L22
to point to the `ATT&CK-v12.1` tag.

Then ran `yarn extract-mitre-attacks` from the root `security_solution`
plugin directory, and then `node scripts/i18n_check.js --fix` from
Kibana root to regen the i18n files.

### Checklist

- [X] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/master/packages/kbn-i18n/README.md)

(cherry picked from commit bbfa43a)
@kibanamachine kibanamachine merged commit 7114fb6 into elastic:8.7 Feb 23, 2023
@kibana-ci
Copy link
Copy Markdown

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] Security Solution Tests #4 / Inspect Users stats and tables inspects authentications table

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 13.7MB 13.8MB +110.6KB

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @spong

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants