Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

change of all unique IDs in ATT&CK v15.1 commit #2

Open
cvandeplas opened this issue Jun 25, 2024 · 1 comment
Open

change of all unique IDs in ATT&CK v15.1 commit #2

cvandeplas opened this issue Jun 25, 2024 · 1 comment

Comments

@cvandeplas
Copy link

We notice in commit 5938264 with ATT&CK v15.1 info, that all unique IDs of ATLAS have changed to a new ID.

For example "Search for Victim's Publicly Available Research Materials", had as ID attack-pattern--65d21e6b-7abe-4623-8f5c-88011cb362cb.
Since the new release the ID us now attack-pattern--41420aee-d3d0-413a-9528-9deb8b1fddba.

A change in IDs unfortunately breaks all references whenever ATLAS data is being used.
As you may know, MITRE ATLAS is also made available as a MISP Galaxy, and therefore available as tag and metadata to the thousands of MISP Threat Sharing communities, and any other software that uses this source of information.

Was this an intentional change, or was it accidental?
It'd be great to know as we can give it a bit of time to fix before merging the change.

Thank you again for the great work with ATLAS !

@lilyjw
Copy link
Contributor

lilyjw commented Jun 25, 2024

Thanks @cvandeplas, this ID change is a bug - will fix this week. Hold off on merging and I'll update here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants