attack-navigator v4.8.0

4.8.0 - 20 December 2022

New Features

• Added the ability to create a layer from a custom Collection or Stix Bundle. Users can specify the URL, version, and domain of a custom bundle in the Create New Layer interface. This will load the base data from the file at the given URL into the Navigator. Layers created from a custom collection/STIX bundle support all of the standard layer features (annotations, filter/sort, download/upload, layer-layer operations, etc.), apart from upgrading the layer to a newer ATT&CK version. See issue #499.

Layer File Format Changes

Layer file format updated to version 4.4. This update adds support for layers created with a custom collection or STIX bundle; the optional customDataURL field contains the URL from which custom data was loaded. This update is fully backwards compatible with layer format v4.3 since the added field is optional. See layers/LAYERFORMATv4_4.md for the full specification.

attack-navigator v4.7.1

4.7.1 - 8 November 2022

Adds support for ATT&CK v12.1.

attack-navigator v4.7.0

4.7.0 - 25 October 2022

Adds support for ATT&CK v12.

New Features

• Integration compatibility with the ATT&CK Workbench. See issue #474.
• Extended search interface to support searching for techniques based on campaign. See #501.

Fixes

• Fixed an issue with the Docker build caused by conflicting peer dependencies. See issue #497.
• Fixed an issue with loading STIX bundles that do not contain all of the tactics referenced by the included matrix. See issue #489.

attack-navigator v4.6.6

Fixes

• Fixed an issue where the sorting selection was not honored for sub-techniques when rendered as an SVG. See issue #494.

attack-navigator v4.6.5

Adds support for ATT&CK v11.3 and Mobile ATT&CK sub-techniques.

Fixes

• Fixed an issue where matrices that have been deprecated would load into the Navigator. See issue #473.

attack-navigator v4.6.4

Adds support for ATT&CK v11.2.

Fixes

• Fixed an issue causing disabled techniques with no enabled sub-techniques to appear in the matrix when the hide-disabled control is active. See issue #466.

attack-navigator v4.6.3

Fixes

• Fixed package import issues causing failure to load techniques with scores or colors, and impacting the ability to render a layer as SVG. See issues #451 and #452.

attack-navigator v4.6.2

Adds support for ATT&CK v11.1.

Improvements

• Added a feature to pin a technique cell when viewed in the matrix, enabling the user to scroll through the details of the technique in the tooltip. See issue #320.
• Added a popup alert to notify users if a layer with an empty tactic field is uploaded, and therefore will not be displayed. See issue #326.

attack-navigator v4.6.1

This release fixes an error that would occur when loading a local layer with a previous version of ATT&CK.

attack-navigator v4.6.0

Adds support for ATT&CK v11. See the changelog for more information.