attack-navigator v4.5.5

v4.5.5

Fixes

• Fixed an issue with the Dockerfile which was preventing the docker image from building. See issue #395.

Improvements

• Font sizing in the SVG exports are optimally sized to improve readability and consistency. See issue #221.

New Features

• Added the ability to assign hyperlinks and metadata to selected techniques in the technique controls toolbar. See issue #321.
  • Hyperlinks can be accessed via the context menu and metadata can be viewed in the technique tooltip. Both hyperlinks and metadata can also be added directly to Layer Files (see Layer File Format Changes below for more details).
  • Users can disable the link underline effect on techniques by editing src/assets/config.json or through the "Create Customized Navigator" interface.
• Added the ability to assign hyperlinks layers. Hyperlinks can be viewed and edited in the layer information panel alongside layer metadata.

Layer File Format Changes

Updated the Layer File Format to v4.3 which adds a links array field to technique objects and to layers. This supports the assignment of hyperlinks to techniques which are accessed in the context menu and to layers which are accessed in the layer information dropdown menu. Link objects must conform to the schema {"label": string, "url": string} or {"divider": boolean}. A separator is displayed in the technique context menu where the divider property occurs in the list of hyperlinks.

attack-navigator v4.5.4

• Fixed a bug where layers with aggregate scores enabled would be render a black background on techniques which have no aggregate score. See issue #388.

attack-navigator v4.5.3

• Fixed an issue where the user could not manually assign colors or upload layers with manually assigned colors. See issue #386.
• Fixed an issue where fields with a value of false in the layout configuration of a layer would be ignored. See issue #381.

attack-navigator v4.5.2

Adds support for ATT&CK v10.1. See the changelog for more information.

attack-navigator v4.5.1

• Fixes support for ATT&CK versions with more than 1 digit (ex. ATT&CK v10).
  • Uploaded layers without a specified ATT&CK version will no longer try and fail to load ATT&CK v1
  • Uploaded layers using ATT&CK v10 will no longer try and fail to load ATT&CK v1
  • Downloaded layers using ATT&CK v10 will no longer claim they use ATT&CK v1

attack-navigator v4.5.0

Adds support for ATT&CK v10. See the changelog for more information.

attack-navigator v4.4.1

This release fixes a crash that could occur when opening layers which included annotations on revoked or deprecated techniques.

attack-navigator v4.4

Please see the changelog for the full release notes.

attack-navigator v4.3

Version 4.3 of the ATT&CK Navigator introduces aggregate scores and other utilities for working with sub-techniques, as well as support for ATT&CK v9.0. Please see the changelog for the full release notes.

attack-navigator v4.2

With version 4.2 of the Navigator we are retiring support for the Safari browser. A bug introduced in the sub-techniques release (version 3.0) causes safari to freeze when changing between layer tabs (see issue #251). We have been unable to determine the cause of the freeze and thus are retiring official support for that browser. Safari users can continue to use the application, but will be warned of possible freezes via a dialog window when they first load the app.

Please see the changelog for the full release notes.