Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature request: support of STIX 2.1 "Language Content" object #249

Open
2xyo opened this issue Nov 17, 2020 · 1 comment
Open

Feature request: support of STIX 2.1 "Language Content" object #249

2xyo opened this issue Nov 17, 2020 · 1 comment
Labels
enhancement New feature or request icebox No current plans to tackle these issues. Points: 5 5 agile story points timescale/long-term Issue to think about later

Comments

@2xyo
Copy link
Contributor

2xyo commented Nov 17, 2020

Problem to Solve

It would be nice (for the reporting to the top management) to be able to display objects in a foreign language.

Current Workaround

Translate each attack pattern / phase in the kill chain in assets/enterprise-attack.json

Proposed Solution

Implement the STIX 2.1 "Language Content object" :

  • if a "language-content" exists regarding an attack pattern/kill_chain_phases
    • allow the user to switch to the available language
    • display each element in the corresponding language

Example:

 {
	"created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
	"name": ".bash_profile and .bashrc",
	"description": "Adversaries may establish persistence [...]",
	"type": "attack-pattern",
	[...]
	"x_mitre_detection": "While users [...]",
},
{
	"type": "language-content",
	"id": "language-content--b86bd89f-98bb-4fa9-8cb2-9ad421da981d",
	[...]
	"object_ref": "attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2",
	"contents": {
	"fr": {
		"name": ".bash_profile et .bashrc",
		"description": "Des adversaires peuvent [...]",
		"x_mitre_detection" : "Les utilisateurs peuvent[...]" 
	}
}

Additional Information
@isaisabel
Copy link
Contributor

Hi @2xyo,

Thanks for reaching out! Translations are definitely something ATT&CK has been thinking about. We plan to eventually support language-content, however currently ATT&CK is still using STIX 2.0 and language-content was introduced in STIX 2.1. Once ATT&CK upgrades to STIX 2.1, we will definitely start working on support for translations through language-content SDOs. This probably won't happen for at least a year however, we have quite a bit of work to do before we can support STIX 2.1 across the infrastructure.

Your current workaround is definitely the way to go until we adopt STIX 2.1. ATT&CK likely will not provide official translations in the short term, but you're welcome to develop your own locally by modifying the content found on our MITRE/CTI repository.

I'll keep this issue open so that we can keep track of the request even though we won't be working on it short-term.

@isaisabel isaisabel added enhancement New feature or request timescale/long-term Issue to think about later labels Nov 17, 2020
@isaisabel isaisabel added the Points: 5 5 agile story points label Jun 24, 2021
@clemiller clemiller added the icebox No current plans to tackle these issues. label Feb 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request icebox No current plans to tackle these issues. Points: 5 5 agile story points timescale/long-term Issue to think about later
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@2xyo @isaisabel @clemiller