Merge pull request #13 from mvelazc0/sub-technique

Sub technique support and other enhancements

Author: mvelazc0

attack2jira.py

@@ -15,6 +15,7 @@ def __init__(self, url, username, password):
         self.jirahandler = jirahandler
 
     def get_attack_techniques(self):
+    # Deprecated, keeping just in case
 
         try:
             print ("[*] Obtaining ATT&CK's techniques...")
@@ -87,7 +88,89 @@ def create_attack_techniques(self, key):
 
         print ("[*] Done!")
 
+    def create_attack_techniques_and_subtechniques(self, key):
 
+        # this creates each sub-technique as a SubTask 
+        # no issue links are created
+
+        jiraclient = self.jirahandler
+        techniques = self.get_attack_techniques()
+        sorted_techniques = sorted(techniques, key=lambda k: k['external_references'][0]['external_id'])
+
+        print ("[*] Creating Jira issues for ATT&CK's techniques...")
+
+        for technique in sorted_techniques:
+            try:
+                custom_fields = self.jirahandler.get_custom_fields()
+
+                name = technique['name']
+                id = technique['external_references'][0]['external_id']
+                url = technique['external_references'][0]['url']
+                tactic = technique['kill_chain_phases'][0]['phase_name']
+                description = technique['description']
+
+                # some techniques dont have the field populated
+                if 'x_mitre_data_sources' in technique.keys():
+                    datasources = technique['x_mitre_data_sources']
+                else:
+                    datasources = []
+
+                ds_payload = []
+                for ds in datasources: ds_payload.append({'value':ds.title()})
+
+                if not technique ['x_mitre_is_subtechnique']:
+                # Not a sub-technique
+                    issue_dict = {
+                        "fields": {
+                            "project": {"key": key },
+                            #"summary":  name + " (" + id + ")",
+                            "summary": name,
+                            "description": description,
+                            "issuetype": {"name": "Task"},
+                            custom_fields['Id']: id,
+                            custom_fields['Tactic']: {'value': tactic},
+                            custom_fields['Maturity']: {'value': 'Not Tracked'},
+                            custom_fields['Url']: url,
+                            custom_fields['Datasources']: ds_payload,
+                            # "customfield_11050": "Value that we're putting into a Free Text Field."
+                        }
+                    }
+                    #print("Creating Technique")
+                    parent_id= jiraclient.create_issue(issue_dict, id)
+                    #print (parent_id)
+                    #print("Created Technique with id : "+ str(parent_id))
+
+                else:
+                # Sub-technique
+                    issue_dict = {
+                        "fields": {
+                            "parent": {"id": parent_id['id']},
+                            "project": {"key": key},
+                            #"summary":  name + " (" + id + ")",
+                            "summary": name,
+                            "description": description,
+                            "issuetype": {"name": "Sub-task"},
+                            custom_fields['Id']: id,
+                            custom_fields['Tactic']: {'value': tactic},
+                            custom_fields['Maturity']: {'value': 'Not Tracked'},
+                            custom_fields['Url']: url,
+                            custom_fields['Datasources']: ds_payload,
+                            custom_fields['Sub-Technique of']: jiraclient.url +"/browse/"+parent_id['key'],
+                        }
+                    }
+                    #print("Creating sub Technique under parent " + str(parent_id))
+                    ret_id= jiraclient.create_issue(issue_dict, id)
+                    #print("Created sub Technique with id : "+ str(ret_id))
+
+            except Exception as ex:
+                print("\t[*] Could not create ticket for " + id)
+                print(ex)
+                traceback.print_exc(file=sys.stdout)
+                pass
+                # print(ex)
+                # sys.exit()
+
+        print("[*] Done!")
 
     def generate_json_layer(self, hideDisabled):
         VERSION = "2.2"
@@ -151,9 +234,9 @@ def set_up_jira_automated(self, project, key):
         self.jirahandler.create_project(project, key)
         self.jirahandler.create_custom_fields()
         self.jirahandler.add_custom_field_options()
-        self.jirahandler.add_custom_field_to_screen_tab(key)
+        self.jirahandler.add_custom_fields_to_screen(key)
         self.jirahandler.hide_unwanted_fields(key)
-        self.create_attack_techniques(key)
+        self.create_attack_techniques_and_subtechniques(key)
 
 
 def main():