forked from mitre-attack/tram
-
Notifications
You must be signed in to change notification settings - Fork 5
Open
Labels
attack flow implementationImplementing the ability to generate attack flowsImplementing the ability to generate attack flowsfeature requestNew feature or requestNew feature or request
Description
What it is
Introduce logic to create attack-operator nodes in the backend whenever a fork or merge relationship is established in the flow.
Why it matters
- Required for MITRE-compliant Attack Flow STIX bundles.
- Helps represent logical junctions (AND/OR) in flow execution.
Requirements
- When user creates:
- Fork → insert
attack-operatorwith type =ANDby default - Merge → insert
attack-operatorwith incoming edges
- Fork → insert
- Automatically insert operator nodes if:
- Multiple parents connect to a single child
- Allow toggle of
AND↔ORoperator type in backend metadata.
Acceptance Criteria
- Operator nodes inserted programmatically as needed.
- Operator type can be toggled (
AND/OR). - Relationships between FlowNodes and operator nodes are maintained.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
attack flow implementationImplementing the ability to generate attack flowsImplementing the ability to generate attack flowsfeature requestNew feature or requestNew feature or request