| ... | @@ -167,7 +167,7 @@ questionnaire phase |
... | @@ -167,7 +167,7 @@ questionnaire phase |
|
|
##### Testing [kypo-mitre-matrix-service](https://gitlab.ics.muni.cz/muni-kypo-crp/backend-python/kypo-mitre-technique-service)
|
|
##### Testing [kypo-mitre-matrix-service](https://gitlab.ics.muni.cz/muni-kypo-crp/backend-python/kypo-mitre-technique-service)
|
|
|
- [ ] try to run to service with all the other services and ensure that the map gets generated and can be viewed on the frontend. It can be viewed at two places, in training run agenda and in training definitions overview. The table will only display trainings that are **released**. In the mitre repository, go to the test_definition and download the json for the definition. Upload this defintion and release it. Check both mitre tables and see if the marks for the definition are present.
|
|
- [ ] try to run to service with all the other services and ensure that the map gets generated and can be viewed on the frontend. It can be viewed at two places, in training run agenda and in training definitions overview. The table will only display trainings that are **released**. In the mitre repository, go to the test_definition and download the json for the definition. Upload this defintion and release it. Check both mitre tables and see if the marks for the definition are present.
|
|
|
- [ ] create a training instance with this testing definition and play it, then check the mitre table in the training run agenda and see if it is in the "played" section of it.
|
|
- [ ] create a training instance with this testing definition and play it, then check the mitre table in the training run agenda and see if it is in the "played" section of it.
|
|
|
- [ ] check the last update on this [website](https://attack.mitre.org/resources/updates/). If it is later than **October 2021**, the MITRE ATTACK matrix may have been changed singe the last check
|
|
- [ ] check the last update on this [website](https://attack.mitre.org/resources/updates/). If it is later than **October 2022**, the MITRE ATTACK matrix may have been changed singe the last check
|
|
|
- [ ] check the content of the update and verify that the service still works under this update (if there are new tactics/techniques, the instructor should be able to add them to new levels of linear training and phases of adaptive training). If some tactics/techniques were removed, instructors should no longer be able to add them, but if there are training definitions which still contain such techniques, the service should not fail because of them, instead they should be ignored.
|
|
- [ ] check the content of the update and verify that the service still works under this update (if there are new tactics/techniques, the instructor should be able to add them to new levels of linear training and phases of adaptive training). If some tactics/techniques were removed, instructors should no longer be able to add them, but if there are training definitions which still contain such techniques, the service should not fail because of them, instead they should be ignored.
|
|
|
- [ ] run the service locally on its own (clone its repository and run `pipenv run python manage.py runserver 8001`)
|
|
- [ ] run the service locally on its own (clone its repository and run `pipenv run python manage.py runserver 8001`)
|
|
|
- [ ] open the [swagger documentation](http://127.0.0.1:8001/mitre-technique/api/v1/doc) and call the `/mitre-technique-index` endpoint (it is not authenticated so it should work fine). Ensure that a list of techniques and their codes are returned and also check that the console where the service runs does **NOT** output `"The method getting tactics and techniques failed with:..."`.
|
|
- [ ] open the [swagger documentation](http://127.0.0.1:8001/mitre-technique/api/v1/doc) and call the `/mitre-technique-index` endpoint (it is not authenticated so it should work fine). Ensure that a list of techniques and their codes are returned and also check that the console where the service runs does **NOT** output `"The method getting tactics and techniques failed with:..."`.
|
| ... | | ... | |