| ... | ... | @@ -165,7 +165,8 @@ questionnaire phase |
|
|
|
- [ ] test the disk volumes [functionality in topology](https://gitlab.ics.muni.cz/muni-kypo-crp/kypo-crp-issues/-/issues/360) using [this branch](https://gitlab.ics.muni.cz/muni-kypo-crp/prototypes-and-examples/sandbox-definitions/five-os-sandbox/-/blob/testing-volumes/topology.yml#L9).
|
|
|
|
|
|
|
|
##### Testing [kypo-mitre-matrix-service](https://gitlab.ics.muni.cz/muni-kypo-crp/backend-python/kypo-mitre-technique-service)
|
|
|
|
- [ ] try to run to service with all the other services and ensure that the map gets generated and can be viewed on the frontend
|
|
|
|
- [ ] try to run to service with all the other services and ensure that the map gets generated and can be viewed on the frontend. It can be viewed at two places, in training run agenda and in training definitions overview. The table will only display trainings that are **released**. In the mitre repository, go to the test_definition and download the json for the definition. Upload this defintion and release it. Check both mitre tables and see if the marks for the definition are present.
|
|
|
|
- [ ] create a training instance with this testing definition and play it, then check the mitre table in the training run agenda and see if it is in the "played" section of it.
|
|
|
|
- [ ] check the last update on this [website](https://attack.mitre.org/resources/updates/). If it is later than **October 2021**, the MITRE ATTACK matrix may have been changed singe the last check
|
|
|
|
- [ ] check the content of the update and verify that the service still works under this update (if there are new tactics/techniques, the instructor should be able to add them to new levels of linear training and phases of adaptive training). If some tactics/techniques were removed, instructors should no longer be able to add them, but if there are training definitions which still contain such techniques, the service should not fail because of them, instead they should be ignored.
|
|
|
|
- [ ] run the service locally on its own (clone its repository and run `pipenv run python manage.py runserver 8001`)
|
| ... | ... | @@ -173,7 +174,7 @@ questionnaire phase |
|
|
|
- [ ] if the message is in the output, check the exception that is thrown. There is likely a problem with getting the MITRE ATTACK data from the taxii2 server, thus localy stored static data is used. This may be fine if the external functionality of the endpoints that are called by this service on the MITRE side has been changed severely and if this service is not worth updating.
|
|
|
|
- [ ] if that is not the case and the endpoint works fine, this service will update the `mitre_attack_backup_data` (by default stored in `kypo/mitre_matrix_visualizer_app/templates/`). Update the existing `mitre_attack_backup_data` in the gitlab repository of this service with the new one.
|
|
|
|
- [ ] update the time of the last update of the MITRE ATTACK matrix data in this manual
|
|
|
|
a
|
|
|
|
|
|
|
|
## Integration testing
|
|
|
|
- [ ] import all publicly available sandbox definitions stored at https://gitlab.ics.muni.cz/muni-kypo-trainings/games + display their topology in sandbox definition overview table
|
|
|
|
- [ ] nice to have: import all private sandbox definitions stored at https://gitlab.ics.muni.cz/muni-kypo-trainings/games + display their topology in sandbox definition overview table
|
| ... | ... | |
