facebookincubator / TTPForge / 16156886335

67%

main: 67%

Pull #543

github

Enum Command (#543)

Summary:

### TTPForge Enum Command

#### Overview

This diff introduces a new `enum` command to the TTPForge framework. It is designed to provide a way to enumerate TTPs, making it easier for users to discover and manage TTPs. With this implementation, users can display platform wise TTP count across repositories with filtering on platforms, tactics, techniques and sub-techniques with an option to view specific TTPs with a verbose output.

#### Context

There was a growing need to effectively enumerate, dynamically filter and count TTPs across repositories created for various purple team engagements. This diff solves aspects of this problem paving way for further advancements. This capability enables users to maintain tally of TTPs across engagements and repositories to allow for better management ultimately leading to improved decision-making and resource allocation.

#### Future Improvements

The addition of TTP dynamic enumeration and counting capabilities in TTPForge paves for the following future advancements:

1) Unified View: The ability to enumerate and count TTPs paves the way for creating an interactive UI that displays all TTPs from multiple repositories in one place. This provides managers and stakeholders with a holistic view of their TTP landscape with super helpful filtering mechanisms, empowering them to make data-driven decisions and allocate resources more effectively.

2) Reducing redundancy: By viewing all TTPs in one place with advanced filtering would help reduce redundancy and increase efficiency of developers searching for similar TTPs.

3) Analysis: The addition of TTP enumeration and counting capabilities sets the stage for future enhancements, such as advanced filtering, sorting, and analytics, which will further empower our team to pinpoint how our TTP catalog could improve further.

4) Enhanching enumeration: Adding new enum subcommands to enumerate other things like repo.

5) Changing from regex to p... (continued)

138 of 165 new or added lines in 3 files covered. (83.64%)

2194 of 3256 relevant lines covered (67.38%)

17.07 hits per line