Jason Keirstead

DRL: Patent Grant & other questions

2

Thanks to @Neo23x0 on Twitter I became aware of the DRL - I am now somewhat embarrassed discovering it is over a year old and I am only now discovering...

Currently there is a "reference" field which may link to a ATT&CK ID, but there is no way to link to the normative MITRE STIX objects for ATT&CK. A field...

Currently the "reference" data type says "A reference for the action. May be a URL to an ATT&CK technique." Because this is a "MAY", there is currently no way to...

Generate INF from an existing post

1

It would be nice to be able to generate the INF from an already existing Kijiji ad that you posted using other means, such as the mobile app.

[Suggestion] Trying to understand the criterion for tools in Security Assurance

6

I am trying to understand the criterion for the tools in these various pages. I will focus on one example, Threat intelligence: ( https://github.com/cncf/tag-security/blob/cnsmap/content/threat-intelligence.md ) The page does not really...

QRadar adapter needs to be smarter about data mappings (needs to take advantage of category and possibly device type)

1

Currently the QRadar adapter's mapping methodology is based on what fields are present in the event. If the right fields are present, then they get mapped and a resultant STIX...

**Is your feature request related to a problem? Please describe.** Native support for podman would be nice so that users can not use docker if they don't want. **Describe the...

Add initial support for Sigma

1

Start on #37 Add support for Sigma as input, based on auto-detection. TODO is to add Sigma mappings configuration.

Factor whether or not private vulnerability reporting is enabled into the scorecard

20

Github has finally added the ability for repository owners to turn on private vulnerability reporting, to make disclosing vulnerabilities in a secure manner easier for all parties involved. https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability The...

The SEP template should probably be updated to reference the new 2.1 Extension syntax at https://docs.oasis-open.org/cti/stix/v2.1/cs02/stix-v2.1-cs02.html#_5fzuuhwycg2e in order to define the extension