2017-08-16 11:22:20 +02:00
#!/usr/bin/env python
# -*- coding: utf-8 -*-
import json
import re
import os
2017-08-17 15:52:26 +02:00
import argparse
2017-08-16 11:22:20 +02:00
2018-02-21 16:28:11 +01:00
parser = argparse . ArgumentParser ( description = ' Create a couple galaxy/cluster with cti \' s intrusion-sets \n Must be in the mitre/cti/mobile-attack/intrusion-set folder ' )
2017-08-17 15:52:26 +02:00
parser . add_argument ( " -v " , " --version " , type = int , required = True , help = " Version of the galaxy. Please increment the previous one " )
args = parser . parse_args ( )
2017-08-16 11:22:20 +02:00
values = [ ]
for element in os . listdir ( ' . ' ) :
if element . endswith ( ' .json ' ) :
with open ( element ) as json_data :
d = json . load ( json_data )
json_data . close ( )
temp = d [ ' objects ' ] [ 0 ]
value = { }
value [ ' description ' ] = temp [ ' description ' ]
2018-04-03 15:53:17 +02:00
value [ ' value ' ] = temp [ ' name ' ] + ' - ' + temp [ ' external_references ' ] [ 0 ] [ ' external_id ' ]
2017-08-16 11:22:20 +02:00
value [ ' meta ' ] = { }
value [ ' meta ' ] [ ' synonyms ' ] = temp [ ' aliases ' ]
value [ ' meta ' ] [ ' refs ' ] = [ ]
for reference in temp [ ' external_references ' ] :
2018-04-03 15:53:17 +02:00
if ' url ' in reference and reference [ ' url ' ] not in value [ ' meta ' ] [ ' refs ' ] :
2017-08-16 11:22:20 +02:00
value [ ' meta ' ] [ ' refs ' ] . append ( reference [ ' url ' ] )
2018-02-21 16:28:11 +01:00
value [ ' uuid ' ] = re . search ( ' --(.*)$ ' , temp [ ' id ' ] ) . group ( 0 ) [ 2 : ]
2017-08-16 11:22:20 +02:00
values . append ( value )
galaxy = { }
2018-02-21 16:28:11 +01:00
galaxy [ ' name ' ] = " Mobile Attack - Intrusion Set "
galaxy [ ' type ' ] = " mitre-mobile-attack-intrusion-set "
2017-08-16 11:22:20 +02:00
galaxy [ ' description ' ] = " Name of ATT&CK Group "
2018-02-21 16:28:11 +01:00
galaxy [ ' uuid ' ] = " 0314e554-1708-11e8-b049-8f8a42b5bb62 "
2017-08-17 15:52:26 +02:00
galaxy [ ' version ' ] = args . version
2017-10-26 10:28:05 +02:00
galaxy [ ' icon ' ] = " user-secret "
2017-08-16 11:22:20 +02:00
2018-04-03 15:53:17 +02:00
cluster = { }
2018-02-21 16:28:11 +01:00
cluster [ ' name ' ] = " Mobile Attack - intrusion Set "
cluster [ ' type ' ] = " mitre-mobile-attack-intrusion-set "
2017-08-16 11:22:20 +02:00
cluster [ ' description ' ] = " Name of ATT&CK Group "
2017-08-17 15:52:26 +02:00
cluster [ ' version ' ] = args . version
2017-08-16 11:22:20 +02:00
cluster [ ' source ' ] = " https://github.com/mitre/cti "
2018-02-21 16:28:11 +01:00
cluster [ ' uuid ' ] = " 02ab4018-1708-11e8-8f9d-e735aabdfa53 "
2017-08-16 11:22:20 +02:00
cluster [ ' authors ' ] = [ " MITRE " ]
cluster [ ' values ' ] = values
2018-02-21 16:28:11 +01:00
with open ( ' generate/galaxies/mitre-mobile-attack-intrusion-set.json ' , ' w ' ) as galaxy_file :
2017-08-16 11:22:20 +02:00
json . dump ( galaxy , galaxy_file , indent = 4 )
2018-02-21 16:28:11 +01:00
with open ( ' generate/clusters/mitre-mobile-attack-intrusion-set.json ' , ' w ' ) as cluster_file :
2017-08-16 11:22:20 +02:00
json . dump ( cluster , cluster_file , indent = 4 )