SOARCA icon indicating copy to clipboard operation
SOARCA copied to clipboard

Adaptations to next CACAO version

Open lucamrgs opened this issue 6 months ago • 0 comments

Issue at hand This issue serves as tracker for the changes to the CACAO spec that are prospected to be pushed in the next version. SOARCA will have to be adapted to account for those changes. We can modify the table depending on how the discussion and decisions evolve.

Track of discussed and probable (not definitive) changes in the TC

Nr. change SOARCA modification comment Status with TC
1 in_args is removed remove in_args and all related logic practically confirmed
2 out_args is moved from action step property to command property change related logic and overhaul of variables management. We will need to move from our custom variables management logic, to one consistent with the spec. practically confirmed
3 No more variables overload allowed. Step variable IDs MUST be different from playbook variables ids we need to validate this explicitly, as it will not be captured by the JSON schemas. practically confirmed
4 added on_timeout in common step properties Implement related logic. Also update DAG validation with new step branching property. If on_timeout triggers, then it supersedes the invocation of on_completion. to be discussed
5 on_completion is now a required step property Related validation logic and DAG to be discussed
6 on_success and on_failure moved to action step properties on_success and on_failure are now step branching properties, much like on_true and on_false + on_success. Must implement related logic and update DAG validation to be discussed
7 added success_condition in action step success_condition is a boolean expression defined the same as the condition in the if / while steps. Add related logic. to be discussed
8 add playbook_in_args_map and playbook_out_args_map to pass consistently variables in and out a playbook for a playbook action step validation and related logic in playbook action step executor for variables management to be discussed
9 mqtt broker agent type ... ...
10 openc2 mqtt command ... ...
11 clearer openc2 http command ... ...
... ... ... ...

lucamrgs avatar Aug 14 '24 07:08 lucamrgs