Alchemist

Design changes to data model, API and screen navigation to support multi frameworks

1

Besides MITRE ATTACK, there are other frameworks from MITRE and US Government that should be available to Unfetter. Design how that would operate with the following notes: - [x] Attack...

For our test deployments, the jwt and session secret is getting zeroed out.

Certs are recreated even when the backup has the right ones

1

In testing, the certs are being recreated even when the files exists.

Build ansible playbook to test docker-compose.yml

1

Build an ansible playbook that initiates through docker-compose.yml

Look at something liek https://codecov.io/ for code coverage. Also include in jenkins test.

Introduce hashicorp vault for secrets

1

In ansible, bring in hashicorp vault and store all secret info inside the vault.

Build a new attack pattern chooser control

1

We need a new control ( or group of related controls) for selecting an attack pattern. The following features are required to be implemented - [ ] Allow grouping the...

Remove/lessen requirement for Processor to run

1

If processor does not run, then unfetter-discover-api will fail. It appears that processor must run everytime the Docker stack starts. There will be cases where the processor does not need...

Customers might want to try and run Unfetter in a lab environment without continous access to Unfetter. Make at least the following changes - [ ] Add the MITRE attack...

We are using a mix of STIX terms and other info sec terms. Need to identify the terms we will use on the UI front end and ensure consistency