ThreatHunting icon indicating copy to clipboard operation
ThreatHunting copied to clipboard

Paths not escaped in CDATA href from MITRE drilldown (mitre_attack_overview.xml) view

Open sebastiendamaye opened this issue 4 years ago • 0 comments

In the mitre_attack_overview.xml view (under "Drilldowns > MITRE ATT&CK" from the menu), clicking on a "process_path" cell redirects to the file_create_drilldown.xml view, with an empty list. This is due to the fact that the process_path field is incorrectly escaped. The Windows path should replace every \ with \\ to work. Manually doing the replacement for the path and refreshing the view works.

sebastiendamaye avatar Dec 21 '20 10:12 sebastiendamaye