redcanaryco
ATT&CK version comparison is incorrect
ATT&CK v11 just came out: https://github.com/mitre/cti/releases/tag/ATT%26CK-v11.0
but the extension doesn't recognize the new version
...
[2022-04-25T21:37:51.137Z] Checking extension cache for MITRE ATT&CK mapping.
[2022-04-25T21:37:51.530Z] Nothing to do. Cached version is on latest ATT&CK version 9.0
...
Did some troubleshooting on this @rctgardner , looks like the enterprise-attack.9.0.json gets downloaded even when you clear the cache.
Thanks for adding that @ForensicITGuy ! I bet this is a string sorting vs number sorting problem, and '9' is getting sorted ahead of '10'. I'll try to address this soon
Maybe using the compare-versions package be a quick way to patch this.
And maybe a long-term it might be worth having a setting available for users to specify which ATT&CK version they want to use.
