Skip to content

Commit a836137

Browse files
committed
Update for new version
1 parent 7cd8380 commit a836137

File tree

1 file changed

+12
-13
lines changed

1 file changed

+12
-13
lines changed

README.md

Lines changed: 12 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,42 +1,41 @@
1-
# Splunk attack range reporting
1+
# Splunk Attack Range Reporting
22
A Splunk App for Attack Range Reporting. Provides dashboards for insights on your attack range simulations.
33

4-
5-
Splunk attack range repo can be found [here](https://github.com/splunk/attack_range)
4+
The Splunk Attack Range repo can be found [here](https://github.com/splunk/attack_range)
65

76
## What is it ?
8-
It is a Splunk app that provides dashboards that enable a user of Splunk attack range to have better view of what simulations run, relevant security content from other Splunk apps and overview of the available Atomic Red tests.
7+
It is a Splunk app that provides dashboards that enable a user of Splunk Attack Range to have better view of what simulations were run, relevant security content from other Splunk apps and overview of the available Atomic Red tests.
98

109
## Compatibility and dependencies
11-
v1.0.0 of the app is compatible with the below
10+
v1.0.x of the app is compatible with the following:
1211

13-
+ Splunk 8.0.x
12+
+ Splunk 8.x.x
1413
+ [Splunk Analytic Story execution v1.0](https://github.com/splunk/analytic_story_execution)
1514
+ [Splunk Security Content v1.0.x](https://splunkbase.splunk.com/app/3449/)
16-
+ [Security essentials v3.1.x](https://splunkbase.splunk.com/app/3435/)
15+
+ [Security Security Essentials v3.1.x](https://splunkbase.splunk.com/app/3435/)
1716

1817
### Dependencies
19-
v1.0.0 of the app has the following depencencies
18+
This application has the following depencencies:
2019

2120
+ [Punchcard - Custom Visualization](https://splunkbase.splunk.com/app/3129/)
22-
+ [Security essentials v3.1.x](https://splunkbase.splunk.com/app/3435/)
21+
+ [Splunk Security Essentials v3.x.x](https://splunkbase.splunk.com/app/3435/)
2322
+ [Status Indicator - Custom Visualization](https://splunkbase.splunk.com/app/3119/)
23+
+ [Sankey Diagram - Custom Visualization](https://splunkbase.splunk.com/app/3112/)
2424

2525
## What does it look like ?
2626

27-
Main dashboard is showing simulations run, users, hosts, MITRE ATT&CK tactics and techniques, tests executed and potential mapping with analytic stories.
27+
The Main dashboard gives you an overview of the simulations run, users, hosts, MITRE ATT&CK tactics and techniques, tests executed and potential mapping with analytic stories.
2828

2929
![Main Dashboard](appserver/static/docs/img/ar_main_dashboardv1.0.png?raw=true "Main Dashboard")
3030

31-
The second dashboard (Navigator) shows all the available atomic red tests and their potential mappings to security content. Reason it is "potential" is because the mapping is just been made based on the tactique referenced from the test and the security content. This does not necessarily mean that a specific atomic red test will detonate a detection. And this is where you should read more on what ATT&CK is all about :)
31+
The second dashboard (Navigator) shows all the available Atomic Red tests and their potential mappings to security content. The reason we categorize those as "potential" is because the mapping is simply made based on the MITRE tactic referenced in the test and the security content. This does not necessarily mean that a specific Atomic Red Test will trigger a particular detection. This is where you should read more on what ATT&CK is all about and how the Splunk [Security Content](https://research.splunk.com) maps to it. :)
3232

3333

3434
![Navigator](appserver/static/docs/img/ar_navigator_dashboardv1.0.png?raw=true "Navigator")
3535

36-
3736
Finally there is a dashboard made with Splunk dashboards - Beta which looks nice but still in beta !
3837

3938
![Main - Beta](appserver/static/docs/img/ar_dashboards_beta_preview.png?raw=true "Main-Beta")
4039

4140
## Contributors
42-
[Christian Cloutier](https://github.com/ccloutier-splunk)
41+
[Christian Cloutier](https://github.com/ccloutier-splunk)

0 commit comments

Comments
 (0)