attack-workbench-rest-api/app/api/definitions/components/system-configuration.yml at ffe610efadf9fe067c638ac9866442a81b9f21b5 · mitre-attack/attack-workbench-rest-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
components:
  schemas:
    system-version:
      type: object
      properties:
        version:
          type: string
          description: Version of the REST API software
        attackSpecVersion:
          type: string
          description: ATT&CK spec version of the REST API software

    allowed-values:
      type: object
      properties:
        objectType:
          type: string
          example: 'technique'
        properties:
          $ref: '#/components/schemas/allowedValuesForProperty'

    allowedValuesForProperty:
      type: array
      items:
        type: object
        properties:
          propertyName:
            type: string
            example: 'x_mitre_platforms'
          domains:
            $ref: '#/components/schemas/allowedValuesForDomain'

    allowedValuesForDomain:
      type: array
      items:
        type: object
        properties:
          domainName:
            type: string
            example: 'enterprise-attack'
          allowedValues:
            type: array
            items:
              type: string
              example: 'Linux'

    organization-identity:
      type: object
      properties:
        id:
          type: string
          example: 'identity--76abfbed-a92f-4e2a-953e-dc83f90ecddc'

    authn-mechanism:
      type: object
      properties:
        authnType:
          type: string
          example: 'oidc'

    default-marking-definition-ids:
      type: array
      items:
        type: string
        example: 'marking-definition--a0262641-9222-4e26-b5f5-f44c59fb3230'

    organization-namespace:
      type: object
      properties:
        range_start:
          type: number
          example: 4000
        prefix:
          type: string
          example: 'MYORG'

    mitre-identity-writes:
      type: object
      required:
        - enabled
      properties:
        enabled:
          type: boolean
          description: Whether create and update requests for the protected MITRE identity are enabled.
          example: false

    validation-bypass-rule:
      type: object
      required:
        - fieldPath
        - errorCode
        - stixType
      properties:
        _id:
          type: string
          description: Database id of the validation bypass rule
        fieldPath:
          type: array
          description: Zod issue path to match. Path segments are compared as strings.
          items:
            type: string
          example: ['x_mitre_modified_by_ref']
        errorCode:
          type: string
          description: Zod issue code to match.
          example: 'invalid_value'
        stixType:
          type: string
          description: STIX type to match, or `all` to match any STIX type.
          example: 'attack-pattern'
        suppressError:
          type: boolean
          description: Whether matching validation errors should be suppressed.
          default: true
        autoCreated:
          type: boolean
          description: Whether this rule was created automatically by system configuration.
          default: false
        autoCreatedReason:
          type: string
          nullable: true
          description: System reason for an automatically-created rule.
          example: 'static'
        triggerEvent:
          type: string
          nullable: true
          description: Event that created this rule, when applicable.
        warningMessage:
          type: string
          nullable: true
          description: Warning emitted when a matching validation error is bypassed.