• Added an exploratory icon link to the MITRE documentaon for each tacc and technique in the
technique coverage heat map.
• Added a Mapping enabled column to the lters and the report, which indicates that the mapping
between Cyber Adversary Framework Mapping app and QRadar is turned on. Mappings that are
disabled are not added to the technique coverage heat map.
• Added capabilies to the rule wizard to open the rule directly in the Cyber Adversary Framework
Mapping app for eding.
• Re-calibrated the heat map formula to use only enabled rules to calculate the heat map colors.
• Added a toolp to the MITRE ATT&CK lter page to remind users to set an authencaon token
for the Cyber Adversary Framework Mapping app.
• Added a column selecon opon for Tacc (at rule level) and Technique (at rule level) to show
only values that are mapped directly to the rule.
• Fixed an issue where the way QRadar handles incomplete rules causes some APIs in some product
versions to fail, and causes data inconsistencies in QRadar Use Case Manager.
• Fixed an issue where the log source type lter doesn't have any values in cases where there are more
than 50,000 log sources.
Version 2.0.0
• Added a rule explorer to lter rules by dierent properes, such as aributes, rule tests, and MITRE
ATT&CK taccs and techniques. Use lters to ensure that the rules are dened and working as
intended, including log source coverage. Determine which rules you might need to edit in QRadar or
invesgate further in QRadar Use Case Manager.
• Added the Cyber Adversary Framework Mapping app. With the Cyber Adversary Framework
Mapping app, you can map your custom rules and building blocks to MITRE ATT&CK taccs and
techniques and override the QRadar default rule mappings.
• Added MITRE ATT&CK taccs visualizaon and the ability to customize your mappings with the
Cyber Adversary Framework Mapping app.
• Made the following minor UI improvements:
• Added a wrench icon to any links and buons that lead to the invesgaon wizard.
• Added links for reference sets to open in QRadar.
12