diff --git a/bin/jinja2_templates/doc_playbooks_page_markdown.j2 b/bin/jinja2_templates/doc_playbooks_page_markdown.j2 index e50af7ff47..0ae001d7bd 100644 --- a/bin/jinja2_templates/doc_playbooks_page_markdown.j2 +++ b/bin/jinja2_templates/doc_playbooks_page_markdown.j2 @@ -11,5 +11,9 @@ sidebar: | Name | Detections | Type | | --------| ---------- | ----------- | {% for playbook in playbooks -%} +{% if playbook.tags.detections -%} | [{{ playbook.name }}](/playbooks/{{ playbook.name|lower|replace(' ', '_') }}/)|{% for detection in playbook.tags.detections -%}{% for d in detections -%}{% if d.name == detection -%}[{{ detection }}](/detections/{{ d.type }}/{{detection|lower|replace(" ", "_")}}){% endif -%}{%- endfor -%}{%- endfor -%} | {{ playbook.type }} | +{% else -%} +| [{{ playbook.name }}](/playbooks/{{ playbook.name|lower|replace(' ', '_') }}/)| None | {{ playbook.type }} | +{% endif -%} {%- endfor -%} diff --git a/docs/_pages/playbooks.md b/docs/_pages/playbooks.md index 138b2993a5..37e7e87ba5 100644 --- a/docs/_pages/playbooks.md +++ b/docs/_pages/playbooks.md @@ -10,4 +10,4 @@ sidebar: | Name | Detections | Type | | --------| ---------- | ----------- | -| [Ransomware Investigate and Contain](/playbooks/ransomware_investigate_and_contain/)|[Conti Common Exec parameter](/detections/TTP/conti_common_exec_parameter)| Response | \ No newline at end of file +| [Ransomware Investigate and Contain](/playbooks/ransomware_investigate_and_contain/)|[Conti Common Exec parameter](/detections/TTP/conti_common_exec_parameter)| Response | diff --git a/docs/_posts/2020-11-03-reconnaissance_of_credential_stores_and_services_via_mimikatz_modules.md b/docs/_posts/2020-11-03-reconnaissance_of_credential_stores_and_services_via_mimikatz_modules.md index 94eff803ce..106de94fd7 100644 --- a/docs/_posts/2020-11-03-reconnaissance_of_credential_stores_and_services_via_mimikatz_modules.md +++ b/docs/_posts/2020-11-03-reconnaissance_of_credential_stores_and_services_via_mimikatz_modules.md @@ -59,7 +59,6 @@ This detection identifies reconnaissance of credential stores and use of CryptoA | ID | Technique | Tactic | | ----------- | ----------- | ----------- | -| [T1098](https://attack.mitre.org/techniques/T1098/) | Account Manipulation | Persistence | | [T1590.001](https://attack.mitre.org/techniques/T1590/001/) | Domain Properties | Reconnaissance | | [T1078](https://attack.mitre.org/techniques/T1078/) | Valid Accounts | Defense Evasion, Persistence, Privilege Escalation, Initial Access | | [T1589.001](https://attack.mitre.org/techniques/T1589/001/) | Credentials | Reconnaissance |