IBM Security QRadar SOAR

 View Only
  • 1.  Mitre Attack Framework Integration

    Posted Thu May 16, 2019 11:48 AM
    I am trying to integrate mitre attack framework on Resilient systems. However, i got some ssl verify error. I dont have any problem with proxy while is it possible to edit "ssl verify = false" ? If the answer is yes, where is the scripts ?

    >>>
    -bash-4.2$
    -bash-4.2$
    -bash-4.2$ python
    Python 2.7.15 (default, Aug 1 2018, 05:43:52)
    [GCC 4.8.5 20150623 (Red Hat 4.8.5-28)] on linux2
    Type "help", "copyright", "credits" or "license" for more information.
    >>>
    -bash-4.2$
    -bash-4.2$
    -bash-4.2$
    -bash-4.2$

    ------------------------------
    ozan karaduman
    ------------------------------


  • 2.  RE: Mitre Attack Framework Integration

    Posted Fri May 17, 2019 04:08 AM
    Hi Ozan,
    Thank you for contacting us. 

    Could you post the error you are currently seeing with this. One possible reason could be the certificate verification which the integration server performs if the `cafile` app.config value is not set to false.

    ------------------------------
    Ryan Gordon
    Security Software Engineer
    IBM
    ------------------------------



  • 3.  RE: Mitre Attack Framework Integration

    Posted Thu May 23, 2019 01:53 AM
    I solved the problem, our internet exist will be deploy with ssl encryption. You have to add the mitre's website on your trusted certificate. And will see that solving problem.

    ------------------------------
    ozan karaduman
    ------------------------------



  • 4.  RE: Mitre Attack Framework Integration

    Posted Fri May 15, 2020 03:33 PM
    Did you solve this problem by downloading the certificate file for cti-taxii.mitre.org and adding another cafile line in app.config underneath your cafile for resilient? Currently experiencing the same issue.

    ------------------------------
    Jason Jemmott
    Cyber Security Analyst
    Fannie Mae
    ------------------------------