💡 [REQUEST] - Allow execution of multiple TTPs in a single command

[viyatb]

Implementation PR

No response

Reference Issues

No response

Summary

It would nice to run a bunch of ttps under a MITRE ATT&CK stage ttpforge run forgearmory//exfiltration for daily/weekly automation.

At the moment, the you have to list all the ttps by ttpforge list ttps --repo <repo> and then run them individually.

Basic Example

ttpforge run forgearmory//exfiltration

Drawbacks

Unresolved questions

No response

[l50]

Hey,

This request isn’t exactly a one-to-one match with chaining using sub-TTPs, but this example might be a helpful starting point:
https://github.com/facebookincubator/TTPForge/blob/main/example-ttps/chaining/basic.yaml