This guide explains how to customize the display of attack chain steps in reports using a query string-like syntax.
Basic Structure
The token uses URL-style parameters separated by & characters. For example:
{AttackChain_Details?scenario=Scenario 1&group.1.title=Overview&group.1.fields=title,mitre_attack_tactic,mitre_attack_technique}Configuration Sections
1. Header Table (Optional)
Display key information at the top of each step:
header_table.title=Summary Table&
header_table.fields=title,severity&
header_table.cols=2&
2. Tables
Add tables anywhere in your layout:
table.1.title=Summary&
table.1.fields=severity,status&
table.1.cols=2&
3. Groups
Organize fields into logical groups:
group.1.title=Overview&
group.1.fields=title,description&
group.2.title=Details&
group.2.fields=mitre_attack_tactic,mitre_attack_technique&
4. Display Settings
Title Settings
setting.title.html_tag=h1&
setting.title.display_severity=true&
setting.title.show=true&
Layout Settings
Choose between table or headings layout:
setting.layout=table&
setting.layout=headings&
5. Filtering and Sorting (Optional)
Filter attack steps by various criteria:
setting.filter.type=attack&
You can filter them by attack, mitigation, goal or fact.
Important Note About Numbering
When using tables and groups, the numbers after table. and group. determine the overall order of appearance. These numbers should be distinct across both tables and groups. For example:
header_table... (always appears first)
group.1... (appears second)
table.2... (appears third)
group.3... (appears fourth)
Available Fields
6. Showing sequence (Optional)
There is also a parameter that can be used to select which scenario to include when you have multiple scenarios available and don't specify a name (starting from 1). This adds a scenario according to its order in the Attack Chains tab in the pentest. If you use the name of the scenario, this will be ignored
scenario_seq=1
Examples
Here's an example combining multiple settings:
{AttackChain_Details?
scenario=<scenario>&
group.1.fields=title,description&
group.2.title=Mitre Fields&
group.2.fields=mitre_attack_tactic,mitre_attack_technique,mitre_attack_mitigation&
setting.title.html_tag=h1&
setting.title.show=true&
setting.layout=headings&
setting.filter.type=attack&
setting.sort=timestamp&
}