center-for-threat-informed-defense / tram

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Home Page:https://ctid.mitre-engenuity.org/our-work/tram/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Upload Report completion

dmange3190 opened this issue · comments

How long it takes for the queued report to reach completion ?

Hello @dmange3190 it should only take a minute. If the report is stuck in QUEUED, then there is a problem with the processing pipeline. Are you running TRAM via docker or runserver?

Since you are running TRAM via docker, if the pipeline is not working then there might be a TRAM-level bug. If you think this is the case I can tell you how to get logs off the system to troubleshoot.

You have to manually accept all of the parsed sentences. The workflow that TRAM was designed around is that the AI/ML proposes mappings, but a human analyst needs to validate/accept them.

I think I am facing the same problem when using docker-compose. After I submit the pdf, it perpetually stays in "Queued" status. Sometimes, after restarting the portal with docker-compose, it generates the report but not sure if it completed its job.