Remove duplicate TTPs

f-bader · Nov 17, 2023 · 2139367 · 2139367
1 parent 637d0d7
commit 2139367
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/public/Convert-SentinelARYamlToArm.ps1 b/src/public/Convert-SentinelARYamlToArm.ps1
@@ -268,11 +268,21 @@ function Convert-SentinelARYamlToArm {
             $ARMTemplate.techniques = $ARMTemplate.techniques | Where-Object { Test-MITRETechnique $_ }
         }
 
+        # Remove duplicate techniques
+        if ($ARMTemplate.techniques) {
+            $ARMTemplate.techniques = $ARMTemplate.techniques | Sort-Object -Unique
+        }
+
         # Remove any invalid or non-existent tactics from the tactics array
         if ($ARMTemplate.tactics) {
             $ARMTemplate.tactics = $ARMTemplate.tactics | Where-Object { Test-MITRETactic $_ }
         }
 
+        # Remove duplicate tactics
+        if ($ARMTemplate.tactics) {
+            $ARMTemplate.tactics = $ARMTemplate.tactics | Sort-Object -Unique
+        }
+
         # Convert hashtable to JSON
         $JSON = $ARMTemplate | ConvertTo-Json -Depth 99
         # Use ISO8601 format for timespan values