---
title: "MITRE ATT&CK Manual Job Configuration (Advanced Users Only)"
slug: "mitre-attack-manual-job-configuration"
description: "This article describes how Organization Administrators can configure a Job for the MITRE ATT&CK App manually after a System Administrator has installed the App."
tags: ["Administrator"]
updated: 2022-09-01T15:58:13Z
published: 2022-09-01T15:58:13Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MITRE ATT&CK Manual Job Configuration (Advanced Users Only)

Before following the steps listed in this article, verify that your System Administrator [installed the **MITRE ATT&CK™ 2.0.*x***App](/v1/docs/installing-the-mitre-attack-app) via TC Exchange™.

## Creating the MITRE ATT&CK Job

1. Log into ThreatConnect with an Organization Administrator account.
2. On the top navigation bar, hover the cursor over **Settings**![A picture containing text, clipart, light  Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-6a1j08e1.png) and select **Org Settings**. The **Membership** tab of the **Organization Settings** screen will be displayed.
3. Click the **Apps**tab. The **Jobs**view of the **Apps**screen will be displayed (Figure 1).

![Graphical user interface, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-lqz3ky7p.png)
4. Click **Add Job**![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-q49scxd4.png) at the top right of the table. The **Program** step of the **Add Job**drawer will be displayed (Figure 2).

![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-vffrl6e0.png)
  - **Job Name**: Enter a name (e.g., **MITRE ATT&CK**) for the Job.
  - **Run Program**: Select **MITRE ATT&CK**.NoteIf the **MITRE ATT&CK 1.1.*x*** App is also installed in your Organization and the Organization has permissions to run the App, two **MITRE ATT&CK** options will be listed in the **Run Program** dropdown menu. Select the second **MITRE ATT&CK** option to configure a Job for the **MITRE ATT&CK 2.0.*x*** App.
  - Click the **NEXT** button.
5. The **Parameters**step of the **Add Job**drawer will be displayed (Figure 3).

![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-gwhwt2vk.png)
  - **Api User**: Select an API user.
  - **Destination Owner**: Select the owner into which the MITRE ATT&CK****data objects are to be added.
  - **Data Types to Import**: Leave all checkboxes (**Attack Patterns**, **Intrusion Sets**, **Malware**, **Tactics**, **Tools**, and **Document with all Tags**) selected.
  - **Logging Level**: Select a logging level for the Job.
  - **Advanced Settings**: By default, the **MITRE ATT&CK 2.0.*x***App will delete Groups in the destination owner that are not included in the **MITRE ATT&CK**Source feed when the Job is run. To prevent this behavior, enter **delete_enabled=false**for this parameter.WarningIf the **Advanced Settings**parameter is left blank, the Job will delete Groups in the destination owner that are not included in the **MITRE ATT&CK** Source feed each time the Job is run.
  - Click the **NEXT** button.
6. The **Schedule**step of the **Add Job**drawer will be displayed (Figure 4).

![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-14rohwy9.png)
  - **Schedule**: Select the frequency of Job runs.
  - **At**: Select this option to schedule a specific time for Job runs, and use the corresponding field to enter the Job run time.
  - **Every**: Select this option to schedule Job runs to occur at intervals, and use the corresponding fields to set the specific frequency and interval.
  - Click the**NEXT**button.
7. The **Output**step of the **Add Job**drawer will be displayed (Figure 5).

![Graphical user interface, application, Word Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-z9noe7qj.png)
  - **Enable Notifications**: Select this checkbox to enable notifications on the results of Job runs. If this checkbox is not selected, none of the other options in this step will be available.
  - **Email Address**: Enter the email address to which notifications should be sent.
  - **Notify on Job Result**: Select the checkbox(es) for the type(s) of Job results for which notification emails should be sent.
  - **Attachments**: Select the **Include Log Files** checkbox to include log files in notification emails.
  - Click the **SAVE** button.
8. The **Jobs**view of the **Apps**screen will now display the **MITRE ATT&CK**Job.

## Activating and Running the MITRE ATT&CK Job

1. Toggle the switch in the **Active** column for the **MITRE ATT&CK**Job on to activate the Job (Figure 6). A message stating that the Job was successfully activated will be displayed in the lower-left corner of the screen.

![Graphical user interface, table Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-b14kyugx.png)
2. To add MITRE ATT&CK data objects to the destination owner immediately, run the Job by clicking **Run Job ![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/manual-job-configuration-advanced-users-only-image-xd2m2ggw.png)** in the **Options** column.
3. A window will be displayed prompting you to confirm whether you want to run the **MITRE ATT&CK** Job at this time. Click the **YES**button.
4. The **Start Time** column will display the time that the Job started running, and the **Last Execution**column will display a status of **Running** for the Job. After about two minutes, refresh the screen. The **Last Execution** column should display a status of **Completed**for the Job.
5. Navigate to the [**Browse**screen](/v1/docs/the-browse-screen) and confirm that the [MITRE ATT&CK data objects were added to the destination owner](/v1/docs/viewing-mitre-attack-data).

---

*ThreatConnect® is a registered trademark, and TC Exchange™ is a trademark, of ThreatConnect, Inc.**MITRE ATT&CK™ is a trademark of The MITRE Corporation.*

20119-05 v.03.A