共用方式為

Microsoft Threat Analysis and Modeling (TAM) v3.0 Intelligent TFS sync feature

  • 發行項

Syed Aslam Basha here from the Information Security Tools team.

In the previous blog post we have highlighted feature list of TAM V3.0 (For more information  on complete set of features in TAM 3.0 refer the blog post here.) Here I am going to show “Intelligent TFS sync” feature.

Intelligent TFS Sync – TFS Export in v2.1 did not provide a way to consolidate countermeasures across multiple components. TAM v3.0 includes complete TFS field mapper which provides a new UI to map TFS fields to CTL Fields allowing proper export across different TFS process templates.  The exported work item references are stored in the threat model which helps users avoid exporting the same countermeasure twice.

Steps to Export.,

  1. Launch TAM v3.0
  2. Click on File – > New
  3. Create a threat model
  4. Click on Tools – > Generate threats
  5. Click on Tools – > Visual studio – > Export as Team systems work items
    TFSSync2
  6. Select Export to Visual studio Team foundation server plug-in, click on next
    TFSSync3
  7. Enter server name (example https://servername:8080) and project name in the respective text boxes
    TFSSyn4
  8. Click on Connect
  9. Click on Change filed mapping
  10. Select work item type as bug and check the show only required fields checkbox
    TFSSync5
  11. Select/Enter appropriate values in application, Assigned to, Found in environment, reason, severity, state steps to reproduce, symptom, title and type and click on save
  12. Select the items you want to export and click on export
    TFSSync6
  13. Export complete message is shown.
  14. Click on close
  15. Click on Finish
  16. Now comes the interesting part, if you revisit and want to export more task items, now it will show only the items which are not in TFS
    TFSSync7
  17. If you want to export all items irrespective of they are exported to TFS or not, check export all task items check box. It will show all task items.
  18. Click on export button.
  19. Click on Close.
  20. Click on Finish.

  -Syed Aslam Basha ( syedab@microsoft.com )

Microsoft Information Security Tools (IST) Team

Test Lead