A tool for visualizing and analyzing tactics and techniques mapped to the MITRE ATT&CK framework. It provides an overview of observed attack tactics and techniques attempted over the selected timeframe in your organization. The selected timeframe can be adjusted by selecting the required option from the Show drop-down menu. The Search box allows you to quickly find a specific tactic by typing its name in the Search box.
The Focused view toggle switch On and Off represents the following
On [Default] — When the Focused View switch is in the default On position, only those tactics that were attempted in the selected time period are shown in the grid.
Off — When the switch is in the Off position, the tactics that were attempted outside of the selected time period are also displayed, but they are not displayed.
Expand All, Collapse All — View more or fewer details about the tactics.
Click on any technique or sub-technique tile, a tooltip is displayed. The tool tip provides quick access to relevant details of each technique or sub-technique without navigating away from the grid. It contains details as follows:
Technique or sub-technique ID for a quick reference or look up to the detailed information.
Provides a quick understanding of the technique or sub-technique, including its purpose and context.
The Go to MITRE ATT&CK link navigates you to the MITRE organization official page and provides complete information about specific technique or sub-technique.
The number of hosts affected or associated with the technique or sub-technique.
The number of alerts. Click on the alert count to read about technique or sub-technique.