See where your defenses miss threat group attacks.
What it does
Maps threat groups' attack techniques into visual layers and comparisons that reveal detection gaps.
When to use it
Use for incident investigations, detection-rule development, threat hunting, or validation of security monitoring coverage.
How to use it
Give it APT group names; it produces Navigator layer files and analysis of shared techniques and detection gaps.
What you provide
- APT group names
Uses
MA
Latest review
What you need · 6
Requires Python 3.9 or later.
Lists attackcti as a required Python library and uses it to query ATT&CK groups and techniques.
Lists mitreattack-python as a required Python library.
Access · 1
This skill
ATT&CK TAXII server
Read
Queries ATT&CK threat intelligence