ATT&CK Navigator
Definition
A free, browser-based visualisation tool from MITRE that renders the ATT&CK matrix as an interactive heat map. Teams use it to annotate techniques with colours representing detection coverage, alerting capability, or threat group attribution.
- Publisher
- MITRE
- Cost
- Free
- Interface
- Browser-based
- Output
- Interactive heat map of the ATT&CK matrix
- Common uses
- Detection coverage, alerting capability, threat group attribution
Common questions
What does a colour-coded cell in ATT&CK Navigator actually represent?+
Each cell corresponds to a specific adversary technique in the ATT&CK matrix, and the colour applied to it is user-defined, most often representing whether the organisation has detection or alerting coverage for that technique, or whether a known threat group uses it.
How do threat hunting teams use Navigator layers together?+
Teams build one layer showing detection coverage and another showing techniques associated with a specific threat group, then overlay or compare them to see which of that group's likely techniques would currently go undetected, guiding where hunting or new detections should focus.
Related terms
- Sub-Technique
- A finer-grained variation of a technique, identified with a decimal suffix such as T1059.001 for PowerShell under the Command and Scripting Interpreter...
- Tactic
- The adversary's high-level objective at a given stage of the attack: for example, Initial Access, Execution, Persistence, Privilege Escalation, or Exfiltration. ATT&CK...
- Technique
- A specific method an adversary uses to achieve a tactic. Each technique has a unique identifier such as T1059 (Command and Scripting...
- Threat Group Profile
- An ATT&CK entry for a named threat actor, listing the techniques attributed to that group based on public reporting. Analysts use group...
- TTP (Tactics, Techniques, and Procedures)
- The full description of how an adversary operates. Tactics are goals, techniques are methods, and procedures are the specific implementation details, such...