View Intel Heat Map
The heatmap displays tactics and techniques based on threat intel submissions from the Member Portal. While creating and sharing threat intel, the members can fill in the tactic and technique details that correspond to the intel. The intel submissions are correlated and mapped in the Intel ATT&CK Navigator.
For example, if you select Privilege Escalation as the tactic and Access Token Manipulation as the technique while creating and sharing intel, the same can be visualized in the Intel Heat Map.
The columns in the heatmap are organized based on tactics defined by MITRE. The number of times a particular tactic is reported in intel submission is displayed near the tactic name.
The rows in the heat map are organized based on techniques defined by MITRE. The number of times a particular technique is reported in intel is displayed near the technique name.
Before you Start
You must have the View, Create, and Update permissions to access ATT&CK Navigator.
From the Main Menu, go to ATT&CK Navigator, and select Intel Heat Map.
Select a tactic to view the list of intel submissions associated with the tactic.
Select a technique to view the list of intel submissions associated with the tactic and technique pair.
Select a sub-technique to view the list of intel submissions associated with the corresponding tactic, technique, and sub-technique.
Select the ATT&CK Matrix type (Enterprise, ICS, and Mobile) to view the corresponding intel submissions.