Clone a Layer
CTIX enables you to clone layers to monitor custom projects and adversaries. You can clone multiple layers.
To clone a new layer, do the following:
From Main Menu, select ATT&CK Navigator under Analysis.
Click + to add a new layer, and select one from the following:
New MITRE Layer - Clones the MITRE framework and creates a layer.
New Custom Base Layer - Clones the custom base layer framework and creates a layer.
Click the ellipsis(...) and choose from the following:
Select Rename to add a custom name for the layer.
Select Share to define with whom to share the layer.
You can choose to share the layer with specific users, all users, or with no one.
Select Close Tab to close and exit the layer.
CTIX generates a message stating that the changes have not been saved and prompts you to save the changes.
To customize the layer based on the platform, MITRE threat actors, software, log data sources, and mitigations, select the appropriate filters.
Select the techniques specific to your project or adversary.
Select from the following options as required:
To display only the selected techniques, click Hide Unselected.
To change the color theme of the ATT&CK table, click the paint bucket.
To add a custom technique, click + Add Custom Technique.
For more information about adding a custom technique, see Add a Custom Technique.
Click Save.
The layer is now saved and is pinned by default.