---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Associate MITRE ATLAS information with security incidents

# Associate MITRE ATLAS information with security incidents {#ariaid-title1}

Release version: Australia  
Updated August 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Associate MITRE ATLAS tactics and techniques with a security incident for better security incident and threat analysis.

## Before you begin

Role required: sn_si.analyst

## Procedure

1. Navigate to AllSecurity IncidentsShow All Incidents.
2. Select the security incident to enrich with MITRE ATLAS information.
3. Select the Associate MITRE Technique related link.  
   The Associate MITRE Technique pane appears.
4. Select Source.  
   Note:  
   If the MITRE ATLAS collection is activated, it appears in the source list alongside MITRE-ATT\&CK sources.
5. Select the Tactic and Techniques.
6. **Optional:** Review the information based on relevance and remove sources, tactics, or techniques as needed.
7. Select Save.

## Result

The MITRE ATLAS information is associated with the security incident. You can now view the associated information in the MITRE-ATT\&CK Card.

*[\>]: and then