Using the MITRE-ATT&CK dashboard

  • Release version: Australia
  • Updated March 12, 2026
  • 2 minutes to read

    • The MITRE-ATT&CK dashboard provides an executive view of the data source coverage, tactics, and techniques that are used in your organization.

    The MITRE-ATT&CK Overview module displays MITRE-ATT&CK information about security incidents including trends and reports. You can click any part of a widget (bar, data point, table, and so on) to view data that is specific to that part.

    The MITRE-ATT&CK Overview module shows four widgets.

    Use the MITRE-ATT&CK dashboard to see your security-related data

    Use the MITRE-ATT&CK dashboard to get an overview of the data source coverage, tactics, and techniques that are used in your organization.

    Before you begin

    Role required: sn_si.ciso, sn_si.analyst, sn_si.manager, sn_ti.read

    Procedure

    1. Navigate to All > Threat Intelligence > MITRE ATT&CK Repository > Overview.
    2. Click any of the following widgets to see additional details:
      • Security Incidents by MITRE-ATT&CK Technique
      • Security Incidents by MITRE-ATT&CK Tactic
      • Critical Assets with MITRE-ATT&CK Techniques
      • Security Incident Close Codes Vs MITRE-ATT&CK Techniques
      • MITRE-ATT&CK Techniques by Detection Coverage
      • MITRE-ATT&CK Techniques by Mitigation Coverage
      • Threat Groups by MITRE-ATT&CK Technique
      • CVEs by MITRE-ATT&CK Technique

    MITRE-ATT&CK widgets

    The MITRE-ATT&CK Overview module consists of widgets that enable you to correlate the MITRE-ATT&CK information with the security incident information in your environment.

    Example of Security Incidents by MITRE-ATT&CK Technique

    In this example, the Security Incidents by MITRE ATT&CK Technique widget displays the techniques by security incident in an organization's environment in the last 90 days.

    MITRE Overview Techniques.

    Example of Security Incidents by MITRE-ATT&CK Tactic

    In this example, the Security Incidents by MITRE ATT&CK Tactic widget displays the top tactics by security incident in an organization's environment in the last 90 days.

    MITRE Overview Tactics.

    Example of Critical Assets with MITRE-ATT&CK Techniques

    In this example, the Critical Assets with MITRE ATT&CK Techniques widget displays the top 10 critical assets that are associated with the MITRE-ATT&CK techniques. The assets have a business criticality of either 1 (most critical) or 2 (somewhat critical).

    This report enables an organization to see the types and number of techniques that are used in carrying attacks against the critical assets.

    MITRE Overview Configuration Items.

    Example of Security Incident Close Codes Vs MITRE-ATT&CK Techniques

    In this example, the Security Incident Close Codes Vs MITRE-ATT&CK Techniques widget displays the security incident close codes that were mapped against the identified top techniques in an organization's environment.

    The x-axis displays the top techniques that were used to carry attacks against the enterprise, and the y-axis displays the closed codes.

    MITRE overview of closed codes versus techniques.

    Example of detection coverage by MITRE-ATT&CK techniques

    In this example, the MITRE-ATT&CK Techniques by Detection Coverage widget displays the technique count by the detection coverage in your environment.

    The x-axis displays the technique count, and the y-axis displays the detection coverage types.

    This illustration shows the MITRE dashboards with the detection coverage information.

    Example of mitigation coverage by MITRE-ATT&CK techniques

    In this example, the MITRE-ATT&CK Techniques by Mitigation Coverage widget displays the technique count by the mitigation coverage in your environment.

    The x-axis displays the technique count, and the y-axis displays the mitigation coverage types.

    This illustration shows the MITRE dashboards with the mitigation coverage information.

    Example of threat groups by MITRE-ATT&CK techniques

    In this example, the Threat Groups by MITRE-ATT&CK Technique widget displays the techniques by the threat group count. This widget displays 20 techniques with the highest threat group count.

    The x-axis displays the threat group count, and the y-axis displays the MITRE-ATT&CK techniques.

    This illustration shows the MITRE dashboards with the threat group information.

    Example of CVEs by MITRE-ATT&CK techniques

    In this example, the CVEs by MITRE-ATT&CK Technique widget displays the techniques with the relevant CVE count in your environment.

    The x-axis displays the relevant CVE count, and the y-axis displays the MITRE-ATT&CK techniques.

    This illustration shows the MITRE dashboards with the CVE information.