MITRE ATT&CK Enterprise Analytic Observatory

Operational Tools

MITRE Coverage & Gap Assessment Tool

Use this playbook to check ATT&CK coverage fast, mark what you already detect, and share the gap summary with your leaders.

Launch the Tool

CTI→Detection Coverage Mapper

Map any threat actor or campaign to its ATT&CK techniques and instantly see which detections you already cover.

Launch the Tool

Detection Engineering Workbench

Run coverage reviews, align telemetry sources with ATT&CK, and pull MITRE detection strategy guidance per technique.

Launch the Tool

Purple Team & Adversary Simulation Board

Design purple team campaigns, track detections during exercises, and push misses back into your coverage plan.

Launch the Tool

Key Highlights

    Technique Coverage by Tactic

    Technique Coverage by Platform

    Software Technique Blast Radius

    Mitigation Hotspots

    Most Versatile Groups

    Interactive Data Explorer

    Type ID Name Domains Created Updated Details