PRIMARY SOURCE THREAT INTELLIGENCE
MITRE ATT&CK Enterprise Matrix Heatmap
Interactive visual navigation across all 14 Enterprise Tactics. Techniques are dynamically shaded based on legal evidence citations across federal indictments and CISA advisories.
Citation Heatmap:
0 cases 1-2 3-5 High Density (6+)
Initial Access
9 techniques
T1190 20
Exploit Public-Facing Application
T1566.001 10
Spearphishing Attachment
T1566.002 8
Spearphishing Link
T1566.004 3
Spearphishing Voice
T1195.002 2
Compromise Software Supply Chain
T1133 1
External Remote Services
T1195.001 1
Compromise Software Dependencies and Development Tools
T1078.004
Cloud Accounts
T1566
Phishing
Execution
6 techniques
Persistence
9 techniques
T1574.002 2
DLL Side-Loading
T1053.005 1
Scheduled Task
T1547.001 1
Registry Run Keys / Startup Folder
T1543.003 1
Windows Service
T1546.003 1
Windows Management Instrumentation Event Subscription
T1505.003 1
Web Shell
T1574.006 1
Dynamic Linker Hijacking
T1098
Account Manipulation
T1542
Pre-OS Boot
Privilege Escalation
2 techniques
Defense Evasion
12 techniques
T1078 42
Valid Accounts
T1562.001 3
Disable or Modify Tools
T1055 3
Process Injection
T1070 2
Indicator Removal
T1027 1
Obfuscated Files or Information
T1055.012 1
Process Hollowing
T1036 1
Masquerading
T1036.005 1
Match Legitimate Name or Location
T1112 1
Modify Registry
T0806 1
Brute Force I/O
T0831 1
Manipulation of Control
T0858 1
Change Operating Mode
Credential Access
9 techniques
Discovery
10 techniques
T1082 1
System Information Discovery
T1087 1
Account Discovery
T1083 1
File and Directory Discovery
T1057 1
Process Discovery
T1046 1
Network Service Discovery
T1007 1
System Service Discovery
T1018 1
Remote System Discovery
T1016 1
System Network Configuration Discovery
T1033 1
System Owner/User Discovery
T1124 1
System Time Discovery
Lateral Movement
6 techniques
Collection
8 techniques
Command and Control
10 techniques
Exfiltration
5 techniques
Impact
8 techniques
Resource Development
3 techniques
Reconnaissance
0 techniques