ATT&CK-guided workflows: 1,412 investigate and respond runbooks
For each of 706 MITRE ATT&CK techniques and sub-techniques there is an Investigate and a Respond workflow generated from MITRE data. Every one is manual: an analyst approves, nothing runs by itself.
Status
Available
Implemented and covered by automated tests.
Good to know
Generated from templates plus per-technique data, not hand-written per technique. MITRE ATT&CK is (c) The MITRE Corporation, used under the ATT&CK Terms of Use.
See it on your own alerts.
Book a walkthrough with the team. We will show the platform end to end, tell you what is production-ready and what is not, and discuss how it would sit next to your existing SIEM.