{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44134,"path":"security-management/mitre-dashboards.md","title":"Using the MITRE-ATT&CK dashboard","bundle":null,"doc_type":null,"release":"australia","body":"\n# Using the MITRE-ATT&CK dashboard\n\nThe MITRE-ATT&CK dashboard provides an executive view of the data source coverage, tactics, and techniques that are used in your organization.\n\nThe MITRE-ATT&CK Overview module displays MITRE-ATT&CK information about security incidents including trends and reports. You can click any part of a widget \\(bar, data point, table, and so on\\) to view data that is specific to that part.\n\n\\[Omitted image \"mitre-overview-reports.png\"\\] Alt text: The MITRE-ATT&CK Overview module shows four widgets.\n\n**Parent Topic:**[Using MITRE-ATT&CK to detect and analyze threats](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/mitre-att-ck-features.md)\n\n**Related topics**  \n\n\n[Associate MITRE-ATT&CK information with security incidents]()\n\n[Associate MITRE-ATT&CK information with observables]()\n\n[Associate MITRE-ATT&CK information with security case]()\n\n[Rollup MITRE-ATT&CK information using Threat Lookup results]()\n\n[Rollup MITRE-ATT&CK information from detection rules]()\n\n[Rollup MITRE-ATT&CK information from child security incidents]()\n\n[Perform link analysis and threat hunting using MITRE-ATT&CK specific filters]()\n\n[MITRE-ATT&CK heat map and navigator]()\n\n## Use the MITRE-ATT&CK dashboard to see your security-related data\n\nUse the MITRE-ATT&CK dashboard to get an overview of the data source coverage, tactics, and techniques that are used in your organization.\n\n### Before you begin\n\nRole required: sn\\_si.ciso, sn\\_si.analyst, sn\\_si.manager, sn\\_ti.read\n\n### Procedure\n\n1.  Navigate to **All** > **Threat Intelligence** > **MITRE ATT&CK Repository** > **Overview**.\n\n2.  Click any of the following widgets to see additional details:\n\n    -   Security Incidents by MITRE-ATT&CK Technique\n    -   Security Incidents by MITRE-ATT&CK Tactic\n    -   Critical Assets with MITRE-ATT&CK Techniques\n    -   Security Incident Close Codes Vs MITRE-ATT&CK Techniques\n    -   MITRE-ATT&CK Techniques by Detection Coverage\n    -   MITRE-ATT&CK Techniques by Mitigation Coverage\n    -   Threat Groups by MITRE-ATT&CK Technique\n    -   CVEs by MITRE-ATT&CK Technique\n\n## MITRE-ATT&CK widgets\n\nThe MITRE-ATT&CK Overview module consists of widgets that enable you to correlate the MITRE-ATT&CK information with the security incident information in your environment.\n\n### Example of Security Incidents by MITRE-ATT&CK Technique\n\nIn this example, the **Security Incidents by MITRE ATT&CK Technique** widget displays the techniques by security incident in an organization's environment in the last 90 days.\n\n\\[Omitted image \"mitre-reports-techniques.png\"\\] Alt text: MITRE Overview Techniques.\n\n### Example of Security Incidents by MITRE-ATT&CK Tactic\n\nIn this example, the **Security Incidents by MITRE ATT&CK Tactic** widget displays the top tactics by security incident in an organization's environment in the last 90 days.\n\n\\[Omitted image \"mitre-reports-tactics.png\"\\] Alt text: MITRE Overview Tactics.\n\n### Example of Critical Assets with MITRE-ATT&CK Techniques\n\nIn this example, the **Critical Assets with MITRE ATT&CK Techniques** widget displays the top 10 critical assets that are associated with the MITRE-ATT&CK techniques. The assets have a business criticality of either 1 \\(most critical\\) or 2 \\(somewhat critical\\).\n\nThis report enables an organization to see the types and number of techniques that are used in carrying attacks against the critical assets.\n\n\\[Omitted image \"mitre-reports-cis.png\"\\] Alt text: MITRE Overview Configuration Items.\n\n### Example of Security Incident Close Codes Vs MITRE-ATT&CK Techniques\n\nIn this example, the **Security Incident Close Codes Vs MITRE-ATT&CK Techniques** widget displays the security incident close codes that were mapped against the identified top techniques in an organization's environment.\n\nThe x-axis displays the top techniques that were used to carry attacks against the enterprise, and the y-axis displays the closed codes.\n\n\\[Omitted image \"mitre-reports-codes.png\"\\] Alt text: MITRE overview of closed codes versus techniques.\n\n### Example of detection coverage by MITRE-ATT&CK techniques\n\nIn this example, the **MITRE-ATT&CK Techniques by Detection Coverage** widget displays the technique count by the detection coverage in your environment.\n\nThe x-axis displays the technique count, and the y-axis displays the detection coverage types.\n\n\\[Omitted image \"mitre-reports-detection.png\"\\] Alt text: This illustration shows the MITRE dashboards with the detection coverage information.\n\n### Example of mitigation coverage by MITRE-ATT&CK techniques\n\nIn this example, the **MITRE-ATT&CK Techniques by Mitigation Coverage** widget displays the technique count by the mitigation coverage in your environment.\n\nThe x-axis displays the technique count, and the y-axis displays the mitigation coverage types.\n\n\\[Omitted image \"mitre-reports-mitigation.png\"\\] Alt text: This illustration shows the MITRE dashboards with the mitigation coverage information.\n\n### Example of threat groups by MITRE-ATT&CK techniques\n\nIn this example, the **Threat Groups by MITRE-ATT&CK Technique** widget displays the techniques by the threat group count. This widget displays 20 techniques with the highest threat group count.\n\nThe x-axis displays the threat group count, and the y-axis displays the MITRE-ATT&CK techniques.\n\n\\[Omitted image \"mitre-reports-threat.png\"\\] Alt text: This illustration shows the MITRE dashboards with the threat group information.\n\n### Example of CVEs by MITRE-ATT&CK techniques\n\nIn this example, the **CVEs by MITRE-ATT&CK Technique** widget displays the techniques with the relevant CVE count in your environment.\n\nThe x-axis displays the relevant CVE count, and the y-axis displays the MITRE-ATT&CK techniques.\n\n\\[Omitted image \"mitre-report-cve.png\"\\] Alt text: This illustration shows the MITRE dashboards with the CVE information.\n\n"}}