// tool reference · Monitoring & Detection
MITRE ATT&CK Mapper Free
Map an observation to ATT&CK tactics and techniques.
What it does
Translates "what I saw" into ATT&CK tactics and techniques, so your write-up uses the vocabulary everyone else does.
When to use it
- Writing an incident report; building detection coverage maps.
Inputs
Field names are the actual form parameters, verified against source.
| Field | Type | Required | Notes |
|---|---|---|---|
| observation | textarea | required | What you observed, in plain language. |
What you get back
Candidate techniques with tactic and rationale.
How it works
Deterministic mapping against the ATT&CK matrix.
Privacy
Nothing is stored.
Standards
MITRE ATT&CK
Related tools
AI Detection-Engineering Studio
Turn a threat description or log sample into a Sigma detection rule, a SIEM query, false-positive tuning, and test cases.
AI Incident Report Writer
Turn incident facts and findings into a structured report — summary, timeline, impact, MITRE mapping, remediation.
Log Analyzer
Paste logs to detect brute-force, privilege escalation and malware indicators with MITRE mapping.