Threat intelligence workbench · version 20

CVE → MITRE ATT&CK Mapper

Enter one or more CVE IDs to retrieve vulnerability details and surface candidate ATT&CK Enterprise techniques. Every proposed mapping is labeled with its evidence source. /by Anas LACHHAB

Separate IDs with commas, spaces, or new lines.

Results

ATT&CK v20 technique metadata is retrieved from the official MITRE ATT&CK STIX dataset. CVE details come from NVD; known exploited status comes from CISA KEV. A technique is only suggested when the available vulnerability text gives a defensible behavioral clue.

Your analysis will appear here.