Public analyst tools using MITRE ATT&CK and attributed indicator datasets. Free, no signup and no tracking. Check each dataset’s timestamp and coverage before using its results.
Look up APT groups, map shared TTPs, and export an ATT&CK Navigator layer.
Pick one or more threat groups (APT41, FIN7, Lazarus, ...) and instantly see every MITRE ATT&CK technique they share. Heat-mapped matrix, per-group profile, mind-map and kill-chain Flows views. Exports a Navigator layer JSON ready for the official ATT&CK Navigator.
Explore available malware-family indicators linked to ATT&CK groups.
Aggregates available malware-family IOCs linked to MITRE ATT&CK groups from abuse.ch ThreatFox + MalwareBazaar. Toggle between a per-group view and a deduplicated master list, with one-click copy by indicator type. Family-attributed; refreshed on a schedule.
Direct access to ATT&CK technique profiles, malware families, and reporting history: