skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

mitre

Map security findings to MITRE ATT&CK tactics and techniques.

12|1|Updated Feb 9, 2026
Search Tags:#cybersecurity#threat intelligence#vulnerability mapping#mitre att&ck#security findings#attack chains
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill mitre
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mitre
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/mitre
Command: npx skills add https://github.com/florianbuetow/claude-code --skill mitre

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps security analysts understand how identified vulnerabilities or security findings map to real-world attacker behaviors and techniques within the MITRE ATT&CK framework.

Core Features & Use Cases

  • MITRE ATT&CK Mapping: Correlates security findings (CWE, OWASP, STRIDE) to specific ATT&CK tactics and techniques.
  • Attack Chain Analysis: Visualizes potential attack paths by chaining related findings.
  • Use Case: After running a vulnerability scan, use this skill to see which ATT&CK techniques the discovered vulnerabilities could enable, providing context for threat prioritization.

Quick Start

Map the security findings from the previous analysis step to MITRE ATT&CK techniques with deep enrichment.

Frequently Asked Questions about mitre

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map security findings to MITRE ATT&CK tactics and techniques?▼

Map security findings to MITRE ATT&CK techniques by correlating vulnerability data from CWE, OWASP, and STRIDE references against known attacker behaviors. This process normalizes your input sources and enriches them with threat actor TTPs for threat prioritization.

Can I use vulnerability scan results to visualize potential attack chains?▼

Visualize potential attack chains by chaining related security findings mapped to MITRE ATT&CK techniques. This attack chain analysis helps trace attacker paths through correlated vulnerabilities, providing context for prioritizing threats.

What input formats are supported for normalizing security findings?▼

Supported inputs include conversation context, findings files, and user-specified file paths. The skill normalizes this security data based on CWE, OWASP, and STRIDE references before mapping them to the MITRE ATT&CK framework.

How does mapping vulnerabilities to ATT&CK techniques help with threat intelligence?▼

Mapping vulnerabilities to ATT&CK techniques enriches security findings with threat intelligence by identifying real-world threat actor TTPs. This correlation helps security analysts understand which attacker behaviors their discovered vulnerabilities could enable.

Do I need specific dependencies installed to analyze security findings with this approach?▼

No external dependencies are required to map security findings to MITRE ATT&CK techniques. The skill operates independently using internal references to normalize CWE, OWASP, and STRIDE data for attack chain analysis.

What is the best way to prioritize vulnerabilities using threat actor TTPs?▼

Prioritize vulnerabilities by mapping security findings to MITRE ATT&CK techniques to reveal associated threat actor TTPs. Correlating CWE, OWASP, and STRIDE data with attack chain analysis provides the context needed for effective threat prioritization.

Related Skills

Explore More Software Engineering Skills→
igbuendigbuend
8

sarif-issue-reporter

Analyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.

Community
Advanced
chenchunrunchenchunrun
1

ttp-extractor

Extract MITRE ATT&CK techniques from security reports and generate Sigma rules.

Community
Advanced
MHaggisMHaggis
471

ATT&CK Navigator Layer Generator

Generate MITRE ATT&CK Navigator JSON layers for detection coverage and gap analysis.

Community
Intermediate
R2W1csR2W1cs
1

red-team-tactics

Simulate attacker tactics mapped to MITRE ATT&CK framework phases.

Community
Advanced