mitre-attack

What problem does it solve?

Local MITRE ATT&CK data is often accessed via external APIs or manual lookups. This Skill provides an offline reference to query techniques, groups, software, and mitigations from mitre-attack/enterprise-attack.json.

Core Features & Use Cases

• Offline access to ATT&CK objects (techniques, intrusion-sets, software, mitigations) to support threat modeling, incident investigations, and mapping activities.
• Simple query workflows to locate techniques by ID, map groups to techniques, and export structured results for reporting.
• Use Case: Build an internal ATT&CK reference navigator that works without network calls or API keys.

Quick Start

Ensure mitre-attack.json is present and run a sample query to retrieve a technique by ID.