MITRE × Tines

Generate MITRE ATT&CK technique and tactic tags for security alerts using a send to story. Add the MITRE ATT&CK tags to new Tines cases using a webhook, or old cases.

Tools: MITRE

Retrieve objects from specified MITRE ATT&CK collections using TAXII. Post a Slack message with details on any new objects.

Tools: MITRE, Slack

Filter cases in your tenant using a Tines page. Access a MITRE ATT&CK Navigator page showing techniques color-coded by the number of associated cases.

Tools: MITRE

This workflow creates an index of the MITRE ATT&CK framework in Elasticsearch with semantic search capabilities. It enables analysts to efficiently search and correlate MITRE techniques to an alert or ticket description even when exact keywords aren’t used. This enhances threat detection, incident response, and security strategy by providing deeper insights into potential threats.

Tools: Elastic, MITRE