The U.S. Cybersecurity & Infrastructure Security Agency has released ‘Decider,’ an open-source tool that helps defenders and security analysts quickly generate MITRE ATT&CK mapping reports.
CISA recently published a “Best practices” guide about MITRE ATT&CK mapping, highlighting the importance of using the standard.
Decider was developed in partnership with the Homeland Security Systems Engineering and Development Institute and MITRE and was made available for free via CISA’s GitHub repository.
“Today, CISA released Decider, a free tool to help the cybersecurity community map threat actor behavior to the MITRE ATT&CK framework,” reads a CISA announcement.
“Created in partnership with the Homeland Security Systems Engineering and Development Institute and MITRE, Decider helps make mapping quick and accurate through guided questions, a powerful search and filter function, and a cart functionality that lets users export results to commonly used formats.”
The tool asks user-guided questions about the observed adversary activity and generates the corresponding MITRE ATT&CK report.
