The Center for Threat-Informed Defense (Center) recently embarked on a research project sponsored by AttackIQ, HCA Healthcare, JPMorgan Chase, Microsoft, and Verizon.
The result is ATT&CK Workbench, a new open source tool that allows users to explore, create, annotate, and share extensions of the ATT&CK knowledge base, the tool backers say.
ATT&CK Workbench is an "easy-to-use open-source tool that allows organizations to manage and extend their own local version of ATT&CK and keep it synchronized with the ATT&CK knowledge base," the developers also say.
ATT&CK Workbench, the backers say, is designed for users and organizations that:
- Have ATT&CK at the core of their organization’s security operations;
- actively track threats against ATT&CK;
- align defenses to ATT&CK; and
- plan security investments based on ATT&CK.
