Which security frameworks does it support for mapping?

It can normalize and map findings based on CWE IDs, OWASP Top 10 categories, and STRIDE threat models to the MITRE ATT&CK technique matrix.

Does this skill discover new vulnerabilities in my code?

No, this is a post-analysis enrichment tool. It maps existing findings from tools like OWASP or STRIDE to the MITRE framework rather than scanning for new bugs.

What is an 'attack chain' in this context?

An attack chain groups related findings into a logical sequence, showing how an attacker might move from an entry point (Initial Access) to a final goal (Impact).

What does 'Expert Mode' provide?

Expert mode includes DREAD risk scoring, threat actor profiling, detection gap analysis to see if your logs would catch an attack, and a prioritized mitigation roadmap.

MITRE ATT&CK Security Mapper

Name: MITRE ATT&CK Security Mapper
Author: florianbuetow

byflorianbuetow

•

安全与测试

Enriches security findings by mapping vulnerabilities to the MITRE ATT&CK framework to visualize threat patterns and attack chains.

The MITRE ATT&CK Mapping skill is a post-analysis enrichment engine designed to bridge the gap between static code findings and real-world attacker behavior. By ingesting findings from OWASP, STRIDE, or SANS/CWE scans, it automatically identifies corresponding tactics and techniques used by adversaries. This skill is essential for security researchers and developers who need to understand the full context of a vulnerability, allowing them to visualize multi-step attack chains, identify coverage gaps in their security posture, and prioritize remediation based on threat actor TTPs and DREAD scoring.

主要功能

01Automated mapping of CWE and OWASP findings to MITRE ATT&CK techniques

026 GitHub stars

03Threat actor TTP cross-referencing for real-world exploit context

04Visual kill chain diagrams mapping findings to adversary lifecycle stages

05Multi-step attack chain construction from initial access to terminal impact

06Advanced DREAD risk scoring and detection gap analysis in expert mode

使用场景

01Converting static vulnerability reports into actionable threat intelligence and attack scenarios

02Identifying security posture gaps by visualizing tactic coverage across the ATT&CK matrix

03Prioritizing software patches based on their role in potential multi-stage kill chains

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add florianbuetow/claude-code mitre

For use in Claude.ai and ChatGPT

Download Skill