---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Using the MITRE-ATT\&CK dashboard

# Using the MITRE-ATT\&CK dashboard {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

The MITRE-ATT\&CK dashboard provides an executive view of the data source
coverage, tactics, and techniques that are used in your organization.

The MITRE-ATT\&CK Overview module displays MITRE-ATT\&CK information
about security incidents including trends and reports. You can click any part of a widget (bar,
data point, table, and so on) to view data that is specific to that part.

**Related concepts**   

* [MITRE-ATT\&CK heat map and navigator](https://servicenow-prod.fluidtopics.net/VRnjqjSHICBggygx0omrkA#mitre-att-ck-heatmap-and-navigator "You can use the MITRE-ATT&CK heat map and navigator for basic navigation and to visualize your overall technique detection coverage.")  
**Related tasks**   

* [Associate MITRE-ATT\&CK information with security incidents](https://servicenow-prod.fluidtopics.net/J3z4piiw4XfDN0sHmTmUlw#associate-mitre-with-sir "Associate the MITRE-ATT&CK tactics and techniques to the security incident for better security incident and threat analysis.")
* [Associate MITRE-ATT\&CK information with observables](https://servicenow-prod.fluidtopics.net/OFTiAqgRV6uKVG2hbJBVWg "Associate MITRE-ATT&CK tactics and techniques to an observable for better security incident and threat analysis at a granular level.")
* [Associate MITRE-ATT\&CK information with security case](https://servicenow-prod.fluidtopics.net/vR0MxG6Hmr3ZC~hcuvahbg "Associate MITRE-ATT&CK tactics and techniques to a security case for better security case management and threat analysis at a granular level.")
* [Rollup MITRE-ATT\&CK information using Threat Lookup results](https://servicenow-prod.fluidtopics.net/8dXSmKyPBaSVx3tsFqhZAw "If you have not enabled automatic rollup of MITRE-ATT&CK information, you can do this manually.")
* [Rollup MITRE-ATT\&CK information from detection rules](https://servicenow-prod.fluidtopics.net/VlfxcmUxRdd_cpzNcHN1TA "Enable rollup of MITRE-ATT&CK information from the detection rules to the security incidents for better security incident and threat analysis.")
* [Rollup MITRE-ATT\&CK information from child security incidents](https://servicenow-prod.fluidtopics.net/Ojj0100Xlq4DON4dNamzMQ "If you have not enabled automatic rollup of MITRE-ATT&CK information, you can do this manually.")
* [Perform link analysis and threat hunting using MITRE-ATT\&CK specific filters](https://servicenow-prod.fluidtopics.net/AGX_TGwRVFohiU0FJYsdlA "Correlate and perform link analysis of observables, security incidents, and MITRE-ATT&CK related information so that your organization can start hunting for threats.")

## Use the MITRE-ATT\&CK dashboard to see your security-related data {#ariaid-title2}

Use the MITRE-ATT\&CK dashboard to get an overview of the data source
coverage, tactics, and techniques that are used in your organization.

### Before you begin

Role required: sn_si.ciso, sn_si.analyst, sn_si.manager, sn_ti.read

### Procedure

1. Navigate to AllThreat IntelligenceMITRE ATT\&CK RepositoryOverview.
2. Click any of the following widgets to see additional details:  
   * Security Incidents by MITRE-ATT\&CK Technique
   * Security Incidents by MITRE-ATT\&CK Tactic
   * Critical Assets with MITRE-ATT\&CK Techniques
   * Security Incident Close Codes Vs MITRE-ATT\&CK Techniques
   * MITRE-ATT\&CK Techniques by Detection Coverage
   * MITRE-ATT\&CK Techniques by Mitigation Coverage
   * Threat Groups by MITRE-ATT\&CK Technique
   * CVEs by MITRE-ATT\&CK Technique
   {#view-mitre-dashboard__ul_vrp_5ls_xnb}
{#view-mitre-dashboard__steps_fmp_hxt_qmb}

## MITRE-ATT\&CK widgets {#ariaid-title3}

The MITRE-ATT\&CK Overview module consists of widgets that enable you to correlate the MITRE-ATT\&CK information with the security incident information in your environment.

### Example of Security Incidents by MITRE-ATT\&CK Technique {#mitre-widgets__section_fz4_m3s_xnb}

In this example, the Security Incidents by MITRE ATT\&CK Technique widget displays the techniques by security incident in an
organization's environment in the last 90 days.

### Example of Security Incidents by MITRE-ATT\&CK Tactic {#mitre-widgets__section_zwx_p3s_xnb}

In this example, the Security Incidents by MITRE ATT\&CK Tactic
widget displays the top tactics by security incident in an organization's environment in the
last 90 days.

### Example of Critical Assets with MITRE-ATT\&CK Techniques {#mitre-widgets__section_scj_r3s_xnb}

In this example, the Critical Assets with MITRE ATT\&CK Techniques widget displays the top 10 critical assets that are associated with
the MITRE-ATT\&CK techniques. The assets have a business criticality of either 1
(most critical) or 2 (somewhat critical).

This report enables an organization to see the types and number of techniques that are used
in carrying attacks against the critical assets.

### Example of Security Incident Close Codes Vs MITRE-ATT\&CK Techniques {#mitre-widgets__section_rgs_s3s_xnb}

In this example, the Security Incident Close Codes Vs MITRE-ATT\&CK Techniques widget displays the security incident close
codes that were mapped against the identified top techniques in an organization's
environment.

The x-axis displays the top techniques that were used to carry attacks against the
enterprise, and the y-axis displays the closed codes.

### Example of detection coverage by MITRE-ATT\&CK techniques {#mitre-widgets__section_o1r_3p1_wrb}

In this example, the MITRE-ATT\&CK Techniques by Detection Coverage widget displays the technique count by the detection
coverage in your environment.

The x-axis displays the technique count, and the y-axis
displays the detection coverage types.

### Example of mitigation coverage by MITRE-ATT\&CK techniques {#mitre-widgets__section_kvq_kp1_wrb}

In this example, the MITRE-ATT\&CK Techniques by Mitigation Coverage widget displays the technique count by the
mitigation coverage in your environment.

The x-axis displays the technique count, and
the y-axis displays the mitigation coverage types.

### Example of threat groups by MITRE-ATT\&CK
techniques {#mitre-widgets__section_vw2_lp1_wrb}

In this example, the Threat Groups by MITRE-ATT\&CK Technique widget displays the techniques by the threat group count. This
widget displays 20 techniques with the highest threat group count.

The x-axis displays
the threat group count, and the y-axis displays the MITRE-ATT\&CK
techniques.

### Example of CVEs by MITRE-ATT\&CK
techniques {#mitre-widgets__section_rr5_lp1_wrb}

In this example, the CVEs by MITRE-ATT\&CK Technique widget displays the techniques with the relevant CVE count in your
environment.

The x-axis displays the relevant CVE count, and the y-axis displays the
MITRE-ATT\&CK techniques.

*[\>]: and then