Attack Lifecycle Visualizer — ATT&CK Threat Profiler

⛓️

Build your attack chain

Map how an attack progresses across ATT&CK tactic stages — from initial access through to impact. Each node represents a technique. Connect them to visualise the attack lifecycle.

Select a tactic
and technique

Add nodes to
the chain

Connect nodes to
show progression

Click any node for
chain suggestions &
detection guidance

💡 Good start — now click the node

Click any technique node to see what typically precedes and follows it in real attacks. Use the [+ Add] buttons to extend your chain — each suggestion is drawn from documented ATT&CK actor procedures.

🔍 Detection Walkthrough

Connections:

Curated — ATT&CK documented, observed in real attacks

AI-assessed — Claude inference from threat intelligence

Analyst-asserted — your hypothesis, may be hypothetical

Nodes:

Detection generated

Detection pending

Chain context available

↗ View on MITRE ATT&CK

What is this technique?

Chain Context — what comes before & after

💡 How to use chain context

Each suggestion shows a technique commonly seen before or after this one in real attacks, with the reason why. Click [+ Add] to add it to your chain — it will auto-connect to this node. Building out the chain helps you see where detection gaps exist across the full attack lifecycle.

Detection Use Case

Required Data Sources

Key Indicators

AI-generated use case, data sources & indicators via Claude