MITRE ATT&CK Framework

[Bar_Magnezi]

Hi , 
Is there a way to automate the process of mapping every incident to its MITRE Technique ,
or it should be manual for every incident ? 

[RahulVijaydev]

Hi Bar, 

If the alert has the technique ID, mapping can be done automatically, however, in the absence of the technique ID, mapping is not straightforward since alerts normally come in unstandardized. We rely on the tool to provide the technique ID.

Thanks, 
Rahul