> For the complete documentation index, see [llms.txt](https://docs.inopli.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.inopli.com/response/managing-mitre.md).

# Managing MITRE

The MITRE ATT\&CK® (Adversarial Tactics, Techniques, and Common Knowledge) is a well-known <mark style="color:green;">global framework used for understanding and categorizing tactics, techniques, and procedures (TTPs) associated with cyber threats.</mark>

In Inopli, it is integrated into a dynamic and adaptable dashboard for security system administrators. This <mark style="color:green;">control panel offers an interactive interface,</mark> allowing administrative users to add or remove techniques and sub-techniques from the MITRE ATT\&CK framework. This functionality is crucial for keeping the system's database aligned with the latest strategies and changes in the cyber threat landscape.

When a new technique is added to the system through the dashboard, it becomes immediately available for use in various functions. This includes application in correlation rules, which are essential for detecting and responding to incidents. Additionally, the newly included technique is also <mark style="color:green;">integrated into the MITRE coverage indicator generator</mark>, to evaluate the effectiveness of the implemented security measures.

The inclusion of updated techniques and sub-techniques ensures an increase in security, as it allows administrators to keep up with emerging trends in cyber attacks.

This approach ensures that the team not only keeps its threat database updated, but also strengthens its ability to prevent, detect, and respond to security incidents more effectively.

<figure><img src="/files/ZRlF1AwwLfBRfJHcDjYf" alt=""><figcaption><p>Overview MITRE Att&#x26;ack Matrix</p></figcaption></figure>

***

### Creating a Technique

To <mark style="color:green;">ensure that the documentation always remains up-to-date</mark>, the team has the ability to add new techniques and/or sub-techniques, as well as to delete those that are no longer necessary. In the addition process, a detailed form is used, in which <mark style="color:green;">all essential information is requested for the accurate mapping of a new technique, sub-technique, and its respective version</mark>. This procedure ensures that each entry is complete, thus facilitating the management and location of information within the system.

<figure><img src="/files/DTaj21J7SGZfqDkdhA3U" alt=""><figcaption><p>Create a Technique</p></figcaption></figure>

***


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.inopli.com/response/managing-mitre.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
