CIS Controls for Threat Mitigations
CIS Controls for Threat Mitigations connects the security capabilities of the Center for Internet Security’s Critical Security Controls to …
July 8, 2025
Project Summary
With Attack Flow v3, you will capture the entire attack and communicate what matters!
This is an older version of the Attack Flow project. For the latest version, see: Attack Flow.
Problem
Tracking adversary behaviors one action at a time makes it hard to build effective defenses against multi-phased attacks.
Solution
Create a language, and associated tooling, to describe flows of ATT&CK techniques and combine those flows into patterns of behavior.
Impact
Visualize and communicate how adversaries operate to define defensive actions.
Funding Research Participants
Non-Profit Participants
Explore More of Our Work:
Summiting the Pyramid
Summiting the Pyramid helps defenders measure the depth and quality of detection coverage beyond an ATT&CK heatmap. This release introduces …
Attack Flow
Attack Flow helps defenders capture the entire scope of a cyber attack and communicate what matters. By representing actions, conditions, and …
Stay Informed
Sign up for our "Stay Informed" mailing list to receive announcements for project publications, upcoming events, and other news about the Center.