Skip to content
  • There are no suggestions because the search field is empty.

MITRE ATT&CK

The MITRE ATT&CK page in Nipper OmniSight provides a high-level visual summary of your security posture mapped against the globally recognized MITRE ATT&CK framework. It enables you to visualize how technical vulnerabilities and misconfigurations translate into potential adversary tactics and techniques.

Key Capabilities

At-a-glance insights into:

    • Number of devices assessed and those with TTP exposure
    • Total unique TTP exposures identified
    • Volume of CIS Controls, STIGs, and CVEs contributing to exposures
  • Interactive Matrix Navigator:
    • Heat-map visualization of techniques coloured by severity
    • Quickly identify high-risk tactics across the attack lifecycle

KEV Focus:

  • Toggle KEVs Only to prioritize findings associated with Known Exploited Vulnerabilities

Filtering by Label and Segment:

  • Refine the matrix view to focus on specific network segments, environments, or device groups

Drill-down Functionality

Technique View


Clicking any technique in the matrix navigates to a dedicated Technique Page. This provides a detailed description of the TTP and a summary of all impacted devices, along with a count of their specific CVE, CIS, and STIG failures.

Device View

From the Technique Page, you can drill down into individual devices to see the exact findings responsible for the exposure.

  • Prioritized findings: CVEs, CIS Controls, and STIGs are listed with the most severe at the top.
  • External research: CVE IDs link directly to the NIST NVD website for detailed vulnerability information.
  • Direct report access: Clicking the report links takes you to the exact section of the assessment report for that finding, providing immediate context for remediation.

Filtering Results

Use labels and match conditions to refine the data displayed:

  • Match all – Shows results containing all selected labels
  • Match any – Shows results containing at least one selected label
  • Match exact – Shows results matching the exact label set

The MITRE ATT&CK page helps you:

  • Map technical findings to real-world adversary behaviours
  • Prioritize remediation based on threat framework alignment
  • Understand the broader impact of vulnerabilities across different network segments
  • Navigate efficiently from high-level risk overview to technical report details