attackmap - v1.0 (initial release)
Generates static MITRE ATT&CK heatmaps (PNG, SVG, PDF) from ATT&CK Navigator JSON layers.
Technique names and tactic assignments are resolved dynamically from the official STIX bundle at runtime.
Tactic columns that exceed the row limit are automatically split into sub-columns.
Each technique cell is color-coded by analyst score (0–100), representing confidence in the presence of the technique in the analyzed sample.
What's included
- STIX bundle loading and dynamic tactic resolution
- Layer parsing and ATT&CK enrichment (enabled filter, multi-tactic deduplication)
- Column layout engine with automatic sub-column splitting
- Score-based color gradient rendering via matplotlib
- CLI with
--layer,--stix,--output,--title,--format(png,svg,pdf,all)
Assets
examples/example-layer.json— sample ATT&CK Navigator layerdocs/— example heatmap outputs (PNG, SVG, PDF)