The LogRhythm ATT&CK Navigator layer displays the MITRE ATT&CK techniques that can be detected via the LogRhythm MITRE ATT&CK Knowledgebase module.
The layer will be updated whenever new rules are released in the LogRhythm MITRE ATT&CK Knowledgebase module.
To use the Navigator layer:
- Clone this repository or download the LR_navigator.json file.
- Open MITRE ATT&CK Navigator (you can stand up your own instance using https://github.com/mitre-attack/attack-navigator or browse to MITRE's instance at https://mitre-attack.github.io/attack-navigator/enterprise/).
- Click the plus sign at the top of the page to add a layer.
- Choose Open Existing Layer and click Upload from Local.
- Navigate to the LR_Navigator.json file that you cloned or downloaded.