# mappings-explorer

**Repository Path**: putty_git/mappings-explorer

## Basic Information

- **Project Name**: mappings-explorer
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2026-10-28
- **Last Updated**: 2026-10-28

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

[![MITRE ATT&CK® v8–14](https://img.shields.io/badge/MITRE%20ATT%26CK®-v8–14-red)](https://attack.mitre.org/)
[![build](https://github.com/center-for-threat-informed-defense/mappings-explorer/actions/workflows/build-web.yml/badge.svg)](https://github.com/center-for-threat-informed-defense/mappings-explorer/actions/workflows/build-web.yml)
![codecov](https://codecov.io/gh/center-for-threat-informed-defense/mappings-explorer/branch/main/graph/badge.svg?token=MSGpc9mM6U)

# Mappings Explorer

Mappings Explorer enables cyber defenders to understand how security controls and
capabilities map onto the adversary behaviors catalogued in the [MITRE
ATT&CK®](https://attack.mitre.org/) knowledge base. The [Center for Threat-Informed
Defense](https://ctid.mitre.org/) created
these open source mappings to serve as a bridge between the threat-informed defense and
other cyberdefense paradigms such as security controls and vulnerability management.

**Table Of Contents:**

- [Getting Started](#getting-started)
- [Getting Involved](#getting-involved)
- [Use Cases](#use-cases)
- [Questions and Feedback](#questions-and-feedback)
- [Notice](#notice)

## Getting Started

To get started, visit the project website.

| Resource                                                                                     | Description                                                                                                 |
| -------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
| [Mappings Explorer](https://ctid.mitre.org/mappings/)                                       | A website to navigate, explore, search, and download our ATT&CK mappings.                                   |
| [Mappings Editor](https://github.com/center-for-threat-informed-defense/mappings-editor)     | An interactive, web-based tool for creating your own mappings. (This tool is available as a *public beta*.) |

## Getting Involved

There are several ways that you can get involved with this project and help
advance threat-informed defense.

- **Visit the Mappings Explorer website.** Use the website to navigate, explore, search,
  and download our ATT&CK mappings.
- **Recommend new mappings projects.** Is there a security control framework (or other
  security capability) that is not in Mappings Explorer but should be? [Let us
  know.](mailto:ctid@mitre.org?subject=Mappings%20Explorer%20framework%20request)
- **Create new mappings.** The Mappings Editor is released as a public beta; you may try
  using it to create your own mappings data. The mappings data can be used internally
  inside your organization, or if you think the public would benefit, please [get in
  touch with
  us]((mailto:ctid@mitre.org?subject=Mappings%20Explorer%20framework%20submission))
  to discuss merging your work into our public repository.

## Use Cases

You can use Mappings Explorer for many different purposes. Examples of usage include:

- **Align cyber defense to threats**. Explore how security controls and capabilities can
  be used to protect from, detect, or respond to specific adversary behaviors.​

- **Assess unpatched vulnerabilities​**. Understand how adversaries might exploit
  unpatched vulnerabilities and what adversaries may achieve by exploiting the
  vulnerability.​

- **Evolve and expand cyber defense​**: Visualize and assess deficiencies in cyber
  defense to plan future policy and security controls around real-world adversary
  behavior.​

- **Effectively describe incidents​**. Create detailed incident reports incorporating
  ATT&CK-based threat intel, recommendations for increased security protocols, and
  response measures.​

## Questions and Feedback

We welcome your feedback and contributions to help advance Mappings Explorer.
Please see the guidance for contributors if are you interested in
[contributing or simply reporting issues.](/CONTRIBUTING.md)

Please submit [issues](https://github.com/center-for-threat-informed-defense/mappings-explorer/issues) for
any technical questions/concerns or contact
[ctid@mitre.org](mailto:ctid@mitre.org?subject=Question%20about%20Mappings%20Explorer)
directly for more general inquiries.

## Deployment

Production is hosted at <https://ctid.mitre.org/mappings/> from a dedicated
Azure Storage static website behind the CTID Azure Front Door. A successful build from
this repository's `main` branch deploys directly to the storage account using GitHub
OIDC and the `production` environment.

The environment provides `AZURE_CLIENT_ID`, `AZURE_TENANT_ID`, and
`AZURE_SUBSCRIPTION_ID` secrets, plus `AZURE_STORAGE_ACCOUNT` and
`AZURE_STATIC_WEBSITE_ENDPOINT` variables. The Azure identity has Storage Blob Data
Contributor access only to the dedicated Mappings Explorer storage account.
Production and PR previews use separate storage accounts; production synchronization
must never target the preview account named `mappingsexplorer`.

After the Front Door route is verified, manually run the **Deploy GitHub Pages
Redirect** workflow to replace the legacy Pages site with a small client-side redirect.

## Notice

© 2024 MITRE. Approved for public release. Document number(s) CT0104.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this
file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under
the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the specific language governing
permissions and limitations under the License.