MITRE ATT&CK Mapper
Map pasted technique IDs to the tactics you assign, and get a clean mapping table plus per-tactic totals.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
MITRE ATT&CK Mapper
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
T1059 to Execution, T1078 to Persistence and T1566 to Initial Access produce three mappings across three tactics.
What this tool does not do / Limits
This tool only organises technique IDs and tactics you enter yourself. It does not contain an official technique-to-tactic mapping and does not verify technique IDs against any database.
Frequently asked questions
How is this different from the Coverage Heatmap?
The heatmap counts entries per tactic with bars. This mapper returns the mapping table itself, with duplicates removed.
Are technique IDs checked?
No. Any ID text you enter is accepted as typed; nothing is verified against an official list.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live