## ATT&CK Navigator\n\n### What is Navigator?\n\nATT&CK Navigator is a web application for visualizing ATT&CK matrices. It helps you:\n- Map threat actor TTPs\n- Assess detection coverage\n- Identify gaps in defenses\n- Compare groups/software\n\n**URL**: https://mitre-attack.github.io/attack-navigator/\n\n### Key Features\n\n**Layer Creation**:\n- Create custom layers\n- Color-code techniques\n- Add scores and comments\n- Import/export JSON\n\n**Use Cases**:\n\n| Use Case | How |\n|----------|-----|\n| **Threat Mapping** | Highlight techniques used by specific APT |\n| **Detection Coverage** | Mark green where you have detection |\n| **Gap Analysis** | Identify red gaps in coverage |\n| **Red Team Planning** | Plan adversary emulation |\n\n### Creating a Detection Coverage Map\n\n```json\n{\n  "name": "Detection Coverage",\n  "versions": {"attack": "14"},\n  "domain": "enterprise-attack",\n  "techniques": [\n    {\n      "techniqueID": "T1566.001",\n      "score": 75,\n      "comment": "Email gateway blocks 75% of phishing",\n      "color": "#31a354"\n    },\n    {\n      "techniqueID": "T1053.005",\n      "score": 0,\n      "comment": "No detection for scheduled tasks",\n      "color": "#de2d26"\n    }\n  ]\n}\n```\n\n### Navigator Tips\n\n✅ Layer multiple views (threat vs detection)\n✅ Export and version control your layers\n✅ Share with your team\n✅ Update regularly as coverage improves