## MITRE ATT&CK Navigator

The **Navigator** is an open-source web tool tailored for annotating and visualizing the ATT&CK Matrix. It allows you to create "Layers".

### Use Case 1: Threat Profiling
Scenario: You work for a Bank. You are worried about the "Carbanak" group.
1.  Open Navigator.
2.  Select "Carbanak" from the Threat Actor list.
3.  The tool highlights every technique Carbanak has used in red.
**Result**: A visual map of your enemy's playbook.

### Use Case 2: Defensive Coverage Map
1.  Create a new Layer.
2.  Ask your SIEM engineers: "Can we detect PowerShell?" (Yes -> Color Green). "Can we detect Exfiltration over USB?" (No -> Color Red).
3.  Fill in the matrix based on your actual capabilities.
**Result**: A "You Are Here" map of your security posture.

### Use Case 3: Overlay (The Gap Analysis)
1.  Take the **Threat Layer** (Red).
2.  Take the **Defense Layer** (Green).
3.  Combine them.
4.  **The Panic Zone**: Any technique that is colored Red (Threat uses it) but NOT Green (Defense covers it).
**Result**: This is your immediate roadmap. "We need to build detections for T1059 because Carbanak uses it and we can't see it."