Source Profile

🔌 MITRE ATT&CK for ICS

ICS adversary techniques matrix.

Critical Infrastructure NONE json

Auth

NONE

free

Format

json

Disciplines

mapped

Domains

served

Endpoints

Home	https://attack.mitre.org/matrices/ics/
API / endpoint	https://raw.githubusercontent.com/mitre/cti/master/ics-attack/ics-attack.json
Category	Critical Infrastructure

📤 Collect this source

Key-free machine-readable feed — registrable in the collector.

Feed Registry Run Auto-Collect Import manually

🧭 Intelligence Disciplines

CYBINT Cyber Intelligence →VULNINT Vulnerability Intelligence →

🎯 Mission Domains

Critical Infrastructure →

🎫 Data Points produced

cve →

🔗 Related Sources

abuse.ch ThreatFox CFR Cyber Operations Tracker CISA Automated Indicator Sharing CISA ICS Advisories Citizen Lab MITRE ATT&CK Groups (STIX) MITRE ATT&CK — Valid Accounts AlienVault OTX Pulses

⚡ AI Skills & Automation

🤖 Copilot brief ⚡ AI Skills Resolve Enrich Auto-Collect Hunt Report Export

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook