Skip to main content
Version: 6.0

Layer Editor

Description​

The layer editor is designed for creating and editing layers. A layer is an abstraction representing a set of priority matrices, triggers, and coverage. A layer helps assign data entities to a specific monitoring area, information system, or even a particular node. Layer separation allows for a more detailed examination of threat cases depending on the area or information system in which they occurred.

Interface Layer Editor

Creating a Layer​

To create a layer, follow these steps:

  1. Select the Layer Editor (Main menu - MITRE ATT&CK - Layer Editor)
  2. In the Layer Editor interface, click the Create button
  3. In the modal window, enter the layer name and click the Add button
note

To create multiple layers, repeat the specified sequence of actions (Steps 1-3).

Editing a Layer​

To edit a layer, click the three-dot icon in its row and select Edit from the menu. A modal window with the layer editing form will open. After making changes, click the Edit button.

Deleting a Layer​

To delete a layer, click the corresponding button. To confirm the action, click the Delete button. In the dialog box that opens, confirm the layer deletion by clicking the Yes, do it button.

Permission Settings​

To configure access permissions for a layer, follow these steps:

  1. In the row of the desired item, click the "kebab" menu (three-dot icon)
  2. From the dropdown list, select the Permissions option
  3. In the permission management interface that opens in a modal window, assign the required permissions for the roles existing in the system

Binding an attack technique to a layer occurs when configuring the MITRE ATT&CK action. You can learn more in the corresponding section Recording MITRE ATTACK Techniques.