Center for Threat Informed Defense Security Stack Mappings
A collection of native security controls for major cloud platforms mapped to MITRE ATT&CK techniques to enable threat-informed defense decisions.
What is Center for Threat Informed Defense Security Stack Mappings?
Security Stack Mappings is a collection of structured data that maps native security controls of major cloud platforms to adversary techniques in the MITRE ATT&CK® framework. It helps organizations understand which built-in security capabilities are most effective against specific threats, enabling threat-informed defense decisions. The project provides mappings for Azure, AWS, and GCP with standardized methodology and tools.
Security professionals, cloud architects, and threat intelligence analysts working with Azure, AWS, or GCP who need to understand how native security controls mitigate specific ATT&CK techniques.
It provides vendor-agnostic, standardized mappings that enable data-driven security decisions, unlike platform-specific documentation. The open methodology and tools allow organizations to extend mappings consistently.
Overview
🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
Use Cases
Best For
- Evaluating native security controls effectiveness against specific ATT&CK techniques
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
