Manage Matrices

---
title: Manage Matrices
description: Manage the matrices that are imported from the MITRE TAXII collections. Matrices are a collection of tactics and techniques. You can view the matrices to review if your collections are available in the MITRE-ATT&CK repository.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-manage-matrices.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [manage matrices, MITRE ATT&CK matrix, tactics and techniques]
breadcrumb: [MITRE-ATT&CK repository, TISC Library Repository, Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations]
---

# Manage Matrices

Manage the matrices that are imported from the MITRE TAXII collections. Matrices are a collection of tactics and techniques. You can view the matrices to review if your collections are available in the MITRE-ATT&CK repository.

## Before you begin

Role required: sn\_sec\_tisc.analyst

## Procedure

1.  After you enable the MITRE ATT&CK related feed data sources which are available in the base system, click **Execute Now** to run the integrations and fetch the MITRE related information.

    For more information on enabling the integrations

2.  To view the MITRE ATT&CK Repository data, navigate to **Workspaces** > **Threat Intelligence Security Center** > **Threat Intel Library** > **MITRE ATT&CK**.

    The MITRE ATT&CK related records are displayed. By default all the records are in enabled state.

    **Note:** You can enable only those matrices that are relevant to your organization.

    **Note:**

    A matrix name includes the MITRE ATT&CK collection version that the matrix was ingested from, so that you can tell which MITRE release the data reflects. For example, Enterprise ATT&CK \(v18.0\).

3.  Select any Matrix record and click **Disable** if you want to disable any specific record.

4.  Alternatively, you can create new matrices record by clicking **New** to manually to create the MITRE ATT&CK matrices.

5.  Fill in the fields appropriately.

    |Field|Description|
    |-----|-----------|
    |Name|Enter the name of the matrix.|
    |Source|Specifies the threat source from which this record is created.|
    |MITRE Collection Version|Version of the MITRE ATT&CK collection that this matrix was ingested from. The value is set during ingestion and appears in the matrix name.|
    |Active|Select this check box to active the matrix record.|
    |Created Time In Source|Specifies the time the object is created in the source.|
    |Modified Time In Source|Specifies the time the object is modified in the source.|
    |Description|A description that provides more details and context about the intrusion set, potentially including its purpose and its key characteristics.|
    |**Insights**|
    |Notes|Any additional information related to the mitigation.|
    |**Additional Information**|
    |Additional Context|Add any additional context for this object type.|
    |Comments|Add any comments that you might have in addition.|


**Parent Topic:**[MITRE-ATT&CK repository](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-mitre-att-ck-framework-overview.md)