View and activate a MITRE ATLAS matrix

task brazil Updated Sep 10, 2026 1 min read manage-mitre-atlas-matrices.md
Raw file servicenow.com

View the tactics and techniques in an imported MITRE ATLAS matrix to understand available threat intelligence data. You can activate the matrix to make it available for use in threat analysis.

Before you begin

Role required: sn_ti.admin (delete access) or sn_ti.read (read access) or sn_ti.write (create, write access)

Procedure

  1. Navigate to All > Threat Intelligence > MITRE ATLAS Repository > Matrices.

    The matrix is inactive by default.

  2. To activate the matrix, move to Active, double-click, and select true.

  3. To view all the associated information, select the matrix.

  4. To view all the tactics that are associated with this collection, select the MITRE Tactics tab.

  5. Open a tactic to view its associated techniques and details.

    [Omitted image "mitre-atlas-adversary-technique.png"] Alt text: Screenshot showing the MITRE ATT&CK Techniques tab with a list of techniques associated with the selected tactic

  6. Under the MITRE ATT&CK Techniques tab, select a technique.

  7. Under the related lists, view the associations that are available for the technique that you selected.

What to do next

You can extend the information in some of these related list objects based on the technique that you selected. For example, you can add new information for Group, Mitigation, External References, Malware, and Tools.

Search documentation
Search document titles and file paths on the brazil branch