MITRE ATT&CK®
Adversary behavior plus current Detection Strategies, platform-specific Analytics, Data Components, and log-source references when safely retrievable.
Open ATT&CK ↗M3HT4 PRACTITIONER TOOL · VERIFIED PUBLIC SOURCES
M3HT4 TerrainFuse
Connect current ATT&CK, NVD, EPSS, and KEV evidence without mixing their meanings. TerrainFuse shows what is confirmed, what is still unknown, and what an analyst should validate next.
1 Search → 2 Read → 3 Verify → 4 Export
GUIDED ANALYST WORKSPACE
Start with the question. TerrainFuse builds the analyst path.
Type what you know. TerrainFuse explains what the evidence means, what it cannot prove, and the next analyst action.
SOURCE STATUS
ATT&CK NVD FIRST EPSS CISA KEV
READY
What do you have?
Pick a starting point. TerrainFuse handles the source roles for you.
Checking current public sources…Cached source responses may be used within the displayed freshness window.
TerrainFuse could not complete this lookup.
A required public source could not be reached or verified.
SOURCE MODEL
Four sources. Four different jobs.
TerrainFuse does not collapse different security measurements into one proprietary score. It preserves what each source actually tells you.
NIST NVD
CVE record status, descriptions, CVSS metrics with source/type/vector, weaknesses, references, and applicability logic.
Open NVD ↗FIRST EPSS
The model's numeric probability that exploitation activity for a CVE will be observed in the wild over the next 30 days, plus percentile.
Open EPSS ↗CISA KEV
Confirmation that a vulnerability is known to have been exploited in the wild, with CISA action context and the FCEB directive due date.
Open KEV ↗ Accuracy boundary
TerrainFuse can correlate public evidence, but it cannot know your asset inventory, exposure, compensating controls, business impact, or whether a local event is malicious. Those remain explicit unknowns instead of guessed values.
MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. EPSS scores are provided by FIRST.org's Exploit Prediction Scoring System (EPSS). CISA KEV data is distributed under CC0 1.0. M3HT4 is not affiliated with or endorsed by MITRE, NIST, FIRST, CISA, or DHS. This product uses the NVD API but is not endorsed or certified by the NVD.
ATT&CK attribution & license notice
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
Use of ATT&CK material is governed by MITRE's ATT&CK Terms of Use. The linked terms contain the applicable license and conditions.