Constellation

CWE → CAPEC → ATT&CK ← D3FEND relationship graph. Search a node, drag, multi-select (Shift/Ctrl+click), move the group, click to see properties / expand.

Use cases:

Use cases

Vulnerability ↔ defense traceability: CVE → CWE → CAPEC → ATT&CK ← D3FEND. Grab a node on one end and see everything connected across the others.

Red team / Pentest

From CWE/CVE to CAPECs and ATT&CK techniques — plan TTPs, chaining and post-exploitation from the weakness.

Blue team / SOC

From CVE to ATT&CK techniques (what to detect) and D3FEND countermeasures (what to mitigate). Spot coverage gaps.

Purple team

Bridge offense ↔ defense: upstream (what to attack) and downstream (what to validate) — emulate and test detections.

CSIRT / IR

During an incident, pivot CVE → ATT&CK (what came next) → D3FEND (what would contain it). Faster triage and containment.

Threat Intel / CTI

Map a campaign's CVEs/techniques to weaknesses and defenses; enrich reporting with the full kill-chain.

Research

Find gaps (techniques without D3FEND, CWEs without CAPEC) and under-defended areas in the pattern ecosystem.

Start from the presets above or search a node. Double-click opens properties; expand/hide/isolate from there. The layout is static — drag nodes and positions persist.

Loading cloud...

CVE CWE CAPEC ATT&CK D3FEND Double-click: properties · drag to position (static)