MITRE ATT&CK Catalogue
Cybrium speaks ATT&CK natively. Every campaign step, every finding, every payload is tagged with the tactic and technique it maps to, and the full ATT&CK matrix is available as a first-class catalogue inside the product.
The Catalogue Drawer
Open the ATT&CK entry in the Adversary sidebar to reveal the full matrix as a drawer. Columns are tactics (Reconnaissance, Resource Development, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Exfiltration, Impact). Each cell is a technique; clicking a cell opens its detail pane with Cybrium's implementation notes, prerequisites, supported platforms, and a link to the canonical ATT&CK page.
A filter bar at the top lets you narrow by platform (Windows, Linux, macOS, containers, cloud, network), by required privilege, or by whether Cybrium currently ships an implementation. Techniques without implementations are shown greyed out so your planners know what is not yet covered.
Technique Picker
When building a manual campaign — outside the AI planner — the technique picker is where you pull individual techniques into your plan. Drag a technique from the catalogue into the campaign's step list and Cybrium automatically pulls in the required tooling, default parameters, and the authorization categories the technique depends on. The picker refuses to add a technique whose authorization category is not checked on the campaign's consent form.
Attack Packs
Attack Packs are curated bundles of techniques organized by objective: Initial Access, Credential Access, Lateral Movement, Cloud Takeover, Container Escape, and more. Packs include a suggested execution order, prerequisite checks, and a pre-tuned AI planner profile that biases the engine toward the pack's objective.
Every tenant gets the Starter Pack (Reconnaissance + Initial Access) by default. Additional packs are available as one-time purchases or bundled with higher plans.
Purchase Flow
Click Browse Packs to open the marketplace. Each pack shows its technique list, average campaign duration, and price. Purchasing uses the tenant's billing method on file; the pack is activated immediately and visible to all Tenant Admins.
Only Tenant Admins can purchase or remove attack packs.