A layer constitutes a set of annotations on the ATT&CK matrix for a specific technology domain. Layers can also store a default configuration of the view such as sorting, visible platforms, and more. The ATT&CK Navigator includes functionalities for exporting annotations into layer files, as well as the ability to import layer files for viewing.
See the latest layer format specification for more information about Layer files.
This repository includes a couple of sample layers demonstrating example use cases of layers and the ATT&CK Navigator. The scripts used to generate these layer files can be found in the mitreattack-python repository. These scripts may serve as examples on how to access and work with ATT&CK data.