pasta-threats

What problem does it solve?

This Skill helps identify and analyze potential threats to a software system by mapping them to real-world intelligence, attack patterns, and adversary tactics, grounding the analysis in the MITRE ATT&CK framework.

Core Features & Use Cases

• Threat Actor Profiling: Identifies likely threat actors (e.g., opportunistic, targeted, insider, supply chain, APT).
• MITRE ATT&CK Mapping: Cross-references identified threats with specific MITRE ATT&CK techniques.
• Attack Pattern Identification: Analyzes common attack vectors and patterns relevant to the system's technology stack.
• Supply Chain Analysis: Assesses risks associated with third-party dependencies and CI/CD pipelines.
• Use Case: After defining your system's components and trust boundaries, use this Skill to understand what specific threats your application faces, who might launch them, and how they might execute their attacks.

Quick Start

Analyze threats for the current system, focusing on the top 5 most likely threats based on the technology stack.