Is the diagram compatible with MITRE ATT&CK?

Yes, diagram elements can be annotated with the corresponding MITRE ATT&CK techniques (technique ID, tactic, actor group). This compatibility makes it easier to correlate with threat intelligence reports and SIEM detection rules.

Can the diagram be exported for a report?

The diagram can be exported as a PNG image, a PDF or JSON for reuse in other tools. PDF export is ideal for including it in your incident reports or executive presentations.

How many nodes can a diagram contain?

The editor supports complex diagrams with many nodes and connections. For sophisticated incidents (APT, ransomware), you can create hierarchical views grouped by attack phase (Initial Access, Execution, Persistence...).

Compromise schema

Map the attack chain · MITRE ATT&CK

Autosave on

Your scenario starts here

Add assets and techniques from the palette, link them, then qualify each element in the inspector.

100% local: nothing is sent to a server.

ForenShield - cybersecurity and OSINT platform

ForenShield offers free OSINT tools, Windows investigation software, certified cybersecurity training and a cyber recruitment platform.

Our ecosystem serves analysts, SOC, CERT teams and forensic experts with resources for digital investigation, operational security and forensic analysis.