Attack Paths

The Attacks page centers on Attack Paths — how Praetorian proved compromise. Two views: Graph and Narrative.

Graph View

Interactive diagram of attacker, asset, technique, and vulnerability nodes.

Technique defense colors: Untested (gray), Tested (black/white), Undetected (blue), Logged (yellow), Alerted (cyan), Detected (magenta), Prevented (green). Legend is bottom-right.

Stages are a pill bar on the left. Click a stage to highlight nodes and open the Stage Detail Panel. Layout: left-to-right (default) or top-to-bottom, saved per path.

Export PNG in the diagram toolbar; pick light or dark independently of the app theme.

Narrative View

Toggle Graph vs Narrative in the top-right. Expand one stage at a time. The IoC table at the bottom aggregates artifacts across stages.

Finding Evidence

Open a finding → Evidence. Attack graphs that include that vulnerability appear there and link to the full Attacks page.

MITRE ATT&CK coverage heatmap is Insights → Benchmarks, not Attacks. Paths are maintained by Praetorian.