Map a named actor to its ATT&CK techniques
Ask the graph directly which MITRE ATT&CK techniques a named adversary uses — the actor-layer traversal no fixed-verb tool ships.
Layers traversed
- Threat intel
Actor → technique → infrastructure spans three systems that do not link to each other.
- MITRE ATT&CK Navigator
- a threat-actor wiki
- separate infrastructure tooling
Using WhisperGraph over MCP, list the MITRE ATT&CK techniques the actor Volt Typhoon uses, then pivot into related infrastructure I can hunt on.
Paste into any MCP-connected LLM.
What you get back
Threat-actor profiles and technique catalogs live in one system; your infrastructure intelligence lives in another. Whisper holds the actor layer in the same graph: a named actor links straight to the ATT&CK techniques it uses, so an agent or analyst pivots from "who" to "how" without leaving the query. From there the same graph carries the infrastructure pivots that turn a technique profile into live hunting leads.
Dig deeper
Key concepts
Go deeper
The full how-to — the procedure explained, with the Cypher you can run.
Open the full how-to →Related
Forward threat intelligence: find the unflagged siblings
Pivot from one known-bad domain to the campaign's not-yet-flagged infrastructure — domains that share its registrant fingerprint but sit in no threat feed.
Ground your AI agent before it acts
Give an agent a coverage-qualified verdict that separates "known clean" from "no data" — the anti-hallucination, anti-prompt-injection primitive for MCP-native SOCs.
Find every domain on the same infrastructure
Reverse a single IP, nameserver, or registrant into every domain that shares it — the co-tenancy pivot, in one hop.
Ground your agent in live infra
Connect once over MCP and your agent writes its own bounded Cypher across a pre-joined graph — pivoting from a named actor's MITRE techniques straight into live infrastructure, instead of re-stitching JSON from a vendor's fixed verb list.
Try it on your own infrastructure
Run anonymous queries against the live graph, or connect your AI agent over MCP — free, no credit card.