Mitre Attack Mapping on splunk

[Amadou]

How to map mitre attack content in Splunk Security Essentials?

I want to map mitre attack for all of my created alert inside of splunk entreprise

[tej57]

Hello @Amadou ,

I believe SSE should be used in conjunction with Splunk Enterprise Security. The correlation searches within ES, ESCU, and SSE have MITRE tactics associated with each of them. The number of correlation searches with MITRE tactics are highlighted with dark color on the SSE dashboard and the less number would be light in shade. 

I do not think this is possible to achieve on Splunk Enterprise. However, if you are able to achieve this through custom solution using .css or .js, let the community know.

Thanks,
Tejas.