Updating Attack Flows

Org Admins and attack flow owners can make changes to imported MITRE attack flows.

To update an attack flow:

1. Navigate to ThreatStream > Analyze > Attack Flow.

2. Select the attack flow that you want to update.

   

3. Click Update.

4. In the dialog box that opens, drag and drop or browse to select a JSON or Excel file with the updated MITRE attack flow.

   

5. Click Update.

   The imported attack flow overwrites the existing attack flow.