Not part of a guided workflow —
Next best move:Open the platform atlas Atlas
← All workflows

Investigate a vehicle

What did this vehicle inherit, and what evidence is missing?

0 of 7 steps visited
Start: Enter a VIN

At the end of this run: You can name what this vehicle inherited, what is still unknown, and who owns the missing evidence.

  1. Enter a VINnextTrace everything one vehicle inherited.Synthetic
    MITRE attack context for this stepEnter a VIN · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.
  2. Vehicle workspaceWhat is known and missing for one vehicle.Synthetic
    MITRE attack context for this stepVehicle workspace · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.
  3. Cyber MRIThe exploded, scan-style view of one vehicle's inherited exposure.Synthetic
    MITRE attack context for this stepCyber MRI · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.
  4. Attack this vehicle + route briefEvidence-driven replay plus the route intelligence brief when evidence is missing.Synthetic
    MITRE attack context for this stepAttack this vehicle + route brief · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.
  5. Upload evidenceUpload supplier manifests, SBOMs and canary telemetry for the route brief.Customer data
    MITRE attack context for this stepUpload evidence · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.
  6. Evidence requestWhat evidence validates the MRI findings.Synthetic
    MITRE attack context for this stepEvidence request · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.
  7. Decision recordThe recorded decision and its evidence.Synthetic
    MITRE attack context for this stepDecision record · same replay, tools, defenses and evidence
    No VIN-scoped simulation recorded in this tab. Open the route brief and run the ATT&CK simulation.

Run debrief

What you can say
Nothing yet — no step of this run has been opened.
Not covered yet
Enter a VIN · Vehicle workspace · Cyber MRI · Attack this vehicle + route brief · Upload evidence · Evidence request · Decision record
Evidence basis
None yet
Status
0 of 7 steps opened

"Opened" means viewed in this browser session, not verified. Synthetic results are exercise data, not findings about any real company or vehicle.