# Threat Reasoning Worker

*/Agents/Threat_Reasoning_Worker*

## Neighborhood

### Composed into

- [Dropzone Security](/Startups/Dropzone_Security) — composes · Startups

### What it does

- [Attribute Activity To Known Threat Actors](/Tasks/Attribute_Activity_To_Known_Threat_Actors) — performs · Tasks
- [Generate Threat Hypotheses For Hunting](/Tasks/Generate_Threat_Hypotheses_For_Hunting) — performs · Tasks
- [Map Observed Behavior To MITRE ATTACK Techniques](/Tasks/Map_Observed_Behavior_To_MITRE_ATTACK_Techniques) — performs · Tasks
- [Reconstruct Attack Chains From Alert Clusters](/Tasks/Reconstruct_Attack_Chains_From_Alert_Clusters) — performs · Tasks

### Realizes

- [Adversary Attribution Analysis](/Services/Adversary_Attribution_Analysis) — realizes · Services
- [Threat Hunting](/Services/Threat_Hunting) — realizes · Services

### Uses tool

- [Alert Correlation](/Action/Alert_Correlation) — uses tool · Action
- [Kill Chain Mapping](/Action/Kill_Chain_Mapping) — uses tool · Action
- [Graph Analysis Engine](/Products/Graph_Analysis_Engine) — uses tool · Products
- [Threat Intelligence Platform](/Products/Threat_Intelligence_Platform) — uses tool · Products