Which TTPs keep recurring?

Every row is an ATT&CK technique. Every column is a calendar year. A cell's shade tracks how many distinct catalog actors were publicly active that year while carrying that technique in their attributed profile. Read the rows like sparklines: an unbroken line of darker cells is a technique that has stayed in adversary tradecraft across the whole catalog window; a single bright cell is a campaign-specific spike.

Caveat: actor → technique attribution is at the actor level, not the per-event level, so a cell counts actors that have the technique AND were publicly active that year, not events where the technique was named. Filters: top 30 of 33 techniques with 2+ actors.