One row per incident, grouped by year. Each dot is a step in the chain, colored by its MITRE tactic. Read a row left-to-right to see the shape of a single attack; read a year-group top-to-bottom to see which tactics dominated that year.