MITRE ATT-CK

MITRE framework cataloging cyber adversary TTPs.

Definition

ATT&CK Enterprise Matrix structures 14 tactics (Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Exfiltration, Impact, Reconnaissance, Resource Development). Sub-matrices: Mobile, ICS (Industrial Control Systems), Cloud, Containers. Tools: ATT&CK Navigator, CALDERA (purple team), DETT&CT (defense gap analysis).

Origin

MITRE Corporation, ATT&CK v1 2013, v15 October 2024.

Usage

De facto industry standard for threat modeling, red/blue team exercises, SIEM use case library, detection engineering.

Related terms

• MITRE — organisation parent.
• CALDERA — outil red team.
• Threat modeling — pratique associée.