MITRE ATT&CK®
MITRE ATT&CK ® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.
Get Started | MITRE ATT&CK®
What is ATT&CK? ATT&CK is knowledge base of adversarial techniques based on real-world observations. ATT&CK focuses on how adversaries interact with systems during an operation, reflecting the various phases of an adversary’s attack …
Matrix - Enterprise - MITRE ATT&CK®
Below are the tactics and techniques representing the MITRE ATT&CK ® Matrix for Enterprise. The Matrix contains information for the following platforms: Windows, macOS, Linux, PRE, Office Suite, Identity Provider, SaaS, IaaS, Network, Containers.
ATT&CK Data & Tools - MITRE ATT&CK®
ATT&CK provides a variety of Python tools for accessing, querying, and processing the ATT&CK dataset. These scripts can be useful utilities or serve as examples for how to work with ATT&CK programmatically.
ATT&CK Training - MITRE ATT&CK®
ATT&CK Training ATT&CK Cyber Threat Intelligence : This training by the ATT&CK team will help you learn how to apply ATT&CK and improve your threat intelligence practices. Purple Teaming Fundamentals
Tactics - Enterprise - MITRE ATT&CK®
Tactics represent the "why" of an ATT&CK technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access.
Learn More About ATT&CK - MITRE ATT&CK®
This presentation provides a high-level explanation of the ATT&CK framework for MacOS and its components, then walks through the application of the ATT&CK framework to a real-world campaign using Pandas as a model. Emphasizes community-driven aspects of ATT&CK.
FAQ | MITRE ATT&CK®
What is ATT&CK? ATT&CK is a knowledge base of cyber adversary behavior and taxonomy for adversarial actions across their lifecycle. ATT&CK has two parts: ATT&CK for Enterprise, which covers behavior against enterprise IT networks and cloud, and ATT&CK for Mobile, which focuses on behavior against mobile devices.
Techniques - ICS - MITRE ATT&CK®
ICS Techniques Techniques represent 'how' an adversary achieves a tactical goal by performing an action. For example, an adversary may dump credentials to achieve credential access.
Techniques - Enterprise - MITRE ATT&CK®
The .NET framework uses the AppDomainManager class to create and manage one or more isolated runtime environments (called application domains) inside a process to host the execution of .NET applications.