Comprehensive knowledge base of adversary tactics and techniques based on real-world observations.
MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics, techniques, and procedures based on real-world observations. It provides a framework for understanding how attacks progress, what techniques adversaries use at each stage, and how to detect and mitigate them. ATT&CK covers enterprise, mobile, and ICS environments. Security teams use ATT&CK to evaluate detection coverage, conduct red team exercises, and communicate about threats. It's become the de facto standard for describing cyber attacks.
Why It Matters
The DSC Perspective:
MITRE ATT&CK provides common language for discussing threats and evaluating defences. Use it to assess detection coverage gaps, evaluate security tools, and understand threat actor behaviour. It's essential knowledge for security professionals.