MITRE ATT&CK
attack.mitre.orgAdversarial Tactics, Techniques, and Common Knowledge framework for cyber threats
Securitythreat-intelligencecybersecurityattack-frameworkred-teamdetectionadversary-tacticsopen-source
About
MITRE ATT&CK is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations of cyberattacks. It documents the full attack lifecycle from reconnaissance through impact, organizing hundreds of techniques and sub-techniques across enterprise, mobile, and ICS environments. Security teams use it as a reference framework for threat modeling, detection engineering, red teaming, and security assessments.
Problem
Security teams lack a standardized, comprehensive reference for understanding and cataloging adversary behaviors and attack techniques.
For
security professionals, threat intelligence analysts, red teamers, and SOC teams
How it works
MITRE ATT&CK organizes documented adversary behaviors into a structured matrix of tactics and techniques, allowing practitioners to map threats, assess defenses, and build detection strategies.
Business model
free
Status
launched
Company
MITRE Corporation