The MITRE ATT&CK framework documents adversary tactics and techniques, providing a common language for threat analysis.
What is ATT&CK?
ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a knowledge base of real-world adversary behaviors.
Framework Structure
The matrix organizes techniques by tactics (goals) and provides detailed descriptions with mitigations.
Practical Applications
- Threat Modeling - Identify likely attack paths for your environment.
- Detection Development - Build detections mapped to specific techniques.
- Gap Analysis - Identify coverage gaps in your defenses.
Framework-Based Defense
Align threat intelligence with ATT&CK.