MITRE ATT&CK
- Name
- MITRE ATT&CK
- Publisher
- MITRE
- Type
- Threat framework
- What it is
A knowledge base of adversary tactics and techniques based on real-world observations.
- Key points
- Tactics (the why) and techniques (the how)
- Used to map detections and plan testing
- On the exam
Mapping detection coverage to attacker behavior.