MITRE ATT&CK

attack.mitre.org

Adversarial Tactics, Techniques, and Common Knowledge framework for cyber threats

Visit
MITRE ATT&CK screenshot
/ About /

MITRE ATT&CK is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations of cyberattacks. It documents the full attack lifecycle from reconnaissance through impact, organizing hundreds of techniques and sub-techniques across enterprise, mobile, and ICS environments. Security teams use it as a reference framework for threat modeling, detection engineering, red teaming, and security assessments.

/ How it works /

MITRE ATT&CK organizes documented adversary behaviors into a structured matrix of tactics and techniques, allowing practitioners to map threats, assess defenses, and build detection strategies.

/ Who it's for /

security professionals, threat intelligence analysts, red teamers, and SOC teams

/ More info /

Background.

Status
launched
Business model
free
Company
MITRE Corporation
/ Discovered patterns /

Similar projects.

Coming soonSpektrail’s read on Security

Editorial take on the space this project sits in — momentum signals, adjacent moves, our call on whether the wedge is real. Get pinged when we publish a new read or when the landscape shifts.

Coming soon

Have a take on this space?

Tell us what you’d build differently, where you think the incumbents miss, or what we’ve gotten wrong about this project. Comments + reactions are coming soon.