What is  MITRE ATT&CK?

MITRE ATT&CK is a cybersecurity framework introduced by MITRE Corporation in 2013 to help enterprises understand their security posture, identify vulnerabilities in their defenses and describe adversarial tactics and techniques based on real-world scenarios and observations. In this framework, ATT&CK stands for Adversarial Tactics, Techniques, and Common Knowledge. The framework is a comprehensive and systematic matrix of tactics and techniques used by red teamers, threat actors, security teams, or defenders to characterize cyberattacks better, assess a business’s risk, and defend their enterprises against known and emerging threats.

The MITRE ATT&CK framework and associated matrices have emerged as industry standards for knowledge and preventive tools related to adversary behavior. The MITRE ATT&CK matrix has been divided into various matrices, including multiple tactics and techniques.