+1 coinfor reading to the end
+1
Home / Glossary / ATT&CK
Glossary · Security

ATT&CK

Adversarial Tactics, Techniques, and Common Knowledge

In plain language

A public catalogue, run by MITRE, listing the methods attackers use, grouped by the stage of an attack.

The metaphor

Like a field guide to burglars' habits: how they case a building, get in, move around and leave.

Going deeper

How it works

  • Groups methods by goal, such as getting in or stealing data.
  • Each method has a name and a number.
  • Defenders match detections to the list.
  • It is free to use.
In practice
  • A security report tags an alert with a technique number.
  • A test checks which methods a tool detects.
  • A provider explains coverage by listing the stages.

A question owners ask

Is it a tool I install?

No. It is a reference. Security tools and providers use it.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →