ATT&CK
The Adversarial Tactics, Techniques, and Common Knowledge or MITRE ATT&CK is a guideline for classifying and describing cyberattacks and intrusions. It was created by the Mitre Corporation and released in 2013.[1]
Rather than looking at the results of an attack (aka an indicator of compromise (IoC)), it identifies tactics that indicate an attack is in progress. Tactics are the “why” of an attack technique.
The framework consists of 14 tactics categories consisting of "technical objectives" of an adversary.[2] Examples include privilege escalation and command and control.[3] These categories are then broken down further into specific techniques and sub-techniques.[3]
The framework is an alternative to the Cyber Kill Chain developed by Lockheed Martin.[3]
References
- ↑ "What is the MITRE ATT&CK Framework?" (in en). https://www.rapid7.com/fundamentals/mitre-attack/.
- ↑ "Tactics in the ATT&CK Framework". 2022-08-03. https://www.exabeam.com/explainers/mitre-attck/what-is-mitre-attck-an-explainer/.
- ↑ 3.0 3.1 3.2 "What is the Mitre Attack Framework?" (in en). https://www.crowdstrike.com/cybersecurity-101/mitre-attack-framework/.
External links
 |  |
