View source for ATT&CK

{{Short description|Framework for describing and categorizing cyberattacks}}
The '''Adversarial Tactics, Techniques, and Common Knowledge''' or '''MITRE ATT&CK''' is a guideline for classifying and describing cyberattacks and intrusions. It was created by the [[Organization:Mitre Corporation|Mitre Corporation]] and released in 2013.<ref>{{Cite web |title=What is the MITRE ATT&CK Framework? |url=https://www.rapid7.com/fundamentals/mitre-attack/ |access-date=2022-04-18 |website=Rapid7 |language=en}}</ref>

Rather than looking at the results of an attack (aka an [[Indicator of compromise|indicator of compromise]] (IoC)), it identifies tactics that indicate an attack is in progress. Tactics are the “why” of an attack technique.

The framework consists of 14 tactics categories consisting of "technical objectives" of an adversary.<ref>{{Cite web |date=2022-08-03 |title=Tactics in the ATT&CK Framework |url=https://www.exabeam.com/explainers/mitre-attck/what-is-mitre-attck-an-explainer/ |website=Exabeam}}</ref> Examples include [[Privilege escalation|privilege escalation]] and command and control.<ref name="crowdstrike">{{Cite web |title=What is the Mitre Attack Framework? |url=https://www.crowdstrike.com/cybersecurity-101/mitre-attack-framework/ |access-date=2022-04-18 |website=crowdstrike.com |language=en}}</ref> These categories are then broken down further into specific techniques and sub-techniques.<ref name="crowdstrike" />

The framework is an alternative to the [[Kill chain#Cyber|Cyber Kill Chain]] developed by [[Company:Lockheed Martin|Lockheed Martin]].<ref name=crowdstrike/>

==References==
{{Reflist}}

==External links==

{{MITRE security ontologies}}

{{DEFAULTSORT:ATTandCK}}
[[Category:Classification systems]]
[[Category:Computer standards]]

{{Sourceattribution|ATT&amp;CK}}