MITRE ATT&CK
defined.

What is MITRE ATT&CK?

ATT&CK organises adversary behaviour into tactics (the “why”), techniques (the “how”), and sub-techniques. It’s the de-facto standard for SOC content engineering, threat modelling, and red team reporting.

Related terms.

• Common Vulnerability Scoring System (CVSS)
• Common Vulnerabilities and Exposures (CVE)
• OWASP Top 10
• Purple Team

Where this shows up.

See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.