Cybersecurity glossary
What is MITRE ATT&CK?
Also known as: ATT&CK
Definition
MITRE ATT&CK is a free knowledge base of real-world adversary tactics and techniques used to plan detections and structure investigations.
Why it matters
Tactics describe the attacker’s goal, such as initial access or persistence; techniques describe how it is achieved. Mapping detections to ATT&CK shows coverage gaps.
Common questions about MITRE ATT&CK
See also
Sources
Related Guides
GuideSOC
How I Investigate a Suspicious PowerShell Alert in a SOC Lab
A walkthrough of the exact triage workflow, event correlation steps, and command-line decoding techniques used to analyze suspicious PowerShell execution.
Read more GuideGRC
How to Write an IT Business Continuity Plan
Learn how to write an IT business continuity plan that protects critical systems, sets clear recovery targets, and maintains operational resilience.
Read more GuideSmall Business Security
How to Implement Ransomware Prevention in a Small Business
Learn practical ransomware prevention for small businesses. Protect devices, configure offline backups, secure access, and build an effective defense plan.
Read more GuideSmall Business Security
How to Write an Incident Response Plan Small Business Owners Use
Learn how to write an incident response plan small business teams can execute quickly. Protect operations, contain threats, and recover critical systems.
Read more