Open in app
Sign inGet started
ATT&CK Goes to v11

ATT&CK Goes to v11

Structured Detections, Beta Sub-Techniques for Mobile, and ICS Joins the Band
Go to the profile of Adam Pennington
Adam Pennington
Intelligence Failures of Lincoln’s Top Spies: What CTI Analysts Can Learn From the Civil War

Intelligence Failures of Lincoln’s Top Spies: What CTI Analysts Can Learn From the Civil War

By examining the intelligence reporting failures documented by modern historians, threat intelligence analysts can be better prepared
Go to the profile of Selena Larson
Selena Larson
ATT&CK for Mobile: Reintroduction and 2022 Goals

ATT&CK for Mobile: Reintroduction and 2022 Goals

What is it, and where are we taking it?
Go to the profile of Jason Ajmo
Jason Ajmo
ATT&CK 2022 Roadmap

ATT&CK 2022 Roadmap

Where We’ve Been and Where We’re Going​
Go to the profile of Amy L. Robertson
Amy L. Robertson
Introducing ATT&CK v10: More Objects, Parity and Features

Introducing ATT&CK v10: More Objects, Parity and Features

Detailing the content and feature updates just released in ATT&CK v10
Go to the profile of Amy L. Robertson
Amy L. Robertson
What’s New in ATT&CK v9?

What’s New in ATT&CK v9?

Data Sources, Containers, Cloud, and More
Go to the profile of Jamie Williams
Jamie Williams
ATT&CK 2021 Roadmap

ATT&CK 2021 Roadmap

A review of how we navigated 2020 and where we’re heading in 2021
Go to the profile of Amy L. Robertson
Amy L. Robertson
Mitigating Abuse of Android Application Permissions and Special App Accesses

Mitigating Abuse of Android Application Permissions and Special App Accesses

Part 1 of a series on ATT&CK® for Mobile (Android and iOS) devices
Go to the profile of Michael Peck
Michael Peck
Identifying UNC2452-Related Techniques for ATT&CK

Identifying UNC2452-Related Techniques for ATT&CK

Tracking UNC2452-related reporting as we look to update ATT&CK.
Go to the profile of Matt Malone
Matt Malone
Bringing PRE into Enterprise

Bringing PRE into Enterprise

Integrating the scope of PRE-ATT&CK into Enterprise ATT&CK
Go to the profile of Adam Pennington
Adam Pennington
Defining ATT&CK Data Sources, Part II: Operationalizing the Methodology

Defining ATT&CK Data Sources, Part II: Operationalizing the Methodology

Describing how a new data sources methodology can be implemented with ATT&CK data sources.
Go to the profile of Jose Luis Rodriguez
Jose Luis Rodriguez
In Pursuit of a Gestalt Visualization: Merging MITRE ATT&CK® for Enterprise and ICS to Communicate

In Pursuit of a Gestalt Visualization: Merging MITRE ATT&CK® for Enterprise and ICS to Communicate

A joint post exploring leveraging ATT&CK for Enterprise and ICS together in a visualization.
Go to the profile of Otis Alexander
Otis Alexander
Defining ATT&CK Data Sources, Part I: Enhancing the Current State

Defining ATT&CK Data Sources, Part I: Enhancing the Current State

Outlining a new methodology to extend the concepts around data sources
Go to the profile of Jose Luis Rodriguez
Jose Luis Rodriguez
“ATT&CK with Sub-Techniques” is Now Just ATT&CK

“ATT&CK with Sub-Techniques” is Now Just ATT&CK

ATT&CK with Sub-Techniques is Now Live: The what, why, and how to leverage sub-techniques.
Go to the profile of Adam Pennington
Adam Pennington
Actionable Detections: An Analysis of ATT&CK Evaluations Data Part 2 of 2

Actionable Detections: An Analysis of ATT&CK Evaluations Data Part 2 of 2

With the recent release of the APT29 Evaluations results, and with Carbanak+FIN7 launching soon, we’re providing more context.
Go to the profile of Jamie Williams
Jamie Williams
Dissecting a Detection: An Analysis of ATT&CK Evaluations Data (Sources) Part 1 of 2

Dissecting a Detection: An Analysis of ATT&CK Evaluations Data (Sources) Part 1 of 2

With the recent release of the APT29 Evaluations results, and with Carbanak+FIN7 launching soon, we’re providing more context to the…
Go to the profile of Jamie Williams
Jamie Williams
ATT&CK Evaluations: Understanding the Newly Released APT29 Results

ATT&CK Evaluations: Understanding the Newly Released APT29 Results

In late 2019, the ATT&CK Evaluations team evaluated 21 endpoint security vendors using an evaluation methodology based on APT29.
Go to the profile of Frank Duff
Frank Duff
ATT&CK with Sub-Techniques — What You Need to Know

ATT&CK with Sub-Techniques — What You Need to Know

The beta version of ATT&CK with sub-techniques implemented is now live on the ATT&CK site!
Go to the profile of Blake Strom
Blake Strom
2020 ATT&CK Roadmap

2020 ATT&CK Roadmap

Taking a look back at 2019 and presenting a 2020 roadmap for ATT&CK
Go to the profile of Blake Strom
Blake Strom
Announcing 2020’s ATT&CK Evaluation: Carbanak and FIN7

Announcing 2020’s ATT&CK Evaluation: Carbanak and FIN7

Following our evaluations emulating APT3 and APT29, we’re now announcing round 3 with FIN7 and Carbanak.
Go to the profile of Frank Duff
Frank Duff
Sub-Technique Update Part Deux

Sub-Technique Update Part Deux

Sub-techniques are coming… soon!
Go to the profile of Blake Strom
Blake Strom
ATT&CK Sightings — We Need YOU!

ATT&CK Sightings — We Need YOU!

An update on the sightings project and a request for data from the community.
Go to the profile of John Wunder
John Wunder
ATT&CKcon 2.0

ATT&CKcon 2.0

Summarizing the themes and knowledge shared at October 2019’s ATT&CKcon 2.0.
Go to the profile of Amy L. Robertson
Amy L. Robertson
Launching ATT&CK for ICS

Launching ATT&CK for ICS

We have seen a lot of interest in ATT&CK for Industrial Control Systems (ICS) over the last couple of years and are releasing it now.
Go to the profile of Otis Alexander
Otis Alexander
Automating Mapping to ATT&CK: The Threat Report ATT&CK Mapper (TRAM) Tool

Automating Mapping to ATT&CK: The Threat Report ATT&CK Mapper (TRAM) Tool

TRAM is a web-based tool that automates the extraction of adversary behaviors for the purpose of mapping them to ATT&CK.
Go to the profile of Sarah Yoder
Sarah Yoder
About MITRE ATT&CK®Latest StoriesArchiveAbout MediumTermsPrivacy