MITRE ATT&CK

From Elvis Wiki

Introduction

Developed by MITRE, ATT&CK is a globally accessible knowledge base focused on adversary behaviour. Cyber adversaries are notorious for their intelligence, adaptability, and persistence, learning from each attack, whether successful or unsuccessful. Their capabilities range from stealing personal information to disrupting critical infrastructure and damaging business operations. The MITRE ATT&CK knowledge-base is freely available to everyone. THE MITRE ATT&CK knowledge base documents the common tactics, techniques and procedures used by cyber adversaries. It can serve as a valuable resource for the development of specific threat models and methodologies. [1]


MITRE ATT&CK Matrix for Enterprise

Reconnaissance

Ressource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Command and Controll

Exfiltration

Impact

References