MITRE ATT&CK
A cybersecurity knowledge base maintained by MITRE that systematically documents the tactics, techniques, and procedures (TTPs) used by adversaries. It is widely used for threat intelligence analysis and as a reference framework for security defense guidance.
Core Facts
Timeline (last 90 days)
The MITRE ATT&CK framework added classification entries for AI-assisted attack techniques in recent updates.
T1053 in MITRE ATT&CK represents the scheduled task/job abuse technique.
MITRE ATT&CK is a knowledge base of adversary tactics and techniques maintained by MITRE Corporation, categorized and numbered along two dimensions of tactical objectives and technical methods, currently covering hundreds of technique entries.
Lateral movement refers to the technique by which an attacker, after gaining control of an internal host or account, uses that foothold to expand access within the internal network; common techniques include Pass-the-Hash, Pass-the-Ticket, RDP, WMI, and PSExec, and the MITRE ATT&CK framework lists lateral movement as one of the key stages of the attack chain.
In the MITRE ATT&CK framework, C2 communication is classified as the 11th phase of the attack chain.
MITRE ATT&CK systematically categorizes known attack techniques, providing defenders with an encyclopedia of attacker behavior.
The MITRE ATT&CK framework categorizes known attack techniques into 14 tactics and hundreds of techniques/sub-techniques.
威胁情报共享实践包括STIX/TAXII标准和MITRE ATT&CK框架下的协作
MITRE developed the ATLAS framework, which systematically categorizes attack techniques facing AI systems into phases such as reconnaissance, resource development, initial access, execution, and persistence, similar to the ATT&CK matrix.
The MITRE ATT&CK framework lists lateral movement as an independent tactic category
All Facts (11)
The MITRE ATT&CK framework categorizes known attack techniques into 14 tactics and hundreds of techniques/sub-techniques.
75%VerifiedThe MITRE ATT&CK framework lists lateral movement as an independent tactic category
65%UnverifiedMITRE ATT&CK systematically categorizes known attack techniques, providing defenders with an encyclopedia of attacker behavior.
70%UnverifiedMITRE developed the ATLAS framework, which systematically categorizes attack techniques facing AI systems into phases such as reconnaissance, resource development, initial access, execution, and persistence, similar to the ATT&CK matrix.
60%UnverifiedThe MITRE ATT&CK framework lists lateral movement as a distinct tactic category, documenting dozens of specific techniques including Pass-the-Hash and Kerberoasting.
60%UnverifiedThe MITRE ATT&CK framework added classification entries for AI-assisted attack techniques in recent updates.
50%UnverifiedMITRE ATT&CK is a knowledge base of adversary tactics and techniques maintained by MITRE Corporation, categorized and numbered along two dimensions of tactical objectives and technical methods, currently covering hundreds of technique entries.
50%UnverifiedT1053 in MITRE ATT&CK represents the scheduled task/job abuse technique.
50%UnverifiedLateral movement refers to the technique by which an attacker, after gaining control of an internal host or account, uses that foothold to expand access within the internal network; common techniques include Pass-the-Hash, Pass-the-Ticket, RDP, WMI, and PSExec, and the MITRE ATT&CK framework lists lateral movement as one of the key stages of the attack chain.
50%UnverifiedIn the MITRE ATT&CK framework, C2 communication is classified as the 11th phase of the attack chain.
50%Unverified威胁情报共享实践包括STIX/TAXII标准和MITRE ATT&CK框架下的协作
50%