Dictionary · Hacking Techniques and Methodologies
MITRE ATT&CK
ATT&CK — Adversarial Tactics, Techniques, and Common Knowledge
Frameworks · Advanced
A public knowledge base that names adversary tactics and techniques so defenders can describe behavior consistently. It is a vocabulary and a matrix, not a set of instructions.
Teams use it to say which behavior they can detect, such as persistence or lateral movement, without inventing a private dialect. Naming a technique is not the same as explaining how to perform it.
Example: A detection report tags an incident with a tactic and a technique ID so another team can search the same public matrix.
Common misconception
- It is not a checklist of steps to copy. Defenders use it to classify and detect behavior.