ATT&CK
Technology & Computing abbreviation · Cybersecurity
| Stands for | Adversarial Tactics, Techniques, and Common Knowledge |
|---|---|
| Categories | Technology & Computing |
ATT&CK stands for Adversarial Tactics, Techniques, and Common Knowledge, a cybersecurity abbreviation.
A free knowledge base from MITRE that catalogs attacker behavior observed in real intrusions, organized into tactics such as initial access and persistence and hundreds of numbered techniques. Security teams use it to map detections and plan tests.
Example: Map each new detection rule to its ATT&CK technique so we can see coverage gaps.
Usage notes
MITRE released the framework publicly in 2015. Separate matrices cover enterprise systems, mobile devices and industrial control systems. Product evaluations based on it compare how security tools detect emulated attacks. The ampersand is part of the official name.
Related abbreviations
More cybersecurity abbreviations
- AAA – Authentication, authorization and accounting
- ABAC – Attribute-based access control
- ACL – Access control list
- AES – Advanced Encryption Standard
- APT – Advanced persistent threat
- ASLR – Address space layout randomization
- AV – Antivirus
- BEC – Business email compromise
- BYOD – Bring your own device
- C2 – Command and control
- CA – Certificate authority
- CAPTCHA – Completely Automated Public Turing test to tell Computers and Humans…