About this Framework
MITRE ATT&CK (Adversarial Tactics, Techniques and Common Knowledge) is a globally accessible, continuously updated knowledge base of real-world adversary tactics and techniques. Available for Enterprise, Mobile, ICS and Cloud environments, ATT&CK is used by threat intelligence teams, SOC analysts, detection engineers and red teams to map attack paths, identify detection gaps, prioritise security controls and validate security tool coverage. The ATT&CK Navigator enables interactive matrix visualisation of detection and control coverage gaps against 700+ documented techniques.
Key Control Domains
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command & Control
Exfiltration
Impact
Who Needs This?
- Security operations centres (SOCs) and threat intelligence teams
- Red teams, purple teams and penetration testing professionals
- Threat hunters and detection engineering teams
- Security vendors integrating ATT&CK mapping into products
- CISOs and security programme managers measuring detection coverage
Compliance Benefits
- Globally recognised framework for adversary behaviour mapping and gap analysis
- Free, continuously updated with intelligence from real threat actors
- Enables measurable coverage analysis against actual documented attack techniques
- Natively integrated with SIEM, EDR, SOAR and threat intelligence platforms
Official Reference
MITRE ATT&CK Official Knowledge Base
https://attack.mitre.org/
Assessment Details
Share this Assessment
Share this permanent link with your team, clients or auditors.
https://grcopilot.app/frameworks/mitre-att-ck-security-assessment