MITRE ATT-CK

Framework MITRE catalogue TTPs cyber adversaires.

Définition

ATT&CK Enterprise Matrix structure 14 tactics (Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Exfiltration, Impact, Reconnaissance, Resource Development). Sub-matrices : Mobile, ICS (Industrial Control Systems), Cloud, Containers. Outils : ATT&CK Navigator, CALDERA (purple team), DETT&CT (defense gap analysis).

Origine

MITRE Corporation, ATT&CK v1 2013, v15 octobre 2024.

Usage

Standard de facto industrie pour threat modeling, red/blue team exercises, SIEM use case library, detection engineering.

Termes liés

• MITRE — organisation parent.
• CALDERA — outil red team.
• Threat modeling — pratique associée.