Explain like I'm five · Security
What is ATT&CK?
MITRE ATT&CK, the catalog of attacker techniques, told as a story about an encyclopedia.
It's a book of every trick bad guys use.A group called MITRE keeps it, and anyone can read it for free.
Inside, it's one big table.The top row says what they want; the cells below say how.
Column = tactic14 of them
Cell = technique200+ of them
The whole world uses the same names.'Fake letter' is T1566 everywhere. Nothing gets lost in translation.
Paint it for your own castle.Green where you're covered, red where you're not. Now you know where to work.
In one breath
ATT&CK = a free dictionary that names every known bad-guy trick.
Adversarial Tactics, Techniques & Common Knowledge. Only tricks actually seen in the wild make it in.
When grown-ups say it
- MITRE
- The keeper of the book. A US non-profit research group. Started the book in 2013.
- Tactic
- A column. The "what for" — get in, hide, steal. → the habit story
- Technique
- A cell. The "how". Each has a number starting with T.
- T1566
- The number for fake letters. Grown-ups call it phishing.
- ATT&CK Navigator
- The paint tool. A free web app for painting the table green and red.
Next story
The Pyramid of Pain →