Explain like I'm five · Security

What is ATT&CK?

MITRE ATT&CK, the catalog of attacker techniques, told as a story about an encyclopedia.

Burglar TricksEncyclopediaFREE

It's a book of every trick bad guys use.A group called MITRE keeps it, and anyone can read it for free.

Get inHideMove aroundStealGet out

Inside, it's one big table.The top row says what they want; the cells below say how.

Column = tactic14 of them
Cell = technique200+ of them
T1566T1566T1566SeoulBerlinSão Paulo

The whole world uses the same names.'Fake letter' is T1566 everywhere. Nothing gets lost in translation.

Get inHideMove aroundStealGet outcovereda gap

Paint it for your own castle.Green where you're covered, red where you're not. Now you know where to work.

In one breath

ATT&CK = a free dictionary that names every known bad-guy trick.

Adversarial Tactics, Techniques & Common Knowledge. Only tricks actually seen in the wild make it in.

When grown-ups say it

MITRE
The keeper of the book. A US non-profit research group. Started the book in 2013.
Tactic
A column. The "what for" — get in, hide, steal. → the habit story
Technique
A cell. The "how". Each has a number starting with T.
T1566
The number for fake letters. Grown-ups call it phishing.
ATT&CK Navigator
The paint tool. A free web app for painting the table green and red.
Next story
The Pyramid of Pain →
Want another term as a picture book? Request →