MITRE ATT&CK

MITRE ATT&CK is organized into matrices covering enterprise, mobile, and cloud environments. Each technique is documented with descriptions, detection guidance, and real-world examples. SOC teams use ATT&CK to standardize communication about threats, assess detection coverage, develop hunt hypotheses, and map observed attacker behavior to known threat actor profiles. It has become the de facto shared language for describing attacker behavior across the security industry.