← Security+ glossary

MITRE ATT&CK framework

A publicly available knowledge base of the tactics, techniques and procedures (TTPs) of real attackers, organized into a matrix from initial access to exfiltration. It is used to map detection coverage, guide threat hunting, emulate adversaries and describe incidents with a shared vocabulary.

All Security+ guides →