TTP Catalog

The full MITRE ATT&CK Enterprise matrix. Search for a technique by ID, name, tactic, or words from its write-up, or pick a tactic below to browse. Some techniques have in-depth write-ups (what they are, how they look in telemetry, how to hunt them), and the rest are indexed for reference.

74 of 602 in-scope techniques have in-depth coverage so far. (96 excluded, see why)

Reconnaissance46 techniques · out of scope Resource Development50 techniques · out of scope Initial Access7 of 22 covered Execution8 of 64 covered Persistence14 of 113 covered Privilege Escalation11 of 96 covered Stealth9 of 149 covered Defense Impairment3 of 56 covered Credential Access6 of 67 covered Discovery9 of 49 covered Lateral Movement6 of 23 covered Collection6 of 41 covered Command and Control7 of 45 covered Exfiltration5 of 19 covered Impact2 of 33 covered