TTP Catalog

The full MITRE ATT&CK Enterprise matrix. Search for a technique by ID, name, or tactic, or pick a tactic below to browse. Some techniques have in-depth write-ups (what they are, how they look in telemetry, how to hunt them), and the rest are indexed for reference.

49 of 602 in-scope techniques have in-depth coverage so far. (96 excluded, see why)

Reconnaissance46techniques · out of scope Resource Development50techniques · out of scope Initial Access3 of 22 covered Execution4 of 64 covered Persistence9 of 113 covered Privilege Escalation7 of 95 covered Stealth1 of 149 covered Defense Impairment3 of 56 covered Credential Access5 of 67 covered Discovery5 of 49 covered Lateral Movement5 of 23 covered Collection4 of 41 covered Command and Control7 of 45 covered Exfiltration4 of 19 covered Impact2 of 33 covered