MITRE ATT&CK Framework

Summary

A widely used knowledge base cataloging real-world attacker tactics and techniques, organized by attack lifecycle stage — the standard shared vocabulary for describing and detecting attacker behavior.

How to Learn This

1Explore the MITRE ATT&CK matrix and identify techniques relevant to a recent real breach.
2Learn how detection rules are often mapped to specific ATT&CK techniques.
3Practice describing a hypothetical attack scenario using ATT&CK's terminology.

Threat Intelligence Basics

Building Detection Rules

More topics in Security Operations & Monitoring

SOC (Security Operations Center) Basics SIEM Fundamentals (Splunk, ELK)Log Analysis & Correlation Intrusion Detection & Prevention Systems (IDS/IPS)Threat Hunting Basics Security Alerts & Triage Endpoint Detection & Response (EDR)Threat Intelligence Basics Building Detection Rules

Stuck on this topic? Ask an Insider

Get 1:1 guidance from people who've walked this exact path — free on the InsideEdge app.

Download