Introducing the MITRE ATLAS Matrix

The MITRE ATT&CK framework is a globally recognized knowledge base and framework. Security professionals use it to understand and organize adversary behaviors in cyber threat environments. ATT&CK® (or ATTACK) stands for Adversarial Tactics, Techniques, and Common Knowledge. It is essentially a catalog of tactics, techniques, and procedures (TTPs) that adversaries use during different stages of a cyberattack. It covers many threat vectors, including initial access, execution, persistence, privilege escalation, defense evasion, credential access, discovery, lateral movement, collection, exfiltration, and impact.

The MITRE ATT&CK framework organizes these techniques into a matrix that classifies them based on the various stages of an attack and the platforms on which they are applicable (for example, Windows, macOS, or Linux). Each technique in the matrix is described in detail in the MITRE knowledge base, including information on...