The MITRE ATT&CK Matrix

The MITRE ATT&CK Matrix was originally designed to address several growing concerns in the cyber security community. Overall, there was a need to address adversarial behavior with a common lexicon at an appropriate depth that was meaningful to defenders. While methodology frameworks such as the Lockheed Martin Cyber Kill Chain work, they are very high level and generic. The MITRE ATT&CK Matrix addresses this lagging issue in detail.

With its 14 different categories, otherwise known as tactics, this Matrix provides insight into each of the actions an adversary could go through while performing their intrusion. For threat hunters, this Matrix can be critical in helping narrow down the scope and tactics that are required for a hunt. Intel analysts can utilize this Matrix in conjunction with another MITRE tool, called Navigator, in which you can overlay an adversary's known capabilities on top of the ATT&CK Matrix to find out what needs to...