The MITRE ATT&CK Framework is a detailed knowledge base that outlines adversarial tactics, techniques, and procedures (TTPs) used in real-world cyberattacks. It is widely used by organizations to enhance their cybersecurity defenses by better understanding how adversaries operate. The framework is divided into three matrices—Pre-ATT&CK, ATT&CK, and Mobile—together providing end-to-end visibility of an attack chain.
Key Points:
- Tactics: The objectives adversaries aim to achieve, such as gaining access to sensitive data or maintaining persistence.
- Techniques: The methods attackers use to achieve their tactics, which are subdivided into specific techniques, like phishing for data access.
- Procedures: The specific applications of techniques and tools used by attackers, such as malware or viruses.
Why is MITRE ATT&CK useful?
- Detection and Monitoring: Organizations use the framework to map detection and defense efforts to the actual tactics adversaries employ.
- Blue Team Support: Helps security teams understand and defend against real-world threats, and spot attack patterns early.
- Cross-Sector Use: The framework is freely available and widely used across both private and public sectors for enhancing cybersecurity strategies.
About Genesis:
Genesis is a comprehensive cyber risk management platform that combines attack surface and third-party risk management into one platform. Businesses can monitor their cybersecurity posture, map digital assets, and reduce attack surfaces to prevent data breaches and discover potential organizational and vendor threats.
