mitre-attck-reference

• SKILL.mdcore · 13,040 bytes
• SKILL.mdcore · 13,040 bytes
• SKILL.mdcore · 13,040 bytes

<!-- AUTO-GENERATED by export-skills.py — DO NOT EDIT -->
---
name: mitre-attck-reference
description: MITRE ATT&CK Enterprise framework reference for mapping adversary tactics, techniques, and detection guidance
tags: [security, threat-intelligence]
---

# MITRE ATT&CK Framework Reference

## Overview

MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a globally recognized knowledge base of adversary behavior. The Enterprise matrix organizes attack patterns into 14 tactical phases that describe the progression of a cyberattack from initial reconnaissance through final impact. Security agents use ATT&CK to classify incidents, build detection logic, identify coverage gaps, and communicate threats using a shared vocabulary.

The Enterprise matrix covers behaviors observed against Windows, macOS, Linux, cloud (AWS, Azure, GCP), network infrastructure, and container environments. Each technique has a unique identifier (e.g., T1566) and may include sub-techniques (e.g., T1566.001).