Tech Insights

MITRE ATT&CK

Last updated May 17, 2025, generated by Sumble

What is MITRE ATT&CK?

MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK framework is used as a foundation for the development of specific threat models and methodologies in the private sector, government, and cybersecurity product and service community. It is commonly used for threat intelligence, red teaming, and improving security posture by identifying gaps in defenses.

Find organizations using MITRE ATT&CK on Sumble →

What other technologies are related to MITRE ATT&CK?

MITRE ATT&CK Complementary Technologies

Cyber Kill Chain

The Cyber Kill Chain is a framework for understanding and combating intrusions. While not directly competitive with MITRE ATT&CK, they complement each other. ATT&CK provides a more detailed matrix of techniques, and the Kill Chain represents phases of an attack.

mentioned alongside MITRE ATT&CK in 61% (814) of relevant job posts

D3FEND

MITRE D3FEND is a knowledge graph of cybersecurity countermeasures. It's strongly complementary to MITRE ATT&CK because it provides a way to map defensive techniques to offensive techniques, allowing for a more comprehensive security strategy.

mentioned alongside MITRE ATT&CK in 78% (230) of relevant job posts

Diamond Model

The Diamond Model for Intrusion Analysis is a framework for analyzing security incidents. It complements ATT&CK by providing a structure for understanding the relationships between adversary, capability, infrastructure, and victim, which can then be mapped to ATT&CK techniques.

mentioned alongside MITRE ATT&CK in 67% (159) of relevant job posts