mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

691 controls.

Reference	Family	Title
T1557.002	n/a	ARP Cache Poisoning
T1557.003	n/a	DHCP Spoofing
T1557.004	n/a	Evil Twin
T1558	n/a	Steal or Forge Kerberos Tickets
T1558.001	n/a	Golden Ticket
T1558.002	n/a	Silver Ticket
T1558.003	n/a	Kerberoasting
T1558.004	n/a	AS-REP Roasting
T1558.005	n/a	Ccache Files
T1559	n/a	Inter-Process Communication
T1559.001	n/a	Component Object Model
T1559.002	n/a	Dynamic Data Exchange
T1559.003	n/a	XPC Services
T1560	n/a	Archive Collected Data
T1560.001	n/a	Archive via Utility
T1560.002	n/a	Archive via Library
T1560.003	n/a	Archive via Custom Method
T1561	n/a	Disk Wipe
T1561.001	n/a	Disk Content Wipe
T1561.002	n/a	Disk Structure Wipe
T1562	n/a	Impair Defenses
T1562.001	n/a	Disable or Modify Tools
T1562.002	n/a	Disable Windows Event Logging
T1562.003	n/a	Impair Command History Logging
T1562.004	n/a	Disable or Modify System Firewall
T1562.006	n/a	Indicator Blocking
T1562.007	n/a	Disable or Modify Cloud Firewall
T1562.008	n/a	Disable or Modify Cloud Logs
T1562.009	n/a	Safe Mode Boot
T1562.010	n/a	Downgrade Attack
T1562.011	n/a	Spoof Security Alerting
T1562.012	n/a	Disable or Modify Linux Audit System
T1562.013	n/a	Disable or Modify Network Device Firewall
T1563	n/a	Remote Service Session Hijacking
T1563.001	n/a	SSH Hijacking
T1563.002	n/a	RDP Hijacking
T1564	n/a	Hide Artifacts
T1564.001	n/a	Hidden Files and Directories
T1564.002	n/a	Hidden Users
T1564.003	n/a	Hidden Window
T1564.004	n/a	NTFS File Attributes
T1564.005	n/a	Hidden File System
T1564.006	n/a	Run Virtual Instance
T1564.007	n/a	VBA Stomping
T1564.008	n/a	Email Hiding Rules
T1564.009	n/a	Resource Forking
T1564.010	n/a	Process Argument Spoofing
T1564.011	n/a	Ignore Process Interrupts
T1564.012	n/a	File/Path Exclusions
T1564.013	n/a	Bind Mounts

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.