All frameworks
mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

Official source

691 controls.

ReferenceFamilyTitle
T1564.014n/aExtended Attributes
T1565n/aData Manipulation
T1565.001n/aStored Data Manipulation
T1565.002n/aTransmitted Data Manipulation
T1565.003n/aRuntime Data Manipulation
T1566n/aPhishing
T1566.001n/aSpearphishing Attachment
T1566.002n/aSpearphishing Link
T1566.003n/aSpearphishing via Service
T1566.004n/aSpearphishing Voice
T1567n/aExfiltration Over Web Service
T1567.001n/aExfiltration to Code Repository
T1567.002n/aExfiltration to Cloud Storage
T1567.003n/aExfiltration to Text Storage Sites
T1567.004n/aExfiltration Over Webhook
T1568n/aDynamic Resolution
T1568.001n/aFast Flux DNS
T1568.002n/aDomain Generation Algorithms
T1568.003n/aDNS Calculation
T1569n/aSystem Services
T1569.001n/aLaunchctl
T1569.002n/aService Execution
T1569.003n/aSystemctl
T1570n/aLateral Tool Transfer
T1571n/aNon-Standard Port
T1572n/aProtocol Tunneling
T1573n/aEncrypted Channel
T1573.001n/aSymmetric Cryptography
T1573.002n/aAsymmetric Cryptography
T1574n/aHijack Execution Flow
T1574.001n/aDLL
T1574.004n/aDylib Hijacking
T1574.005n/aExecutable Installer File Permissions Weakness
T1574.006n/aDynamic Linker Hijacking
T1574.007n/aPath Interception by PATH Environment Variable
T1574.008n/aPath Interception by Search Order Hijacking
T1574.009n/aPath Interception by Unquoted Path
T1574.010n/aServices File Permissions Weakness
T1574.011n/aServices Registry Permissions Weakness
T1574.012n/aCOR_PROFILER
T1574.013n/aKernelCallbackTable
T1574.014n/aAppDomainManager
T1578n/aModify Cloud Compute Infrastructure
T1578.001n/aCreate Snapshot
T1578.002n/aCreate Cloud Instance
T1578.003n/aDelete Cloud Instance
T1578.004n/aRevert Cloud Instance
T1578.005n/aModify Cloud Compute Configurations
T1580n/aCloud Infrastructure Discovery
T1583n/aAcquire Infrastructure

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.