All frameworks
mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

Official source

691 controls.

ReferenceFamilyTitle
T1071.005n/aPublish/Subscribe Protocols
T1072n/aSoftware Deployment Tools
T1074n/aData Staged
T1074.001n/aLocal Data Staging
T1074.002n/aRemote Data Staging
T1078n/aValid Accounts
T1078.001n/aDefault Accounts
T1078.002n/aDomain Accounts
T1078.003n/aLocal Accounts
T1078.004n/aCloud Accounts
T1080n/aTaint Shared Content
T1082n/aSystem Information Discovery
T1083n/aFile and Directory Discovery
T1087n/aAccount Discovery
T1087.001n/aLocal Account
T1087.002n/aDomain Account
T1087.003n/aEmail Account
T1087.004n/aCloud Account
T1090n/aProxy
T1090.001n/aInternal Proxy
T1090.002n/aExternal Proxy
T1090.003n/aMulti-hop Proxy
T1090.004n/aDomain Fronting
T1091n/aReplication Through Removable Media
T1092n/aCommunication Through Removable Media
T1095n/aNon-Application Layer Protocol
T1098n/aAccount Manipulation
T1098.001n/aAdditional Cloud Credentials
T1098.002n/aAdditional Email Delegate Permissions
T1098.003n/aAdditional Cloud Roles
T1098.004n/aSSH Authorized Keys
T1098.005n/aDevice Registration
T1098.006n/aAdditional Container Cluster Roles
T1098.007n/aAdditional Local or Domain Groups
T1102n/aWeb Service
T1102.001n/aDead Drop Resolver
T1102.002n/aBidirectional Communication
T1102.003n/aOne-Way Communication
T1104n/aMulti-Stage Channels
T1105n/aIngress Tool Transfer
T1106n/aNative API
T1110n/aBrute Force
T1110.001n/aPassword Guessing
T1110.002n/aPassword Cracking
T1110.003n/aPassword Spraying
T1110.004n/aCredential Stuffing
T1111n/aMulti-Factor Authentication Interception
T1112n/aModify Registry
T1113n/aScreen Capture
T1114n/aEmail Collection

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.