All frameworks
mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

Official source

691 controls.

ReferenceFamilyTitle
T1114.001n/aLocal Email Collection
T1114.002n/aRemote Email Collection
T1114.003n/aEmail Forwarding Rule
T1115n/aClipboard Data
T1119n/aAutomated Collection
T1120n/aPeripheral Device Discovery
T1123n/aAudio Capture
T1124n/aSystem Time Discovery
T1125n/aVideo Capture
T1127n/aTrusted Developer Utilities Proxy Execution
T1127.001n/aMSBuild
T1127.002n/aClickOnce
T1127.003n/aJamPlus
T1129n/aShared Modules
T1132n/aData Encoding
T1132.001n/aStandard Encoding
T1132.002n/aNon-Standard Encoding
T1133n/aExternal Remote Services
T1134n/aAccess Token Manipulation
T1134.001n/aToken Impersonation/Theft
T1134.002n/aCreate Process with Token
T1134.003n/aMake and Impersonate Token
T1134.004n/aParent PID Spoofing
T1134.005n/aSID-History Injection
T1135n/aNetwork Share Discovery
T1136n/aCreate Account
T1136.001n/aLocal Account
T1136.002n/aDomain Account
T1136.003n/aCloud Account
T1137n/aOffice Application Startup
T1137.001n/aOffice Template Macros
T1137.002n/aOffice Test
T1137.003n/aOutlook Forms
T1137.004n/aOutlook Home Page
T1137.005n/aOutlook Rules
T1137.006n/aAdd-ins
T1140n/aDeobfuscate/Decode Files or Information
T1176n/aSoftware Extensions
T1176.001n/aBrowser Extensions
T1176.002n/aIDE Extensions
T1185n/aBrowser Session Hijacking
T1187n/aForced Authentication
T1189n/aDrive-by Compromise
T1190n/aExploit Public-Facing Application
T1195n/aSupply Chain Compromise
T1195.001n/aCompromise Software Dependencies and Development Tools
T1195.002n/aCompromise Software Supply Chain
T1195.003n/aCompromise Hardware Supply Chain
T1197n/aBITS Jobs
T1199n/aTrusted Relationship

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.