All frameworks
mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

Official source

691 controls.

ReferenceFamilyTitle
T1222.001n/aWindows File and Directory Permissions Modification
T1222.002n/aLinux and Mac File and Directory Permissions Modification
T1480n/aExecution Guardrails
T1480.001n/aEnvironmental Keying
T1480.002n/aMutual Exclusion
T1482n/aDomain Trust Discovery
T1484n/aDomain or Tenant Policy Modification
T1484.001n/aGroup Policy Modification
T1484.002n/aTrust Modification
T1485n/aData Destruction
T1485.001n/aLifecycle-Triggered Deletion
T1486n/aData Encrypted for Impact
T1489n/aService Stop
T1490n/aInhibit System Recovery
T1491n/aDefacement
T1491.001n/aInternal Defacement
T1491.002n/aExternal Defacement
T1495n/aFirmware Corruption
T1496n/aResource Hijacking
T1496.001n/aCompute Hijacking
T1496.002n/aBandwidth Hijacking
T1496.003n/aSMS Pumping
T1496.004n/aCloud Service Hijacking
T1497n/aVirtualization/Sandbox Evasion
T1497.001n/aSystem Checks
T1497.002n/aUser Activity Based Checks
T1497.003n/aTime Based Checks
T1498n/aNetwork Denial of Service
T1498.001n/aDirect Network Flood
T1498.002n/aReflection Amplification
T1499n/aEndpoint Denial of Service
T1499.001n/aOS Exhaustion Flood
T1499.002n/aService Exhaustion Flood
T1499.003n/aApplication Exhaustion Flood
T1499.004n/aApplication or System Exploitation
T1505n/aServer Software Component
T1505.001n/aSQL Stored Procedures
T1505.002n/aTransport Agent
T1505.003n/aWeb Shell
T1505.004n/aIIS Components
T1505.005n/aTerminal Services DLL
T1505.006n/avSphere Installation Bundles
T1518n/aSoftware Discovery
T1518.001n/aSecurity Software Discovery
T1518.002n/aBackup Software Discovery
T1525n/aImplant Internal Image
T1526n/aCloud Service Discovery
T1528n/aSteal Application Access Token
T1529n/aSystem Shutdown/Reboot
T1530n/aData from Cloud Storage

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.