All frameworks
mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

Official source

691 controls.

ReferenceFamilyTitle
T1531n/aAccount Access Removal
T1534n/aInternal Spearphishing
T1535n/aUnused/Unsupported Cloud Regions
T1537n/aTransfer Data to Cloud Account
T1538n/aCloud Service Dashboard
T1539n/aSteal Web Session Cookie
T1542n/aPre-OS Boot
T1542.001n/aSystem Firmware
T1542.002n/aComponent Firmware
T1542.003n/aBootkit
T1542.004n/aROMMONkit
T1542.005n/aTFTP Boot
T1543n/aCreate or Modify System Process
T1543.001n/aLaunch Agent
T1543.002n/aSystemd Service
T1543.003n/aWindows Service
T1543.004n/aLaunch Daemon
T1543.005n/aContainer Service
T1546n/aEvent Triggered Execution
T1546.001n/aChange Default File Association
T1546.002n/aScreensaver
T1546.003n/aWindows Management Instrumentation Event Subscription
T1546.004n/aUnix Shell Configuration Modification
T1546.005n/aTrap
T1546.006n/aLC_LOAD_DYLIB Addition
T1546.007n/aNetsh Helper DLL
T1546.008n/aAccessibility Features
T1546.009n/aAppCert DLLs
T1546.010n/aAppInit DLLs
T1546.011n/aApplication Shimming
T1546.012n/aImage File Execution Options Injection
T1546.013n/aPowerShell Profile
T1546.014n/aEmond
T1546.015n/aComponent Object Model Hijacking
T1546.016n/aInstaller Packages
T1546.017n/aUdev Rules
T1546.018n/aPython Startup Hooks
T1547n/aBoot or Logon Autostart Execution
T1547.001n/aRegistry Run Keys / Startup Folder
T1547.002n/aAuthentication Package
T1547.003n/aTime Providers
T1547.004n/aWinlogon Helper DLL
T1547.005n/aSecurity Support Provider
T1547.006n/aKernel Modules and Extensions
T1547.007n/aRe-opened Applications
T1547.008n/aLSASS Driver
T1547.009n/aShortcut Modification
T1547.010n/aPort Monitors
T1547.012n/aPrint Processors
T1547.013n/aXDG Autostart Entries

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.