Skip to content
safemode.space

SPARTA tactic matrix

Every technique arranged by the objective it serves. Columns are SPARTA’s nine tactics in their published order; sub-techniques are collapsed under their parents. Open any technique for its mapped EU regulation articles, ENISA and cross-reference controls, and countermeasures.

226 techniques across 9 tactics

The rule is how many EU regulation articles and ENISA controls map to the technique, in quartiles over the 201 techniques that carry at least one:02–89–1213–1617–35

ST0001Reconnaissance36 techniques

ST0002Resource Development20 techniques

ST0003Initial Access29 techniques

ST0004Execution60 techniques

EX-0002Position, Navigation, and Timing (PNT) Geofencing10EX-0003Modify Authentication Process16EX-0004Compromise Boot Memory15EX-0006Disable/Bypass Encryption14EX-0007Trigger Single Event Upset2EX-0011Exploit Reduced Protections During Safe-Mode14EX-0015Side-Channel Attack12

ST0005Persistence7 techniques

ST0006Defense Evasion33 techniques

ST0007Lateral Movement8 techniques

ST0008Exfiltration19 techniques

ST0009Impact14 techniques

Corpus 2026.08.24-1, built 2026-08-24 from 226 techniques, 308 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.