Frameworks & standards
MITRE ATT&CK
MITRE ATT&CK is a globally used knowledge base of adversary tactics, techniques, and procedures (TTPs) observed in real-world attacks, organized by tactic (the attacker's goal) and technique (how they achieve it). It is widely used to structure red teaming, detection engineering, and threat intelligence.
Key points
- Catalog of real-world adversary tactics and techniques.
- Structures red teaming, detection, and threat intel.
- Techniques (e.g. T1190) are referenced in this graph.
Related
References
Impactr finds and proves whether flaws like this are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.