What is MITRE ATT&CK?
MITRE ATT&CK is a free, public knowledge base of the tactics and techniques attackers use, built by the non-profit organisation MITRE from real incidents and updated twice a year. Tactics are the attacker's goals, such as initial access, discovery or exfiltration; techniques are the ways of reaching them, each with an identifier such as T1021 for remote services. Defenders use it as a common language: to describe an alert, to compare tools, and to see which techniques their controls cover and which they do not. It is not a checklist to complete, and no product covers every technique. NetSenX names the ATT&CK technique on an alert where a detection corresponds to one, and shows in a coverage view which techniques your enabled detections address.