# What is MITRE ATT&CK?

MITRE ATT&CK is a free, public knowledge base of the tactics and techniques attackers use, built by the non-profit organisation MITRE from real incidents and updated twice a year. Tactics are the attacker's goals, such as initial access, discovery or exfiltration; techniques are the ways of reaching them, each with an identifier such as T1021 for remote services. Defenders use it as a common language: to describe an alert, to compare tools, and to see which techniques their controls cover and which they do not. It is not a checklist to complete, and no product covers every technique. NetSenX names the ATT&CK technique on an alert where a detection corresponds to one, and shows in a coverage view which techniques your enabled detections address.

FAQ: [Attack techniques explained](https://netsenx.com/en/faq/attacks) · https://netsenx.com/en/faq/what-is-mitre-attack

## Read next

- https://netsenx.com/en/detect-lateral-movement-c2-beaconing
- https://netsenx.com/en/is-someone-inside-your-network

## Related questions

- [What is the difference between a tactic, a technique and a procedure (TTP)?](https://netsenx.com/en/faq/difference-between-a-tactic-a-technique-and-a-procedure)
- [What is reconnaissance in a cyberattack?](https://netsenx.com/en/faq/what-is-reconnaissance-in-a-cyberattack)
- [What is resource development in MITRE ATT&CK?](https://netsenx.com/en/faq/what-is-resource-development-in-mitre-attack)
- [What is initial access in a cyberattack?](https://netsenx.com/en/faq/what-is-initial-access)
- [What does execution mean in MITRE ATT&CK?](https://netsenx.com/en/faq/what-is-execution-in-mitre-attack)