threats.runTOOLSSubmit tool
Tools/Threat Intelligence/MITRE ATT&CK
Knowledge baseFreeFeatured

MITRE ATT&CK

Adversary tactics and techniques knowledge base.

A common language for adversary behavior, useful for detection coverage, threat modeling, CTI reports, and SOC workflows.

Threat IntelligenceFreeOfficial site listedCommunity voting
Visit website
Visit site

Overview

What MITRE ATT&CK is good for

A common language for adversary behavior, useful for detection coverage, threat modeling, CTI reports, and SOC workflows.

✓

Built for threat intelligence and detection engineering workflows.

✓

Useful when evaluating knowledge base capabilities.

✓

Helpful for attack, ttp, coverage investigations and triage.

Evaluation guide

Quick decision notes

Best fit

Threat intelligence analysts enriching indicators, checking reputation, and pivoting from weak signals into stronger context.

Check before using

Confirm current pricing, data limits, account requirements, and licensing on the official site before production use.

Typical inputs

#attack · #ttp · #coverage

Discovery path

Use the categories, source links, and similar tools below to compare it with nearby options.

Use cases

Where it fits

Threat intelligence analysts enriching indicators, checking reputation, and pivoting from weak signals into stronger context.
Detection engineers building, testing, translating, or mapping rules across SOC workflows.

Classification

Categories and tags

Threat IntelligenceDetection Engineering#attack#ttp#coverage

Sources

Official links and checks

Use these links to verify current plans, access requirements, documentation, releases, and support status.

Official websiteTracked visit

Alternatives and related tools

Similar tools

Atomic Red Team

Small ATT&CK-aligned detection tests.

1 shared category
CrowdStrike

Endpoint, cloud, identity, and threat intelligence platform.

2 shared categories
Sekoia.io

European XDR and cyber threat intelligence platform.

2 shared categories
SentinelOne

Endpoint, cloud, identity, and threat intelligence platform.

2 shared categories
Sophos X-Ops

Threat research across MDR, endpoint, email, cloud, and labs.

2 shared categories
Trellix

XDR, threat intelligence, and security operations platform.

2 shared categories

Reviews

Community reviews and comments

Community reviews

Comment provider is not configured yet. This placeholder keeps the review area visible while setup is completed.

Suggest a review

FAQ

Questions about MITRE ATT&CK

What is MITRE ATT&CK used for?

MITRE ATT&CK is used for knowledge base workflows. A common language for adversary behavior, useful for detection coverage, threat modeling, CTI reports, and SOC workflows.

Is MITRE ATT&CK free?

The listed pricing model is Free. Check the official site for exact plan limits, usage restrictions, and current commercial terms.

Which teams should evaluate MITRE ATT&CK?

It is most relevant to teams working across threat intelligence, detection engineering workflows.

What are alternatives to MITRE ATT&CK?

Start with the similar tools section on this page. It highlights tools with overlapping categories, tags, and operational use cases.