What is the MITRE ATT&CK framework and what does it let defenders do?

MITRE ATT&CK is a freely available knowledge base that catalogues how real-world attackers behave, so defenders can analyse attacks step by step.

ATT&CK (Adversarial Tactics, Techniques & Common Knowledge) describes adversary behaviour as a matrix you can browse at attack.mitre.org. It gives a common language for talking about attacks, helps defenders put themselves in the attacker's shoes, lets Red Teams model realistic attacks, and supports gap analysis to justify security investments. It is sometimes called the "hacker lexicon".

Go deeper:

• MITRE ATT&CK — Die frei zugängliche Wissensdatenbank zum direkten Erkunden der Matrix.
• MITRE ATT&CK (Wikipedia) — overview of the framework's origin, the tactics/techniques matrix, and how defenders use it.