ATT&CK Tactics

Tactics represent the "why" of a MITRE ATT&CK® technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access.

View information about tactics, how techniques and tactics interact, and the Center for Threat-Informed Defense's mappings coverage of MITRE ATT&CK® techniques in the Mappings Explorer matrix view.


ATT&CK Version

ATT&CK Domain

ATT&CK Tactics

ATT&CK ID ATT&CK Name Number of Techniques
TA0009 Collection 10
TA0011 Command and Control 16
TA0006 Credential Access 14
TA0005 Defense Evasion 30
TA0007 Discovery 10
TA0002 Execution 12
TA0010 Exfiltration 8
TA0040 Impact 10
TA0001 Initial Access 9
TA0008 Lateral Movement 8
TA0003 Persistence 18
TA0004 Privilege Escalation 12
TA0043 Reconnaissance 1
TA0042 Resource Development