ATT&CK Tactics

Tactics represent the "why" of a MITRE ATT&CK® technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access.

View information about tactics, how techniques and tactics interact, and the Center for Threat-Informed Defense's mappings coverage of MITRE ATT&CK® techniques in the Mappings Explorer matrix view.

SELECT VERSIONS

ATT&CK Version

ATT&CK Domain

ATT&CK Tactics

ATT&CK ID ATT&CK Name Number of Techniques
TA0006 Credential Access 17
TA0002 Execution 14
TA0040 Impact 14
TA0003 Persistence 20
TA0004 Privilege Escalation 14
TA0008 Lateral Movement 9
TA0005 Defense Evasion 44
TA0010 Exfiltration 9
TA0007 Discovery 30
TA0009 Collection 17
TA0042 Resource Development 7
TA0043 Reconnaissance 8
TA0011 Command and Control 18
TA0001 Initial Access 10