MITRE ATT&CK is the standard, openly available knowledge base of real-world attacker tactics and techniques, used to map and measure detection coverage.
In detail
ATT&CK organizes how attackers actually operate into tactics (the "why") and techniques (the "how"). Security teams use it to assess which adversary behaviors they can detect — and which they can't.
It has become the common language for detection coverage.
AEGYS Pentest maps proven attack paths to MITRE ATT&CK techniques.
Last updated: 5 June 2026 · 4 min read