Skip to content
IT_TOOLS_

MITRE ATT&CK Reference

Quickly search and reference MITRE ATT&CK tactics, techniques, and procedures (TTPs). Enterprise v19.2.

Local processing

This tool processes your input in your browser.

Filters

Official MITRE matrix

Found 223 techniques

T1566Phishing

Initial Access

Adversaries may send phishing messages to gain access to victim systems.

Example:Sending an email with a malicious macro-enabled Word document.

T1190Exploit Public-Facing Application

Initial Access

Adversaries may attempt to take advantage of a weakness in an Internet-facing computer or program using software exploits.

Example:Exploiting a vulnerability in a web server (e.g., Log4Shell).

T1078Valid Accounts

Initial Access

Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access.

Example:Using leaked VPN credentials to log into the corporate network.

T1195Supply Chain Compromise

Initial Access

Adversaries may manipulate products or product delivery mechanisms prior to receipt.

Example:A trusted vendor update introduces a backdoor into the network.

T1047Windows Management Instrumentation

Execution

Adversaries may abuse WMI to execute malicious commands and payloads.

Example:Using wmic.exe process call create to launch a remote process.

Related Tools

Local Log Parser

Extract IPs, emails, and IOCs from logs without uploading them anywhere.

Log Timeline Generator

Sort raw logs chronologically and generate a visual timeline of events.

Interactive Playbook Builder

Design and execute structured security incident response workflows.

Incident Report Generator

Create structured IT and cybersecurity incident reports from raw notes, logs, and timelines.