FAQ | MITRE ATT&CK®

<!DOCTYPE html> <html lang='en'> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-62667723-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-62667723-1'); </script> <meta name="google-site-verification" content="2oJKLqNN62z6AOCb0A0IXGtbQuj-lev5YPAHFF_cbHQ"/> <meta charset='utf-8'> <meta name='viewport' content='width=device-width, initial-scale=1, shrink-to-fit=no'> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel='shortcut icon' href="/versions/v9/theme/favicon.ico" type='image/x-icon'> <title>FAQ | MITRE ATT&CK®</title>  <link rel='stylesheet' href="/versions/v9/theme/style/bootstrap.min.css" /> <link rel='stylesheet' href="/versions/v9/theme/style/bootstrap-glyphicon.min.css" /> <link rel='stylesheet' href="/versions/v9/theme/style/bootstrap-tourist.css" /> <link rel="stylesheet" type="text/css" href="/versions/v9/theme/style.min.css?426cc53a"> </head> <body>  <header> <nav class='navbar navbar-expand-lg navbar-dark fixed-top'> <a class='navbar-brand' href="/versions/v9/"><img src="/versions/v9/theme/images/mitre_attack_logo.png" class="attack-logo"></a> <button class='navbar-toggler' type='button' data-toggle='collapse' data-target='#navbarCollapse' aria-controls='navbarCollapse' aria-expanded='false' aria-label='Toggle navigation'> <span class='navbar-toggler-icon'></span> </button> <div class='collapse navbar-collapse' id='navbarCollapse'> <ul class='nav nav-tabs ml-auto'> <li class="nav-item"> <a href="/versions/v9/matrices/" class="nav-link" ><b>Matrices</b></a> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v9/tactics/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Tactics</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v9/tactics/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v9/tactics/mobile/">Mobile</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v9/techniques/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Techniques</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v9/techniques/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v9/techniques/mobile/">Mobile</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v9/mitigations/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Mitigations</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v9/mitigations/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v9/mitigations/mobile/">Mobile</a> </div> </li> <li class="nav-item"> <a href="/versions/v9/groups" class="nav-link" ><b>Groups</b></a> </li> <li class="nav-item"> <a href="/versions/v9/software/" class="nav-link" ><b>Software</b></a> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v9/resources/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Resources</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v9/resources/">General Information</a> <a class="dropdown-item" href="/versions/v9/resources/getting-started/">Getting Started</a> <a class="dropdown-item" href="/versions/v9/resources/training/">Training</a> <a class="dropdown-item" href="/versions/v9/resources/attackcon/">ATT&CKcon</a> <a class="dropdown-item" href="/versions/v9/resources/working-with-attack/">Working with ATT&CK</a> <a class="dropdown-item" href="/versions/v9/resources/faq/">FAQ</a> <a class="dropdown-item" href="/resources/updates/">Updates</a> <a class="dropdown-item" href="/resources/versions/">Versions of ATT&CK</a> <a class="dropdown-item" href="/versions/v9/resources/related-projects/">Related Projects</a> </div> </li> <li class="nav-item"> <a href="https://medium.com/mitre-attack/" target="_blank" class="nav-link"> <b>Blog</b>  <img src="/versions/v9/theme/images/external-site.svg" alt="External site" class="external-icon" /> </a> </li> <li class="nav-item"> <a href="/versions/v9/resources/contribute/" class="nav-link" ><b>Contribute</b></a> </li> <li class="nav-item"> <button id="search-button" class="btn search-button">Search <div class="search-icon"></div></button> </li> </ul> </div> </nav> </header>  <div class="container-fluid version-banner"><div class="icon-inline baseline mr-1"><img src="/versions/v9/theme/images/icon-warning-24px.svg"></div>Currently viewing <a href="https://github.com/mitre/cti/releases/tag/ATT%26CK-v9.0" target="_blank">ATT&CK v9.0</a> which was live between April 29, 2021 and October 20, 2021. <a href="/resources/versions/">Learn more about the versioning system</a> or <a href="/">see the live site</a>.</div> <div id='content' class="maincontent">  <div class="container"> <ol class="breadcrumb"> <li class="breadcrumb-item"><a href="/versions/v9/">Home</a></li> <li class="breadcrumb-item"><a href="/versions/v9/resources">Resources</a></li> <li class="breadcrumb-item">FAQ</li> </ol> </div> <div class="container pb-3 uniform-block"> <h1 class="text-center">Frequently Asked Questions</h1> <div class="card-block faq"> <div class="clearfix pb-3"> <h2>General</h2> <div> <div class="card w-100"> <div class="card-header collapsed" id="faq-0-0-header" data-toggle="collapse" data-target="#faq-0-0-body" aria-expanded="false" aria-controls="faq-0-0-body"> <h5 class="mb-0">What is ATT&CK?</h5> </div> <div id="faq-0-0-body" class="collapse" aria-labelledby="faq-0-0-header"> <div class="card-body"> ATT&CK is a knowledge base of cyber adversary behavior and taxonomy for adversarial actions across their lifecycle. ATT&CK has two parts: ATT&CK for Enterprise, which covers behavior against enterprise IT networks and cloud, and ATT&CK for Mobile, which focuses on behavior against mobile devices. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-1-header" data-toggle="collapse" data-target="#faq-0-1-body" aria-expanded="false" aria-controls="faq-0-1-body"> <h5 class="mb-0">Why did MITRE develop ATT&CK?</h5> </div> <div id="faq-0-1-body" class="collapse" aria-labelledby="faq-0-1-header"> <div class="card-body"> MITRE started ATT&CK in 2013 to document common tactics, techniques, and procedures (TTPs) that advanced persistent threats use against Windows enterprise networks. It was created out of a need to document adversary behaviors for use within a MITRE research project called FMX. The objective of FMX was to investigate use of endpoint telemetry data and analytics to improve post-compromise detection of adversaries operating within enterprise networks. ATT&CK was used as the basis for testing the efficacy of the sensors and analytics under FMX and served as the common language both offense and defense could use to improve over time. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-2-header" data-toggle="collapse" data-target="#faq-0-2-body" aria-expanded="false" aria-controls="faq-0-2-body"> <h5 class="mb-0">What are "tactics"?</h5> </div> <div id="faq-0-2-body" class="collapse" aria-labelledby="faq-0-2-header"> <div class="card-body"> Tactics represent the “why” of an ATT&CK technique or sub-technique. It is the adversary’s tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-3-header" data-toggle="collapse" data-target="#faq-0-3-body" aria-expanded="false" aria-controls="faq-0-3-body"> <h5 class="mb-0">What are "techniques"?</h5> </div> <div id="faq-0-3-body" class="collapse" aria-labelledby="faq-0-3-header"> <div class="card-body"> Techniques represent “how” an adversary achieves a tactical goal by performing an action. For example, an adversary may dump credentials to achieve credential access. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-4-header" data-toggle="collapse" data-target="#faq-0-4-body" aria-expanded="false" aria-controls="faq-0-4-body"> <h5 class="mb-0">What are "sub-techniques"?</h5> </div> <div id="faq-0-4-body" class="collapse" aria-labelledby="faq-0-4-header"> <div class="card-body"> Sub-techniques are a more specific description of the adversarial behavior used to achieve a goal. They describe behavior at a lower level than a technique. For example, an adversary may dump credentials by accessing the Local Security Authority (LSA) Secrets. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-5-header" data-toggle="collapse" data-target="#faq-0-5-body" aria-expanded="false" aria-controls="faq-0-5-body"> <h5 class="mb-0">What are "procedures"?</h5> </div> <div id="faq-0-5-body" class="collapse" aria-labelledby="faq-0-5-header"> <div class="card-body"> Procedures are the specific implementation the adversary uses for techniques or sub-techniques. For example, a procedure could be an adversary using PowerShell to inject into lsass.exe to dump credentials by scraping LSASS memory on a victim. Procedures are categorized in ATT&CK as the observed in the wild use of techniques in the "Procedure Examples" section of technique pages. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-6-header" data-toggle="collapse" data-target="#faq-0-6-body" aria-expanded="false" aria-controls="faq-0-6-body"> <h5 class="mb-0">What are the differences between sub-techniques and procedures?</h5> </div> <div id="faq-0-6-body" class="collapse" aria-labelledby="faq-0-6-header"> <div class="card-body"> Sub-techniques and procedures describe different things in ATT&CK. Sub-techniques are used to categorize behavior and procedures are used to describe in-the-wild use of techniques. Furthermore, since procedures are specific implementations of techniques and sub-techniques, they may include several additional behaviors in how they are performed. For example, an adversary using PowerShell to inject into lsass.exe to dump credentials by scraping LSASS memory on a victim is a procedure implementation containing several (sub)techniques covering the PowerShell, Process Injection, and Credential Dumping against LSASS behaviors. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-7-header" data-toggle="collapse" data-target="#faq-0-7-body" aria-expanded="false" aria-controls="faq-0-7-body"> <h5 class="mb-0">What technologies does ATT&CK apply to?</h5> </div> <div id="faq-0-7-body" class="collapse" aria-labelledby="faq-0-7-header"> <div class="card-body"> Enterprise IT systems covering Windows, macOS, Linux, Network infrastructure devices (Network), and Container technologies (Containers); cloud systems covering Infrastructure-as-a-Service (IaaS), Software-as-a-Service (SaaS), Office 365, Azure Active Directory (Azure AD), and Google Workspace; mobile devices covering Android and iOS. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-0-8-header" data-toggle="collapse" data-target="#faq-0-8-body" aria-expanded="false" aria-controls="faq-0-8-body"> <h5 class="mb-0">How can I use ATT&CK?</h5> </div> <div id="faq-0-8-body" class="collapse" aria-labelledby="faq-0-8-header"> <div class="card-body"> ATT&CK can be used in several ways to help security operations, threat intelligence, and security architecture. See the <a href="/versions/v9/resources/getting-started">getting started</a> page for resources on how to start using ATT&CK. Also check out the <a href="/versions/v9/resources">Resources</a> section of the website and the <a href='https://medium.com/mitre-attack'>blog</a> for related projects and other material. </div> </div> </div> </div> </div> <div class="clearfix pb-3"> <h2>Content</h2> <div> <div class="card w-100"> <div class="card-header collapsed" id="faq-1-0-header" data-toggle="collapse" data-target="#faq-1-0-body" aria-expanded="false" aria-controls="faq-1-0-body"> <h5 class="mb-0">How often is ATT&CK updated?</h5> </div> <div id="faq-1-0-body" class="collapse" aria-labelledby="faq-1-0-header"> <div class="card-body"> Bi-annually. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-1-1-header" data-toggle="collapse" data-target="#faq-1-1-body" aria-expanded="false" aria-controls="faq-1-1-body"> <h5 class="mb-0">Where does the info in ATT&CK come from?</h5> </div> <div id="faq-1-1-body" class="collapse" aria-labelledby="faq-1-1-header"> <div class="card-body"> Publicly available threat intelligence and incident reporting is the main source of data in ATT&CK. We take what's available in the public and distill out common TTPs. We also use publicly available research on new techniques that closely align with what adversaries commonly do since new TTPs often get used in the wild quickly. For more information see <a href="/versions/v9/docs/ATTACK_Design_and_Philosophy_March_2020.pdf" target='_blank'>The Design and Philosophy of ATT&CK</a>. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-1-2-header" data-toggle="collapse" data-target="#faq-1-2-body" aria-expanded="false" aria-controls="faq-1-2-body"> <h5 class="mb-0">How can I contribute content to ATT&CK?</h5> </div> <div id="faq-1-2-body" class="collapse" aria-labelledby="faq-1-2-header"> <div class="card-body"> <p><a href="/versions/v9/resources/contribute">Check out our contribute page!</a></p><p class='mb-0'>Please contact us before spending a lot of time writing up a new technique/group/software since we always have things in the works and don’t want you to duplicate efforts. For any contributions we add, we'll run the final product by you and credit you as a contributor. In particular, we're looking for Mac/Linux contributions.</p> </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-1-3-header" data-toggle="collapse" data-target="#faq-1-3-body" aria-expanded="false" aria-controls="faq-1-3-body"> <h5 class="mb-0">My "favorite" threat group isn't included in ATT&CK - why?</h5> </div> <div id="faq-1-3-body" class="collapse" aria-labelledby="faq-1-3-header"> <div class="card-body"> We try to include most threat reporting but can only get to so much. If you feel information is missing, then help us by contributing to ATT&CK. Reach out to see if we’re already working on the group and review our <a href="/versions/v9/resources/contribute">contribute page</a> for guidance and formatting for group and software submissions. </div> </div> </div> </div> </div> <div class="clearfix pb-3"> <h2>Resources</h2> <div> <div class="card w-100"> <div class="card-header collapsed" id="faq-2-0-header" data-toggle="collapse" data-target="#faq-2-0-body" aria-expanded="false" aria-controls="faq-2-0-body"> <h5 class="mb-0">Are there APIs I can use to access the ATT&CK content?</h5> </div> <div id="faq-2-0-body" class="collapse" aria-labelledby="faq-2-0-header"> <div class="card-body"> Yes! Check out this page: <a href="/versions/v9/resources/working-with-attack">Interfaces for Working with ATT&CK</a>. </div> </div> </div> </div> </div> <div class="clearfix pb-3"> <h2>Staying Informed</h2> <div> <div class="card w-100"> <div class="card-header collapsed" id="faq-3-0-header" data-toggle="collapse" data-target="#faq-3-0-body" aria-expanded="false" aria-controls="faq-3-0-body"> <h5 class="mb-0">How do I stay up to date with what's happening with ATT&CK?</h5> </div> <div id="faq-3-0-body" class="collapse" aria-labelledby="faq-3-0-header"> <div class="card-body"> Follow <a href='https://twitter.com/MITREattack' target='_blank'>@MITREattack</a> on Twitter for news and check out our <a href='https://medium.com/mitre-attack' target='_blank'>blog</a> for posts about topics related to ATT&CK. </div> </div> </div> </div> </div> <div class="clearfix pb-3"> <h2>ATT&CK and Other Models</h2> <div> <div class="card w-100"> <div class="card-header collapsed" id="faq-4-0-header" data-toggle="collapse" data-target="#faq-4-0-body" aria-expanded="false" aria-controls="faq-4-0-body"> <h5 class="mb-0">How does ATT&CK relate to other cyber frameworks and models?</h5> </div> <div id="faq-4-0-body" class="collapse" aria-labelledby="faq-4-0-header"> <div class="card-body"> Each model and framework can be used for different purposes. We have documented several <a href="/versions/v9/resources/getting-started">use cases</a> where ATT&CK can be used to provide granular detail on adversary behavior. We believe most models and frameworks are complementary to ATT&CK, so you don't have to choose just one. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-4-1-header" data-toggle="collapse" data-target="#faq-4-1-body" aria-expanded="false" aria-controls="faq-4-1-body"> <h5 class="mb-0">What is the relationship between ATT&CK and the Diamond Model?</h5> </div> <div id="faq-4-1-body" class="collapse" aria-labelledby="faq-4-1-header"> <div class="card-body"> ATT&CK and the <a target="_blank" href="http://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf">Diamond Model</a> are complementary. ATT&CK documents detailed adversary behavior while the Diamond Model is helpful if you're trying to cluster intrusions. There are cases where they may be used together. For example, ATT&CK-mapped techniques may be a useful source of input into the Diamond Model to analyze adversary capabilities. </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-4-2-header" data-toggle="collapse" data-target="#faq-4-2-body" aria-expanded="false" aria-controls="faq-4-2-body"> <h5 class="mb-0">What is the relationship between ATT&CK and the Lockheed Martin Cyber Kill Chain<sup>®</sup>?</h5> </div> <div id="faq-4-2-body" class="collapse" aria-labelledby="faq-4-2-header"> <div class="card-body"> ATT&CK and the <a href="https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html" target="_blank">Cyber Kill Chain</a> are complementary. ATT&CK sits at a lower level of definition to describe adversary behavior than the Cyber Kill Chain. ATT&CK Tactics are unordered and may not all occur in a single intrusion because adversary tactical goals change throughout an operation, whereas the Cyber Kill Chain uses ordered phases to describe high level adversary objectives. </div> </div> </div> </div> </div> <div class="clearfix pb-3"> <h2>Legal</h2> <div> <div class="card w-100"> <div class="card-header collapsed" id="faq-5-0-header" data-toggle="collapse" data-target="#faq-5-0-body" aria-expanded="false" aria-controls="faq-5-0-body"> <h5 class="mb-0">How should I reference the name ATT&CK?</h5> </div> <div id="faq-5-0-body" class="collapse" aria-labelledby="faq-5-0-header"> <div class="card-body"> <p>Both MITRE ATT&CK<sup>®</sup> and ATT&CK<sup>®</sup> are registered trademarks of The MITRE Corporation.</p><ul><li>Your first references in writing must include "MITRE" preceding "ATT&CK<sup>®</sup>" - but subsequently should just reference "ATT&CK" (no registered trademark symbol required).<ul><li>Example of a first reference: <i>MITRE ATT&CK<sup>®</sup> is a curated knowledge base and model for cyber adversary behavior...</i></li><li>Example of subsequent reference: <i>ATT&CK is useful for understanding security risk against known adversary behavior...</i></li></ul><li>A headline should <i>always</i> reference "MITRE ATT&CK" together (never only "ATT&CK<sup>®</sup>").</li><li>Always capitalize "ATT&CK" to distinguish it from the surrounding text.</li><li>Do not modify the trademark, such as through hyphenation or abbreviation. For example, "ATT&CK'd!", "Plan-of-ATT&CK", "ATTK".</li><li>You may not display the ATT&CK trademark in any manner that implies an affiliation with, sponsorship, or endorsement by MITRE, or in a manner that can be reasonably interpreted to suggest third party content represents the views and opinions of MITRE or MITRE personnel, unless those third parties receive express permission from MITRE.</li><li>You may not use ATT&CK in your product names, service names, trademarks, logos, or company names.</li></ul> </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-5-1-header" data-toggle="collapse" data-target="#faq-5-1-body" aria-expanded="false" aria-controls="faq-5-1-body"> <h5 class="mb-0">Where can I download the MITRE ATT&CK logo?</h5> </div> <div id="faq-5-1-body" class="collapse" aria-labelledby="faq-5-1-header"> <div class="card-body"> <p>You can find the MITRE ATT&CK logo here:</p><ul><li><a href="/versions/v9/theme/images/MITRE_ATTACK_logo_Lockup-black.jpg">Black .jpg format</a>.</li><li><a href="/versions/v9/theme/images/MITRE_ATTACK_logo_Lockup-black-transparent.png">Black .png format</a>.</li><li><a href="/versions/v9/theme/images/MITRE_ATTACK_logo_Lockup-white-transparent.png">White .png format</a>.</li><li><a href="/versions/v9/theme/images/MITRE_ATTACK_logo_Lockup-gray-transparent.png">Gray .png format</a>.</li></ul><p class="mb-0">If you need a vector graphic of the MITRE ATT&CK logo, please <a href="mailto:attack@mitre.org?subject=MITRE ATT%26CK Logo">contact us</a>.</p> </div> </div> </div> <div class="card w-100 mt-1"> <div class="card-header collapsed" id="faq-5-2-header" data-toggle="collapse" data-target="#faq-5-2-body" aria-expanded="false" aria-controls="faq-5-2-body"> <h5 class="mb-0">Can I use ATT&CK in my products and/or services?</h5> </div> <div id="faq-5-2-body" class="collapse" aria-labelledby="faq-5-2-header"> <div class="card-body"> <p>Yes – ATT&CK is open and available to any person or organization for use at no charge. If you decide to use ATT&CK, then follow the <a href="/versions/v9/resources/terms-of-use">terms of use</a>. If you have further questions, then please reach out to us at <a href="mailto:attack@mitre.org">attack@mitre.org</a>.</p><p class="mb-0">Remember, you may never use MITRE ATT&CK, MITRE, or ATT&CK in a way that implies an endorsement of a product or service. MITRE does not endorse those organizations, individuals, etc. leveraging MITRE ATT&CK in their work. The inclusion of MITRE ATT&CK does not imply endorsement or support from MITRE.</p> </div> </div> </div> </div> </div> </div> </div>  <div class="overlay search" id="search-overlay" style="display: none;"> <div class="overlay-inner">  <div class="search-header"> <div class="search-input"> <input type="text" id="search-input" placeholder="search"> </div> <div class="search-icons"> <div class="search-parsing-icon spinner-border" style="display: none" id="search-parsing-icon"></div> <div class="close-search-icon" id="close-search-icon">×</div> </div> </div>  <div id="search-body" class="search-body"> <div class="results" id="search-results">  </div> <div id="load-more-results" class="load-more-results"> <button class="btn btn-default" id="load-more-results-button">load more results</button> </div> </div> </div> </div> </div> <footer class="footer p-3"> <div class="container-fluid"> <div class="row"> <div class="col-4 col-sm-4 col-md-3"> <div class="footer-center-responsive my-auto"> <a href="https://www.mitre.org" target="_blank" rel="noopener" aria-label="MITRE"> <img src="/versions/v9/theme/images/mitrelogowhiteontrans.gif" class="mitre-logo-wtrans"> </a> </div> </div> <div class="col-2 col-sm-2 footer-responsive-break"></div> <div class="col-6 col-sm-6 text-center"> <p> © 2015-2021, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. </p> <div class="row"> <div class="col text-right"> <small> <a href="/versions/v9/resources/privacy" class="footer-link">Privacy Policy</a> </small> </div> <div class="col text-center"> <small> <a href="/versions/v9/resources/terms-of-use" class="footer-link">Terms of Use</a> </small> </div> <div class="col text-left "> <small> <a href="/versions/v9/resources/changelog.html" class="footer-link" data-toggle="tooltip" data-placement="top" title="ATT&CK content version 9.0Website version 3.3.1">ATT&CK v9.0</a> </small> </div> </div> </div> <div class="w-100 p-2 footer-responsive-break"></div> <div class="col"> <div class="footer-float-right-responsive-brand"> <div class="mb-1"> <a href="https://twitter.com/MITREattack" class="btn btn-primary w-100">  <img src="/versions/v9/theme/images/twitter.png" class="mr-1 twitter-icon"> <b>@MITREattack</b> </a> </div> <div class=""> <a href="/versions/v9/contact" class="btn btn-primary w-100"> Contact </a> </div> </div> </div> </div> </div> </div> </footer> </div>  <script src="/versions/v9/theme/scripts/jquery-3.5.1.min.js"></script> <script src="/versions/v9/theme/scripts/popper.min.js"></script> <script src="/versions/v9/theme/scripts/bootstrap.bundle.min.js"></script> <script src="/versions/v9/theme/scripts/site.js"></script> <script src="/versions/v9/theme/scripts/flexsearch.es5.js"></script> <script src="/versions/v9/theme/scripts/localforage.min.js"></script> <script src="/versions/v9/theme/scripts/settings.js?124"></script> <script src="/versions/v9/theme/scripts/search_babelized.js"></script> </body> </html>

CINXE.COM

FAQ | MITRE ATT&CK®