ATT&CK

The ATT&CK framework is a knowledge base that contains a comprehensive list of tactics, techniques, and procedures (TTPs) used by adversaries in cyberattacks, and it is used to evaluate the mapping of cybersecurity vulnerabilities to these TTPs.