MITRE ATT&CK

Adversary Tactics, Techniques & Mitigations

Tactics Adversary goals Techniques How attacks work Mitigations Countermeasures

Application Developer Guidance

Active Directory Configuration

Vulnerability Scanning

User Account Management

Threat Intelligence Program

SSL/TLS Inspection

Restrict Web-Based Content

Restrict File and Directory Permissions

Restrict Registry Permissions

Privileged Process Integrity

Privileged Account Management

Password Policies

Operating System Configuration

Remote Data Storage

Network Segmentation

Network Intrusion Prevention

Multi-factor Authentication

Limit Software Installation

Limit Hardware Installation

Limit Access to Resource Over Network

Account Use Policies

Filter Network Traffic

Execution Prevention

Environment Variable Permissions

Behavior Prevention on Endpoint

Encrypt Sensitive Information

Disable or Remove Feature or Program

Credential Access Protection

Restrict Library Loading

Application Isolation and Sandboxing

Antivirus/Antimalware

Exploit Protection

Update Software

User Account Control

Software Configuration

Do Not Mitigate

Data Loss Prevention

Out-of-Band Communications Channel