MITRE ATT&CK® is a knowledge base of adversary tactics and techniques. Established and maintained by the MITRE Corporation, a US not-for-profit best known for managing research and development programs, ATT&CK is empirically based on observations of threat actors' behavior. Generally accessible and free to use, ATT&CK is used to develop threat models and explore security methodologies.