MITRE anchors

Stefan Coetzeecreated 2026-05-12updated 2026-05-121 min readanchors
Vault note, not reviewed against the source. Written in the knowledge vault on 2026-05-12 by models working with Stefan Coetzee and published as it stands, with private addresses, e-mail addresses and an employer name redacted. Check claims against the primary source before relying on them.

MITRE Corporation

  • MITRE Corporation — US not-for-profit. Operates FFRDCs for US government.
  • MITRE Center for Threat-Informed Defense — community-funded center driving ATT&CK and related work.

Frameworks and resources

  • ATT&CK — attack.mitre.org
  • D3FEND — d3fend.mitre.org
  • ATLAS — atlas.mitre.org
  • CWE (Common Weakness Enumeration) — cwe.mitre.org
  • CVE (Common Vulnerabilities and Exposures) — cve.org (MITRE-hosted)
  • STIX / TAXII — threat intelligence sharing standards (MITRE-developed)
  • ATT&CK Navigator — visualization tool for ATT&CK matrices

Community and adopters

  • Major SIEM/EDR/XDR vendors map products to ATT&CK: CrowdStrike, SentinelOne, Microsoft Defender, Splunk, Sentinel, Elastic, Palo Alto Cortex, others.
  • Threat intel vendors tag indicators: Mandiant, Recorded Future, Crowdstrike, others.
  • National cybersecurity agencies use ATT&CK: CISA (US), NCSC (UK), ANSSI (FR), BSI (DE), others.
  • Red team firms report against ATT&CK.

ATLAS contributors

  • MITRE primary author.
  • Microsoft, Bosch, IBM, NVIDIA, Anthropic, OpenAI among contributing organizations.
  • NIST CSF 2.0 — high-level functions cross-reference ATT&CK.
  • NIST 800-53 controls can be mapped to D3FEND.
  • OWASP LLM Top 10 — application-level AI security; complementary to ATLAS.
  • CWE — software weakness taxonomy (also MITRE).
  • CAPEC — Common Attack Pattern Enumeration and Classification (MITRE).

Reference resources

  • attack.mitre.org/resources — official ATT&CK resources.
  • MITRE Engenuity — non-profit for community engagement.
  • ATT&CK Evaluations — vendor product evaluations against ATT&CK.

See also