ATT&CK 2024 Roadmap
Brief
Enhancing usability, expanding scope, optimizing defenses
2023 was dynamic year for ATT&CK. We marked a decade of progress since the framework’s inception and achieved some key milestones to make ATT&CK more accessible for a wider community.
Our scope (slightly) expanded to encompass activities adjacent to direct Enterprise interactions, such as non-technical, deceptive practices and social engineering techniques ( Financial Theft , Impersonation , and Spearphishing Voice ). We enhanced detection capabilities with integrated notes, pseudocode from CAR , and BZAR -based analytics.
The ICS matrix welcomed the addition of Assets to enhance inter-sector communication and mapping. We rolled out Mobile-specific data sources , structured detections, and behaviors like smishing, quishing, and vishing .