ATT&CK v15 Brings the Action
Brief
ATT&CK v15 Brings the Action: Upgraded Detections, New Analytic Format, & Cross-Domain Adversary Insights
v15 is all about actionability and bringing defenders’ reality into focus — we prioritized what you need to detect, and how you can do it more effectively with detection engineering upgrades, and deeper intelligence insights across platforms. This release also reflects the new expansion rhythm, balancing both well-known and emerging behaviors to reflect how trends and activity are experienced in the field.
For the details on our updates/additions across Techniques, Software, Groups and Campaigns take a look at our release notes , our detailed changelog , or our changelog.json .
Enterprise
- Familiar + Novel = Reality
With v15 we were aiming for the perfect balance of familiar behaviors you’ve probably seen countless times (e. g. , T1027.