ATT&CK v18: Detection Strategies, More Adversary Insights,
Brief
ATT&CK v18: The Detection Overhaul You’ve Been Waiting For
We’ve spent the last six months focused on making ATT&CK more usable and actionable for defenders, and with the help of the community the results are here!
First, we’re excited for you to finally experience the detection overhaul with two new ATT&CK objects, Detection Strategies and Analytics, that shift guidance from single-sentence notes to structured, behavior-focused strategies. Workbench now supports Detection Strategies, so upgrade your instance to take full advantage of the defensive updates.
Across domains, we’ve deepened coverage of threats organizations are facing today. Enterprise adds techniques for modern infrastructure, Kubernetes, CI/CD pipelines, and cloud databases, along with ransomware preparation behaviors and adversaries monitoring their own threat intel.