What does MITRE ATT&CK catalog in cybersecurity?

• A. Hardware vulnerabilities
• B. Tactics, Techniques, and Procedures used by adversaries
• C. Privacy regulations
• D. Security frameworks for cloud deployments

Answer: (B)

MITRE ATT&CK is a knowledge base that catalogs how attackers behave, organizing their actions into tactics, techniques, and procedures. Tactics describe the attacker’s high-level goals (what they’re trying to achieve at each stage of an attack), while techniques are the specific methods used to pursue those goals, and procedures are the concrete, real-world implementations of those techniques. This structured view lets defenders map what they observe in systems to known attacker behaviors, assess gaps in detection and response, and plan threat hunting or red-teaming exercises.

This framework isn’t about hardware vulnerabilities, privacy regulations, or cloud security architectures. Hardware vulnerabilities focus on flaws in devices, privacy regulations are legal/privacy requirements, and cloud security frameworks provide architectural or operational guidelines. ATT&CK specifically catalogs attacker actions and the ways they get things done, across the attack lifecycle.