Security Operations · Intermediate

ATT&CK Tactic

A column in the MITRE ATT&CK matrix representing the adversary's tactical goal, the "why" of an action.

Definition

The 14 Enterprise tactics are Reconnaissance, Resource Development, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Exfiltration and Impact. Tactic IDs use the TA prefix, such as TA0001 Initial Access.

Related terms