Glossary: Compliance, Privacy and Penetration Testing

MITRE ATT&CK

Also written: ATT&CK, Adversarial Tactics, Techniques, and Common Knowledge

A free knowledge base of real attacker behavior, organized from tactics (why) to techniques and sub-techniques (how), each with an ID such as T1566. It is used to map coverage and to guide purple team exercises.