MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge)

Also written: ATT&CK, Enterprise ATT&CK, enterprise-attack.json

A free catalog, built from real incidents, of attacker tactics, techniques, groups and mitigations, whose data is a large STIX JSON file. Unlike the Kill Chain, it is not a strict sequence.