MITRE publishes the shared vocabularies of cybersecurity. They fit together: a CWE weakness is exploited through a CAPEC attack pattern; adversaries chain techniques described in ATT&CK (or ATLAS for AI systems); defenders counter them with D3FEND techniques and catch them with CAR analytics. Every page here links across the frameworks.
MITRE ATT&CK
What attackers do
The knowledge base of real adversary tactics and techniques, from reconnaissance to impact. The common language every other framework maps to.
ExploreMITRE ATLAS
Attacks on AI and ML
ATT&CK-style tactics and techniques for attacks on machine learning and AI systems: poisoning, evasion, model theft and prompt injection, with real case studies.
ExploreMITRE D3FEND
How to counter them
Defensive countermeasure techniques - model, harden, detect, isolate, deceive, evict, restore - each mapped to the ATT&CK techniques it counters.
ExploreMITRE CAR
How to detect them
MITRE's Cyber Analytics Repository: detection analytics with pseudocode and Splunk, EQL or Sigma implementations, mapped to ATT&CK.
ExploreMITRE CAPEC
Attack patterns
Common attack patterns against software - how an attacker exploits a weakness - with prerequisites, severity and mitigations.
ExploreMITRE CWE
Software weaknesses
The full catalogue of software and hardware weakness types that attack patterns exploit. See also our curated CWE Top 25.
ExploreATT&CK, ATLAS, D3FEND, CAR, CAPEC and CWE are projects of The MITRE Corporation. Each section credits its source data under that project's terms. CyberCertPrep is not affiliated with or endorsed by The MITRE Corporation.