MITRE ATT&CK® Reference

MITRE ATT&CK® Reference Library

Searchable adversary behavior context, detection guidance, mitigations, and Glexia analyst summaries built from official MITRE ATT&CK source data.

Search ATT&CK Browse Techniques Browse Tactics Enterprise Matrix CVE Intelligence

Search ATT&CK Explore CVE Intelligence

Official ATT&CK source data

Use official ATT&CK context without losing operational focus

Glexia mirrors official MITRE ATT&CK releases, normalizes objects into searchable records, and adds defensive context for executives, SOC teams, detection engineers, and incident responders.

19.1 Current ATT&CK version View release notes 222 Enterprise techniques View techniques 475 Enterprise sub-techniques View sub-techniques 208 Groups View groups 970 Software entries View software 2,984 Detection strategies & analytics View detections

Matrix-first workflow

Start with the ATT&CK matrix, then drill into Glexia context

MITRE’s official site centers on matrix navigation. Glexia keeps that familiar mental model, then adds fast search, defensive metadata, CVE relevance, and executive-ready triage context.

Enterprise Matrix Mobile Matrix ICS Matrix

PowerShell T1059 credential access initial access phishing lateral movement windows cloud persistence containers privilege escalation

What Glexia adds

Executive-ready context without changing MITRE’s source record

Official descriptions remain clearly labeled. Glexia layers on plain-English summaries, telemetry framing, mitigation prioritization, CVE exposure links, and service-relevant triage guidance.

Plain-English executive summary

Briefs leaders on why a behavior matters without requiring source-data familiarity.

Browse technique takes

Detection and telemetry framing

Connects techniques to logs, data components, and SOC validation paths.

Browse data sources

Mitigation prioritization

Translates course-of-action links into practical defensive sequencing.

Browse mitigations

Related CVEs and exposure context

Labels Glexia-inferred CVE relevance clearly and conservatively.

Open CVE mapping

Browse

Browse by object type

Techniques

Adversary behaviors and sub-techniques drawn from official MITRE ATT&CK STIX data.

Tactics

ATT&CK tactical objectives, mapped to related techniques and matrices.

Groups

Intrusion-set and threat group profiles from official ATT&CK data.

Software

Malware and tool entries linked to techniques, groups, and campaigns.

Campaigns

Campaign objects and their related groups, software, and techniques.

Mitigations

ATT&CK mitigations and Glexia implementation context.

Data Sources

Detection telemetry sources used by SOC and detection engineering teams.

Data Components

Concrete ATT&CK data components linked to detectable techniques.

Detections

Detection strategies and analytics from ATT&CK where present.

ICS Assets

ICS asset objects used by ATT&CK for ICS.

Tactics

Browse by tactic

TA0009: Collection TA0035: Collection TA0100: Collection TA0011: Command and Control TA0037: Command and Control TA0101: Command and Control

Recently changed

Recently changed in ATT&CK

These records are sorted from the normalized ATT&CK object modified timestamp. Counts and rows come from imported data, not hard-coded totals.