What is matrix in MITRE ATT&CK®?

An ATT&CK matrix organizes tactics and techniques for a domain such as Enterprise, Mobile, or ICS. It gives teams a structured view of adversary behavior across an intrusion lifecycle.

40-second answer

An ATT&CK matrix organizes tactics and techniques for a domain such as Enterprise, Mobile, or ICS. It gives teams a structured view of adversary behavior across an intrusion lifecycle.

Glexia analyst context

How this term helps security teams

Glexia uses matrices as a navigational and reporting tool, not as a claim that every technique is equally relevant to every organization.

Common use cases

Where practitioners use this concept

Coverage visualization
Threat modeling
Executive reporting

Source and licensing

Source: MITRE ATT&CK®. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. Glexia is not affiliated with or endorsed by MITRE.

Official MITRE ATT&CK site Official STIX data repository MITRE ATT&CK terms of use