MITRE ATT&CK® Tactic

The MITRE ATT&CK® Tactic object describes the tactic ID and/or name that is associated to an attack, as defined by ATT&CK® Matrix.

Attributes

Caption	Name	Type	Description
Name	`name`	String	The tactic name that is associated with the attack technique, as defined by ATT&CK® Matrix. For example: `Reconnaissance`.
Raw Data	`raw_data`	JSON	The event data as received from the event source.
Record ID	`record_id`	String	Unique identifier for the object
Source URL	`src_url`	URL String	The versioned permalink of the attack tactic, as defined by ATT&CK® Matrix. For example: `https://attack.mitre.org/versions/v14/tactics/TA0043/`.
Unique ID	`uid`	String	The tactic ID that is associated with the attack technique, as defined by ATT&CK® Matrix. For example: `TA0043`.
Unmapped Data	`unmapped`	Unmapped[]	The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

These objects and events reference MITRE ATT&CK® Tactic in their attributes:

MITRE ATT&CK® Tactic references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0