MITRE Tactic

tactic

The MITRE Tactic object describes the ATT&CK® or ATLAS™ Tactic ID and/or name that is associated to an attack.

Attributes

CaptionNameTypeDescription
NamenameString

The Tactic name that is associated with the attack technique. For example: Reconnaissance or ML Model Access.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

Source URLsrc_urlURL String

Entity:URL_STRING
The versioned permalink of the Tactic. For example: https://attack.mitre.org/versions/v14/tactics/TA0043/.

Unique IDuidString

The Tactic ID that is associated with the attack technique. For example: TA0043, or AML.TA0000.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

MITRE Tactic shown in context

Inbound Relationships

These objects and events reference MITRE Tactic in their attributes:

Outbound Relationships

MITRE Tactic references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0