MITRE ATT&CK® Tactic

tactic

The MITRE ATT&CK® Tactic object describes the tactic ID and/or name that is associated to an attack, as defined by ATT&CK® Matrix.

Attributes

CaptionNameTypeDescription
Name name String The tactic name that is associated with the attack technique, as defined by ATT&CK® Matrix. For example: Reconnaissance.
Raw Data raw_data JSON Group:context
The event data as received from the event source.
Record ID record_id String Group:primary
Unique identifier for the object
Source URL src_url URL String Entity:URL_STRING
The versioned permalink of the attack tactic, as defined by ATT&CK® Matrix. For example: https://attack.mitre.org/versions/v14/tactics/TA0043/.
Unique ID uid String The tactic ID that is associated with the attack technique, as defined by ATT&CK® Matrix. For example: TA0043.
Unmapped unmapped Unmapped[] Data from the source that was not mapped into the schema.

Relationships

MITRE ATT&CK® Tactic shown in context

Inbound Relationships

These objects and events reference MITRE ATT&CK® Tactic in their attributes:

Outbound Relationships

MITRE ATT&CK® Tactic references the following objects and events in its attributes:

This page describes ocsf-1.4.0