Center for Threat-Informed Defense

Changing the Game on the Adversary

The Center is a non-profit, privately funded research and development organization operated by MITRE. The Center’s mission is to advance the state of the art and the state of the practice in threat-informed defense globally. Comprised of participant organizations from around the globe with highly sophisticated security teams, the Center builds on MITRE ATT&CK®, an important foundation for threat-informed defense used by security teams and vendors in their enterprise security operations.

The results of our research & development projects are freely available to the public.

Just Released

Ambiguous Techniques

With Ambiguous Techniques, you will reduce false positives, focus on the highest‑value log sources, and uncover adversarial use of living‑off‑the‑land activity with an evidence‑driven detection design process.

Newest Resource

2024 Impact Report

As we celebrate the 5th anniversary of the launch of the Center, we start with our Founders and the alliance of Center Participants that has followed in their footsteps building a legacy of impactful research and development and nurturing a global community of threat-informed defenders. Over the past five years, the Center has welcomed more than 750 researchers from 46 global organizations through our doors to work side-by-side in pursuit of the release of 40 open-source research projects attracting the attention of tens of thousands of ATT&CK community members on social media, by word of mouth,and at conferences and trainings worldwide. Each research project is consistently received by the community with praise, accolades, and sincere gratitude for our work.

Featured Resource

MITRE INFORM: Best Practices Assessment Tool

MITRE INFORM identifies technical components for each of the 3 Dimensions of TID. For each component, a spectrum of maturity levels are defined from the least threat-informed to a most threat-informed implementation. The INFORM assessment allows you to evaluate your level of threat-informed defense so you can make decisions on existing or planned defensive measures and identify any gaps you might have.