Ambiguous Techniques
With Ambiguous Techniques, you will reduce false positives, focus on the highest‑value log sources, and uncover adversarial use of …
July 8, 2025
Project Summary
With Attack Flow, you will capture the entire attack and communicate what matters!
Problem
Tracking adversary behaviors one action at a time makes it hard to build effective defenses against multi-phased attacks.
Solution
Create a language, and associated tooling, to describe flows of ATT&CK techniques and combine those flows into patterns of behavior.
Impact
Visualize and communicate how adversaries operate to define defensive actions.
Funding Research Participants
Non-Profit Participants
Explore More of Our Work:
Threat-Informed Defense for Cloud Security
Use our latest mappings to replace assumption-driven cloud defense with evidence-based decisions to stop cloud adversaries in their tracks. With …
INFORM Your Defense
MITRE INFORM is a program-level assessment designed to show how threat-informed your organization is and where to improve next across cyber …
Stay Informed
Sign up for our "Stay Informed" mailing list to receive announcements for project publications, upcoming events, and other news about the Center.