| Version | Start Date | End Date | Data | Changelogs |
|---|---|---|---|---|
| ATT&CK v11 | April 25, 2022 | October 24, 2022 | v11.0 on MITRE/CTI v11.1 on MITRE/CTI v11.2 on MITRE/CTI v11.3 on MITRE/CTI |
v10.1 - v11.0 Details (JSON) v11.0 - v11.1 Details (JSON) v11.1 - v11.2 Details (JSON) v11.2 - v11.3 Details (JSON) |
The April 2022 (v11) ATT&CK release updates Techniques, Groups, and Software for Enterprise, Mobile, and ICS. The biggest changes are the restructuring of Detections, now tied to Data Source and Data Component objects in Enterprise ATT&CK, a beta release of ATT&CK for Mobile leveraging sub-techniques, and ATT&CK for ICS now on attack.mitre.org An accompanying blog post describes these changes as well as improvements across ATT&CK's various domains and platforms.
This release contains a beta version of ATT&CK for Mobile represented using sub-techniques. The current stable version of ATT&CK for Mobile can still be found at https://attack.mitre.org/versions/v10/matrices/mobile/. Information on how to make the transition to this new version of ATT&CK for Mobile can be found in an accompanying blog post. A version of this beta content rendered in STIX can be found in our GitHub repo.
In this release we have replaced the Enterprise Sub-Techniques Boot or Logon Autostart Execution: Plist Modification (T1547.011) with Plist File Modification (T1647) and Scheduled Task/Job: At (Linux)(T1053.001) was incorporated into Scheduled Task/Job: At (T1053.002) in to better reflect adversary behavior.
This version of ATT&CK for Enterprise contains 14 Tactics, 191 Techniques, 386 Sub-techniques, 134 Groups, and 680 Pieces of Software.
The below changes represent the Mobile v11.0-beta release. The current production release at https://attack.mitre.org/versions/v10/matrices/mobile/ remains unchanged.
Data Source and/or Component changes:
ATT&CK for Mobile does not support data sources