| Version | Start Date | End Date | Data | Changelogs |
|---|---|---|---|---|
| ATT&CK v16 | October 31, 2024 | April 21, 2025 | v16.0 on MITRE/CTI v16.1 on MITRE/CTI |
15.1 - 16.0 Details (JSON) 16.0 - 16.1 Details (JSON) |
The October 2024 (v16) ATT&CK release updates Techniques, Groups, Campaigns and Software for Enterprise.
The biggest changes in ATT&CK v16 are a refactoring of Cloud platforms to better reflect real-world adversary activity along with improvements to platform descriptions, a dramatic expansion in the number of techniques with detection notes and analytics, and continued improvements to coverage of criminal threat actors. As a result of Cloud platform refactoring, the Azure AD, Office 365, and Google Workspace platforms have been removed from Enterprise ATT&CK and the Identity Provider and Office Suite platforms have been added in their place. An accompanying blog post describes these changes as well as additional improvements across Enterprise ATT&CK's various platforms.
This release also includes a human-readable detailed changelog showing more specifically what changed in updated ATT&CK objects, and a machine-readable JSON changelog, whose format is described in ATT&CK's Github.
This version of ATT&CK contains 844 Pieces of Software, 186 Groups, and 42 Campaigns
Broken out by domain: