Verified75% confidenceFactExact time
TTPs (Tactics, Techniques, and Procedures) are a standardized framework in the cybersecurity field for describing attacker behavioral patterns, systematically organized and maintained by the MITRE ATT&CK matrix.
3
Sources
75%
Confidence
Long-term
Relevance
7/5/2026
First Seen
Sources
Related Claims
UnverifiedMITRE ATT&CK systematically categorizes known attack techniques, providing defenders with an encyclopedia of attacker behavior.72% similarUnverifiedIn the MITRE ATT&CK framework, C2 communication is classified as the 11th phase of the attack chain.69% similarVerifiedMITRE ATT&CK is an adversarial tactics and techniques knowledge base maintained by the U.S. non-profit organization MITRE, and has become the de facto standard reference framework for the global cybersecurity industry.66% similarUnverifiedAccording to the MITRE ATT&CK framework, vulnerability scanning falls under the Reconnaissance tactic phase, corresponding to technique ID T1595 (Active Scanning).65% similarUnverifiedLateral movement refers to the technique by which an attacker, after gaining control of an internal host or account, uses that foothold to expand access within the internal network; common techniques include Pass-the-Hash, Pass-the-Ticket, RDP, WMI, and PSExec, and the MITRE ATT&CK framework lists lateral movement as one of the key stages of the attack chain.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112348API
curl https://kongchang.com/api/v1/knowledge/claims/112348MCP
get_claim(id=112348)