Security · Flashcard

What replaced the per-technique Detection notes in ATT&CK v18?

ADetection Strategies, each implemented by one or more Analytics
BA CVSS-style severity score attached to every technique page
CA single vendor-neutral SIEM rule pack published by MITRE
DA mandatory mapping from each technique to a named CVE entry

Why this is the answer

ATT&CK v18 (October 2025) replaced the free-text Detection field with Detection Strategy objects (DET####), each broken into platform-specific Analytics (AN####). MITRE publishes no severity scores and no product-ready rule pack, and CVEs describe vulnerabilities rather than behaviour.

Official docs

Study in Gnoseed →

More MITRE ATT&CK Tactics and Techniques flashcards

What does the acronym ATT&CK stand for?
What separates the Stealth tactic from Defense Impairment in ATT&CK?
Which of these software entries does ATT&CK type as Malware rather than Tool?

Back to the MITRE ATT&CK Tactics and Techniques deck (95 flashcards)