Security · Flashcard
What replaced the per-technique Detection notes in ATT&CK v18?
- ADetection Strategies, each implemented by one or more Analytics
- BA CVSS-style severity score attached to every technique page
- CA single vendor-neutral SIEM rule pack published by MITRE
- DA mandatory mapping from each technique to a named CVE entry
Why this is the answer
ATT&CK v18 (October 2025) replaced the free-text Detection field on techniques with Detection Strategy objects (DET####), each broken into platform-specific Analytics (AN####) — and deprecated Data Sources in the same release. MITRE did not add severity scores, ship a SIEM rule pack, or tie techniques to CVEs.
Official docs