MITRE ATT&CK mitigation ID
ID mitre_attack_mitigation_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of a mitigation in MITRE ATT&CK, a security measure that prevents a technique from succeeding: M followed by four digits. Deprecated mitigations from early ATT&CK versions reused technique IDs and are not covered.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^M[0-9]{4}$
Python re syntax.
Examples
| Value | Description |
|---|---|
| M1032 | Multi-factor Authentication |
| M1031 | Network Intrusion Prevention |
| M103 invalid | Three digits |
Sources
- wikipedia: https://en.wikipedia.org/wiki/ATT%26CK
- doc: https://attack.mitre.org/mitigations/M1032
- other: https://github.com/mitre-attack/attack-stix-data
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/mitre_attack_mitigation_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/mitre_attack_mitigation_id.yamlon GitHub