MITRE ATT&CK Enterprise

1. Reconnaissance

   Gathering information to plan operations.

2. Resource Development

   Establishing infrastructure, accounts and capabilities.

3. Initial Access

   Phishing, exploiting public-facing applications and supply chain compromise.

4. Execution

   Running adversary-controlled code.

5. Persistence

   Maintaining a foothold across restarts and credential changes.

6. Privilege Escalation

   Gaining higher-level permissions.

7. Stealth

   Avoiding detection, masquerading and hiding artifacts.

8. Defense Impairment

   Disabling or tampering with security tooling and logging.

9. Credential Access

   Stealing account names, passwords and tokens.

10. Discovery

    Learning about the environment, accounts and network.

11. Lateral Movement

    Moving through the environment between systems.

12. Collection

    Gathering data of interest.

13. Command and Control

    Communicating with compromised systems.

14. Exfiltration

    Stealing data out of the network.

15. Impact

    Disrupting availability or integrity, ransomware and destruction.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.