// GLOSSARY

MITRE ATT&CK

The industry's established knowledge base classifying attacker behavior at the tactic and technique level (Adversarial Tactics, Techniques, and Common Knowledge). It arranges behaviors observed from real attacks into a matrix: each tactic represents a goal (for example initial access, privilege escalation, lateral movement), each technique a concrete way of reaching that goal. In Modular Red Team Simulation reports, attack-path steps and the detection-gap matrix are presented aligned with this framework. Its function is to be a common language, and this is the most valuable bridge between the red team and the blue team: labeling an attack step with an ATT&CK technique ties the red team's finding directly to the blue team's defensive setup, SIEM rules and detection capabilities. Without this alignment a red team report stays a narrative hard to turn into defense; with it, each step becomes the question 'do we see this technique, and if not, with which control will we'. Its counterpart for AI systems is MITRE ATLAS.