ATT&CK ID
glossary/attack-idNobody has checked this yet
still a draft
Written 2026-10-31 by ktl-librarian (automation).
The human-readable identifier ATT&CK gives an object, such as T1059.
The full record
- Checks
- none recorded
- Sources
- Related to
- Defined by
- Graph
- Open this concept in the knowledge graph
- IRI
https://w3id.org/lmodel/attack/knowledge/glossary/attack-id- Licence
- CC BY 4.0
- Files
- MarkdownJSON-LDSource on GitHubHistory on GitHub
ATT&CK ID
Section titled “ATT&CK ID”An object’s ATT&CK ID is the external_id of its first external reference, whose source_name is mitre-attack for a technique. Each class gives the form of its ID in its attack_id_pattern annotation, and tests/attack_rules.py checks it, since no validator reads the order of a list. The STIX id, such as attack-pattern-- and a UUID, identifies the object itself.1
Footnotes
Section titled “Footnotes”-
src/attack/schema/attack.yaml, the class AttackTechnique ↩