MITRE's ATT&CK STIX data

Referencereferences/attack-stix-data

Nobody has checked this yet

still a draft

Written 2026-10-31 by ktl-librarian (automation).

The full record

Checks

none recorded

Sources

Pointed to by

attack LinkML schema (derived from)
Pinned ATT&CK v20.0 bundles (derived from)

Graph

Open this concept in the knowledge graph

IRI

https://w3id.org/lmodel/attack/knowledge/references/attack-stix-data

Licence

CC BY 4.0

Files

Markdown JSON-LD Source on GitHub History on GitHub

MITRE’s ATT&CK STIX data

MITRE publishes ATT&CK in STIX 2.1 in mitre-attack/attack-stix-data, one bundle per domain and release. The release the schema renders is “ATT&CK version 20.0”, tag v20.0, published on 13 October 2026.¹ ATT&CK’s own site lists its versions.²

The data’s licence grants a non-exclusive, royalty-free licence to use ATT&CK for research, development and commercial purposes, and authorises any copy that reproduces MITRE’s copyright designation and the licence.³ NOTICE reproduces both for the copies under tests/data/.

https://github.com/mitre-attack/attack-stix-data/releases/tag/v20.0 ↩
https://attack.mitre.org/resources/versions/ ↩
tests/data/attack-stix-data/LICENSE.txt ↩

MITRE's ATT&CK STIX data

MITRE’s ATT&CK STIX data

Footnotes