ATT&CK

MITRE ATT&CK is a free, globally used knowledge base of real-world adversary behavior, organized into tactics (the attacker's goals) and techniques (how they achieve them). It turned scattered threat reporting into a common framework the whole industry references. Defenders use it to map detection coverage, emulate threat actors, and describe incidents in a shared language.