Select and apply appropriate ATT&CK matrix for target environment. ATT&CK FOR ENTERPRISE primary matrix covers Windows + macOS + Linux + Office Suite + IaaS + SaaS + Identity Provider + Network platforms. ATT&CK FOR CLOUD sub-matrix for AWS + Azure + Google Cloud Platform (GCP) + Office 365 + SaaS + IaaS + Network. ATT&CK FOR MOBILE for iOS + Android covering 12 tactics including app-specific adversary behaviours + mobile malware + mobile device management bypass. ATT&CK FOR ICS (Industrial Control Systems) for operational technology environments + Schneider Electric + Rockwell Automation + Siemens + ABB + Honeywell systems + DCS + PLC + SCADA + HMI + historians + safety-instrumented systems + level 0-3 Purdue model. CONTAINER matrix (added v10 2021) for Docker + Kubernetes + container orchestration. Selection criteria: target platform + threat model + attack surface + adversary capabilities. Cross-matrix techniques tracked when applicable. Integration via STIX 2.x JSON exports. ATT&CK Navigator tool visualises coverage across matrices. Enterprise + Mobile + ICS + Cloud versions tracked separately with version-specific change logs. Coverage planning using ATT&CK Navigator JSON heat maps + Veris + STIX exchange.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.