MITRE ATT&CK Framework is a globally-accessible knowledge base of adversary tactics and
techniques based on real-world observations. The ATT&CK knowledge base is used as a
foundation for the development of specific threat models and methodologies in the private
sector, in government, and in the cybersecurity product and service community. (MITRE
ATT&CK)
For example, say a group of bad actors want to steal sensitive information from a company. They might first try to "phish" employees by sending fake emails that look like they're from a legitimate source, in order to trick them into giving away their login credentials. This is an example of a tactic that would be listed in the MITRE ATT&CK framework. By knowing about this tactic, the company can take steps to train employees to be more cautious about suspicious emails and to better protect their login information.
It is important to know MiTRE Framework because
It can help understand the process of how an adversary thinks before getting into an network/system and once he/she is in the network/system, how he moves around within the organization.
The MITRE ATT&CK Framework is a tool that helps to understand how cybercriminals can attack computers and networks.
It shows the different methods attackers might use to get into a system, and what they might do once they're inside.
It helps security professionals know what to look for and how to protect against attacks.
It helps organizations identify any weaknesses in their security and fix them.
It allows organizations to share information about threats with each other and the broader community.
It helps organizations prepare for and respond to cyber attacks.
It can help organizations meet regulatory requirements for cybersecurity..
It's regularly updated to include the latest threat information to reflect the ever-changing cyber threat landscape.