MITRE began developing ATT&CK in 2013 as a part of its research project called Fort Meade eXperiment (FMX ). The goal of FMX was to investigate and analyze the endpoint telemetry data to improve the discovery of adversaries operating within enterprise networks post-attack. Furthermore, ATT&CK was built to provide detailed documentation of the common (TTPs) used by the advanced persistent threats (APTs) against the Windows enterprise networks. Initially used as the foundation for testing the effectiveness of the sensors and analytics under FMX, ATT&CK now serves as the common language or a framework for both defense and offense strategies of organizations.