Sources & license

MITRE license and disclaimers

The following text is reproduced from the license in the pinned source repository. MITRE source content is not relicensed under the site’s CC BY teaching-material notice.

License
-------
The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research,
development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce
MITRE's copyright designation and this license in any such copy.

"© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation."

Disclaimers
-----------
MITRE does not claim ATT&CK enumerates all possibilities for the types of actions and behaviors documented as part
of its adversary model and framework of techniques. Using the information contained within ATT&CK to address or cover
full categories of techniques will not guarantee full defensive coverage as there may be undisclosed techniques or
variations on existing techniques not documented by ATT&CK.

ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE
ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS,
AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT
THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE.

Current MITRE terms of use · Branding and trademark guidance

MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. No affiliation, sponsorship or endorsement is implied. The tool’s own name is ICS Technique Explorer.

Where the data comes from

• MITRE’s STIX 2.1 collection repository is the primary source, not an Excel import.
• The official collection index identifies releases. Each import pins one repository commit and records the exact source and license checksums.
• Available major-version matrix archives are checked against every tactic/technique placement. v20.0 has five verified pages. The v18 and v19 archives returned 404 for the four platform pages; those historical filters are labeled derived, not website-verified.
• Original platform tags—including literal None, missing fields, and older platform vocabulary—are retained without reclassification. The parent-aware rule requires a child and its parent to match the selected platform.
• Descriptions are plain-text normalized for display. Named citation markers are retained; the technique inspector provides source citations. The original source ZIP preserves unmodified STIX bytes.

Learn more about MITRE’s data formats and tools.

Version history, not a process historian

Snapshots preserve which objects and relationships were present in a published release. Original modification times and local retrieval times are different facts. Historical backfills do not recover every intermediate edit, and a new ATT&CK entry does not establish first adversary use.

Update checking and publishing are separate. The supplied CI workflow checks weekly for a new release or in-place changes to the latest reviewed source; it does not import or publish them. A new snapshot requires an intentional import, validation and publication review. Runtime pages never fetch MITRE or the private lab. Failed imports leave the reviewed catalog unchanged.

Excel is a generated output; immutable STIX snapshots are the source of record. A relational SQL projection could be added later for richer queries without replacing the retained sources.

What is interpretation?

The asset and DeltaV guide is explicitly labeled analyst guidance. It distinguishes generic MITRE asset mappings, vendor documentation, and illustrative examples. It does not assert installed OS versions, product compatibility, vulnerabilities or local coverage.

Emerson’s public DeltaV workstation/server data sheet and v16/IQ product description are linked only. MITRE’s license does not grant redistribution rights to third-party vendor publications.