MITRE ATT&CK Enterprise - Complete English Dataset

Comprehensive dataset of the MITRE ATT&CK Enterprise framework on Hugging Face. Data extracted automatically from official STIX 2.1 sources.

Description

This dataset covers the entire MITRE ATT&CK Enterprise framework:

• 14 tactics with full descriptions
• 691 techniques and sub-techniques (216 techniques + 475 sub-techniques)
• 44 mitigations with associated techniques
• 172 threat groups (APTs) with their known techniques
• 30 Q&A pairs covering ATT&CK concepts

Structure

1. tactics.json (14 entries)

id, name, description, shortname, url, techniques_count

2. techniques.json (691 entries)

id, name, description, tactic_ids, tactic_names, is_subtechnique, parent_id, platforms, detection, mitigation_ids, data_sources, url, created, modified

3. mitigations.json (44 entries)

id, name, description, technique_ids, url

4. groups.json (172 entries)

id, name, aliases, description, technique_ids, url

5. qa_dataset.json (30 entries)

id, question, answer, category, reference, difficulty, keywords

Usage

from datasets import load_dataset

ds = load_dataset("AYI-NEDJIMI/mitre-attack-en", data_files="data/techniques.json")
for tech in ds["train"]:
    print(f"{tech['id']} - {tech['name']}")

Use Cases

• Threat Intelligence: Structured reference for threat analysis
• SOC Training: Educational material for security analysts
• Red Team: ATT&CK-based exercise planning
• Detection Engineering: Mapping detection rules to ATT&CK techniques
• RAG / Fine-tuning: Training specialized cybersecurity models

Other Datasets

Interactive Explorer

Explore this dataset interactively: MITRE ATT&CK Explorer

Full Collection

This dataset is part of the Cybersecurity Datasets & Tools collection on HuggingFace.

Source

• MITRE ATT&CK: Official STIX 2.1 data from attack-stix-data
• Extraction: Automated with mitreattack-python

License

Apache 2.0 - MITRE ATT&CK data is under Apache 2.0.

Citation

@dataset{mitre_attack_en_2025,
  title={MITRE ATT&CK Enterprise - Complete English Dataset},
  author={AYI-NEDJIMI},
  year={2025},
  publisher={Hugging Face},
  url={https://huggingface.co/datasets/AYI-NEDJIMI/mitre-attack-en}
}

Author & Resources

Ayi NEDJIMI - Senior Consultant in Offensive Cybersecurity & AI

Cybersecurity Articles

• Website - Cybersecurity & AI Articles
• OAuth 2.0 Security Guide
• NTLM Relay Attacks Guide
• Kubernetes Security Hardening
• Memory Forensics with Volatility
• Securing Microsoft 365 with Conditional Access

AI Articles

• RAG: Retrieval-Augmented Generation
• Optimizing Document Chunking
• Choosing a Vector Database
• Embedding Security & Privacy

Networks

• LinkedIn
• GitHub
• Twitter/X

Author

Ayi NEDJIMI - Cybersecurity Consultant & Trainer | AI Expert

• Professional Bio
• All Articles
• Free Guides & Whitepapers
• Training Programs

Related Articles

• Top 10 Attaques Active Directory
• Top 10 Solutions EDR/XDR 2025
• Threat Hunting M365
• Kerberos Exploitation AD
• OAuth Security
• Attaques API GraphQL & REST
• Attaques CI/CD
• Evasion EDR/XDR
• Living Off The Land à Échelle
• NTLM Relay Moderne
• Supply Chain Applicative

Free Cybersecurity Resources

• Livre Blanc NIS 2
• Livre Blanc Sécurité Active Directory
• Livre Blanc Pentest Cloud AWS/Azure/GCP
• Livre Blanc Sécurité Kubernetes
• Livre Blanc IA Cyberdéfense
• Livre Blanc Anatomie Ransomware
• Guide Sécurisation AD 2025
• Guide Tiering Model AD

Part of the Collection

This dataset is part of the Cybersecurity Datasets & Tools Collection by AYI-NEDJIMI Consultants.