MITRE ATT&CK for ICS

MITRE ATT&CK for ICS is a publicly maintained knowledge base that catalogs the specific tactics and techniques attackers have used against industrial control systems, organized into a matrix covering roughly a dozen tactics (from Initial Access through Impact) and around 90 techniques. Unlike the general MITRE ATT&CK framework, it includes tactics unique to physical-process environments, such as "Inhibit Response Function" and "Impair Process Control." Security teams use it as a common reference for describing and defending against real-world OT attack behavior.