Common usage patterns

Typical ways visitors use this tool.

  • Look up a technique ID such as T1059 while reviewing detections, reports, or incident notes.
  • Search by keyword to find relevant ATT&CK techniques during threat-modeling or SOC content work.
  • Use the result as a quick reference before mapping controls, alerts, or investigation notes to ATT&CK language.

Tool overview

A quick summary of what this tool does on the page.

Search MITRE ATT&CK techniques online with this free MITRE ATT&CK Lookup. Enter a technique ID or keyword, run the search, and review matching ATT&CK entries instantly.

Questions answered on-page

Quick answers to common questions about using this page.

What does MITRE ATT&CK Lookup do?

MITRE ATT&CK Lookup searches public ATT&CK technique data so you can review matching IDs, names, and related reference information from one page.

When should I use MITRE ATT&CK Lookup?

Use it during detection engineering, incident response, threat hunting, control mapping, or report writing when ATT&CK technique references matter.

Can I search by technique ID or keyword?

Yes. This page supports direct ATT&CK IDs and keyword-based searches so you can start from whichever reference you already have.

Related tools

Open the next tool in the workflow or compare similar options.

More pages for this tool

Browse the main tool page and other focused versions built around the same workflow.