Framework mapping
MITRE ATT&CK® Enterprise mapping
Tactics: Command and Control
Platforms: Windows, Linux, macOS, IaaS, Network Devices, Containers, ESXi
Relationship: detection coverage
Open the official ATT&CK object ↗Tactics: Command and Control
Platforms: Windows, Linux, macOS, IaaS, Network Devices, Containers, ESXi
Relationship: detection coverage
Open the official ATT&CK object ↗Editorial mapping of an inherited BMC article to related Enterprise ATT&CK behavior, control, evidence, architecture, or risk context. Mapping roles state the relationship and do not assert equivalence unless labeled direct.
MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. Bare Metal Cyber is not affiliated with or endorsed by MITRE.
Related defensive techniques
Inferred and experimental: These relationships are generated from D3FEND graph paths. They are hypotheses for analysis, not proof of prevention, detection, or control effectiveness.
Showing 30 of 64 inferred defensive relationships.
MITRE D3FEND™ and the D3FEND logo are trademarks of The MITRE Corporation. MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation.
What it means
Command and control detection identifies the channels, timing patterns, protocol misuse, infrastructure, and host behavior used to direct compromised systems.
Why it matters
Security operations become reliable only when people, process, telemetry, tooling, and decision authority work as one measurable system.
Practical focus
- Define the operational outcome and decision owner
- Document inputs, workflow states, escalation, and evidence
- Measure quality, timeliness, coverage, and workload together
- Tune the practice through analyst feedback and validation
Common mistakes
- Buying a tool before defining the operating need
- Measuring ticket volume instead of decision quality
- Leaving handoffs or authority ambiguous
- Treating an initial workflow as permanently finished
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: