ATTCK2FHIR Implementation Guide
0.0.5 - ci-build

ATTCK2FHIR Implementation Guide - Local Development build (v0.0.5) built by the FHIR (HL7® FHIR® Standard) Build Tools. See the Directory of published versions

: VS MITRE ATT&CK Tactics

Draft as of 2026-04-26

Raw xml | Download


<ValueSet xmlns="http://hl7.org/fhir">
  <id value="MITRE-ATTCK-Tactics"/>
  <language value="en"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: ValueSet MITRE-ATTCK-Tactics</b></p><a name="MITRE-ATTCK-Tactics"> </a><a name="hcMITRE-ATTCK-Tactics"> </a><ul><li>Include these codes as defined in <a href="CodeSystem-MITRE-ATTCK-Tactics.html"><code>https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics</code></a><span title="Version is not explicitly stated, which means it is fixed to the version provided in this specification"> version &#x1F4E6;0.0.5</span><table class="none"><tr><td style="white-space:nowrap"><b>Code</b></td><td><b>Display</b></td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0006">TA0006</a></td><td>Credential Access</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0002">TA0002</a></td><td>Execution</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0040">TA0040</a></td><td>Impact</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0003">TA0003</a></td><td>Persistence</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0004">TA0004</a></td><td>Privilege Escalation</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0008">TA0008</a></td><td>Lateral Movement</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0005">TA0005</a></td><td>Defense Evasion</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0010">TA0010</a></td><td>Exfiltration</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0007">TA0007</a></td><td>Discovery</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0009">TA0009</a></td><td>Collection</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0042">TA0042</a></td><td>Resource Development</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0043">TA0043</a></td><td>Reconnaissance</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0011">TA0011</a></td><td>Command and Control</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0001">TA0001</a></td><td>Initial Access</td></tr></table></li></ul></div>
  </text>
  <url
       value="https://constir1.github.io/ATTCK2FHIR/ValueSet/MITRE-ATTCK-Tactics"/>
  <version value="0.0.5"/>
  <title value="VS MITRE ATT&amp;CK Tactics"/>
  <status value="draft"/>
  <experimental value="false"/>
  <date value="2026-04-26T20:36:59+00:00"/>
  <publisher value="ATTCK2FHIR IG"/>
  <contact>
    <name value="ATTCK2FHIR IG"/>
    <telecom>
      <system value="url"/>
      <value value="https://constir1.github.io/ATTCK2FHIR"/>
    </telecom>
  </contact>
  <description value="All MITRE ATT&amp;CK Enterprise Tactics"/>
  <compose>
    <include>
      <system
              value="https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics"/>
      <concept>
        <code value="TA0006"/>
        <display value="Credential Access"/>
      </concept>
      <concept>
        <code value="TA0002"/>
        <display value="Execution"/>
      </concept>
      <concept>
        <code value="TA0040"/>
        <display value="Impact"/>
      </concept>
      <concept>
        <code value="TA0003"/>
        <display value="Persistence"/>
      </concept>
      <concept>
        <code value="TA0004"/>
        <display value="Privilege Escalation"/>
      </concept>
      <concept>
        <code value="TA0008"/>
        <display value="Lateral Movement"/>
      </concept>
      <concept>
        <code value="TA0005"/>
        <display value="Defense Evasion"/>
      </concept>
      <concept>
        <code value="TA0010"/>
        <display value="Exfiltration"/>
      </concept>
      <concept>
        <code value="TA0007"/>
        <display value="Discovery"/>
      </concept>
      <concept>
        <code value="TA0009"/>
        <display value="Collection"/>
      </concept>
      <concept>
        <code value="TA0042"/>
        <display value="Resource Development"/>
      </concept>
      <concept>
        <code value="TA0043"/>
        <display value="Reconnaissance"/>
      </concept>
      <concept>
        <code value="TA0011"/>
        <display value="Command and Control"/>
      </concept>
      <concept>
        <code value="TA0001"/>
        <display value="Initial Access"/>
      </concept>
    </include>
  </compose>
</ValueSet>