ATTCK2FHIR Implementation Guide
0.0.5 - ci-build

ATTCK2FHIR Implementation Guide - Local Development build (v0.0.5) built by the FHIR (HL7® FHIR® Standard) Build Tools. See the Directory of published versions

## : VS MITRE ATT&CK Tactics

Draft as of 2026-04-26

Raw xml | Download

    <ValueSet xmlns="http://hl7.org/fhir">
      <id value="MITRE-ATTCK-Tactics"/>
      <language value="en"/>
      <text>
        <status value="generated"/>
        <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: ValueSet MITRE-ATTCK-Tactics</b></p><a name="MITRE-ATTCK-Tactics"> </a><a name="hcMITRE-ATTCK-Tactics"> </a><ul><li>Include these codes as defined in <a href="CodeSystem-MITRE-ATTCK-Tactics.html"><code>https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics</code></a><span title="Version is not explicitly stated, which means it is fixed to the version provided in this specification"> version &#x1F4E6;0.0.5</span><table class="none"><tr><td style="white-space:nowrap"><b>Code</b></td><td><b>Display</b></td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0006">TA0006</a></td><td>Credential Access</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0002">TA0002</a></td><td>Execution</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0040">TA0040</a></td><td>Impact</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0003">TA0003</a></td><td>Persistence</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0004">TA0004</a></td><td>Privilege Escalation</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0008">TA0008</a></td><td>Lateral Movement</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0005">TA0005</a></td><td>Defense Evasion</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0010">TA0010</a></td><td>Exfiltration</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0007">TA0007</a></td><td>Discovery</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0009">TA0009</a></td><td>Collection</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0042">TA0042</a></td><td>Resource Development</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0043">TA0043</a></td><td>Reconnaissance</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0011">TA0011</a></td><td>Command and Control</td></tr><tr><td><a href="CodeSystem-MITRE-ATTCK-Tactics.html#MITRE-ATTCK-Tactics-TA0001">TA0001</a></td><td>Initial Access</td></tr></table></li></ul></div>
      </text>
      <url
           value="https://constir1.github.io/ATTCK2FHIR/ValueSet/MITRE-ATTCK-Tactics"/>
      <version value="0.0.5"/>
      <title value="VS MITRE ATT&amp;CK Tactics"/>
      <status value="draft"/>
      <experimental value="false"/>
      <date value="2026-04-26T20:36:59+00:00"/>
      <publisher value="ATTCK2FHIR IG"/>
      <contact>
        <name value="ATTCK2FHIR IG"/>
        <telecom>
          <system value="url"/>
          <value value="https://constir1.github.io/ATTCK2FHIR"/>
        </telecom>
      </contact>
      <description value="All MITRE ATT&amp;CK Enterprise Tactics"/>
      <compose>
        <include>
          <system
                  value="https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics"/>
          <concept>
            <code value="TA0006"/>
            <display value="Credential Access"/>
          </concept>
          <concept>
            <code value="TA0002"/>
            <display value="Execution"/>
          </concept>
          <concept>
            <code value="TA0040"/>
            <display value="Impact"/>
          </concept>
          <concept>
            <code value="TA0003"/>
            <display value="Persistence"/>
          </concept>
          <concept>
            <code value="TA0004"/>
            <display value="Privilege Escalation"/>
          </concept>
          <concept>
            <code value="TA0008"/>
            <display value="Lateral Movement"/>
          </concept>
          <concept>
            <code value="TA0005"/>
            <display value="Defense Evasion"/>
          </concept>
          <concept>
            <code value="TA0010"/>
            <display value="Exfiltration"/>
          </concept>
          <concept>
            <code value="TA0007"/>
            <display value="Discovery"/>
          </concept>
          <concept>
            <code value="TA0009"/>
            <display value="Collection"/>
          </concept>
          <concept>
            <code value="TA0042"/>
            <display value="Resource Development"/>
          </concept>
          <concept>
            <code value="TA0043"/>
            <display value="Reconnaissance"/>
          </concept>
          <concept>
            <code value="TA0011"/>
            <display value="Command and Control"/>
          </concept>
          <concept>
            <code value="TA0001"/>
            <display value="Initial Access"/>
          </concept>
        </include>
      </compose>
    </ValueSet>