ATTCK2FHIR Implementation Guide
0.0.5 - ci-build

ATTCK2FHIR Implementation Guide - Local Development build (v0.0.5) built by the FHIR (HL7® FHIR® Standard) Build Tools. See the Directory of published versions

## ValueSet: VS MITRE ATT&CK Tactics

Official URL: https://constir1.github.io/ATTCK2FHIR/ValueSet/MITRE-ATTCK-Tactics | Version: 0.0.5 | Highlight text changes?
Draft as of 2026-04-26 | Computable Name:

All MITRE ATT&CK Enterprise Tactics

References

This value set is not used here; it may be used elsewhere (e.g. specifications and/or implementations that use this content)

### Logical Definition (CLD)

- Include these codes as defined in `https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` version 📦0.0.5

  Code | Display
  TA0006 | Credential Access
  TA0002 | Execution
  TA0040 | Impact
  TA0003 | Persistence
  TA0004 | Privilege Escalation
  TA0008 | Lateral Movement
  TA0005 | Defense Evasion
  TA0010 | Exfiltration
  TA0007 | Discovery
  TA0009 | Collection
  TA0042 | Resource Development
  TA0043 | Reconnaissance
  TA0011 | Command and Control
  TA0001 | Initial Access

### Expansion

Expansion performed internally based on codesystem CS MITRE ATT&CK Tactics v0.0.5 (CodeSystem)

This value set contains 14 concepts

System | Code | Display (en) | JSON | XML
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0006 | Credential Access |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0002 | Execution |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0040 | Impact |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0003 | Persistence |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0004 | Privilege Escalation |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0008 | Lateral Movement |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0005 | Defense Evasion |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0010 | Exfiltration |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0007 | Discovery |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0009 | Collection |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0042 | Resource Development |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0043 | Reconnaissance |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0011 | Command and Control |  |
`https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics` | TA0001 | Initial Access |  |

Description of the above table(s).