5 Things to Know About the MITRE ATT&CK Evaluations: Enterprise 2025

CrowdStrike achieves 100% detection and 100% protection with zero false positives

The MITRE ATT&CK® Enterprise Evaluations test cybersecurity solutions against simulated attacks that mirror real-world adversary behavior. The 2025 evaluation raises the bar with expanded cloud-based attack coverage, new reconnaissance tactic testing, and complex cross-domain tradecraft that reflects today's enterprise risks.

This eBook explores CrowdStrike’s results as well as four other key areas of the 2025 evaluation:

• Living-off-the-Land Attacks: Learn how attackers leverage administrative tools and how the CrowdStrike Falcon® platform uses behavioral defense to identify when legitimate tools are used with malicious intent.
• Cloud Exploitation: Discover how adversaries leverage native cloud features and how CrowdStrike Falcon® Cloud Security: Cloud Runtime Protection monitors cloud control plane events to identify malicious behavior in real time.
• Identity Under Fire: Understand how attackers now log in instead of breaking in and how CrowdStrike Falcon® Next-Gen Identity Security continuously monitors authentication behavior to detect subtle deviations.
• Cross-Domain Attacks: Learn how modern intrusions move fluidly between endpoint, identity, and cloud and how the Falcon platform provides full context across every layer of the attack surface.