Tactics represent the "why" of an ATAGS technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may want to achieve credential access.
| ID | Name | Description |
|---|---|---|
| TA1000 | Reconnaissance | ATAGS Tactic: Reconnaissance |
| TA1001 | Resource Development | ATAGS Tactic: Resource Development |
| TA1002 | Initial Access | ATAGS Tactic: Initial Access |
| TA1003 | Execution | ATAGS Tactic: Execution |
| TA1004 | Persistence | ATAGS Tactic: Persistence |
| TA1005 | Privilege Escalation | ATAGS Tactic: Privilege Escalation |
| TA1006 | Defense Evasion | ATAGS Tactic: Defense Evasion |
| TA1007 | Credential Access | ATAGS Tactic: Credential Access |
| TA1008 | Discovery | ATAGS Tactic: Discovery |
| TA1009 | Lateral Movement | ATAGS Tactic: Lateral Movement |
| TA1010 | Collection | ATAGS Tactic: Collection |
| TA1011 | Command and Control | ATAGS Tactic: Command and Control |
| TA1012 | Exfiltration | ATAGS Tactic: Exfiltration |
| TA1013 | Impact | ATAGS Tactic: Impact |