MITRE Shield will be retired on October 18th in favor of MITRE Engage. To learn more, click here.


Enable an adversary to conduct part or all of their mission.

Facilitate is used to enable an adversary to conduct part or all of their mission. This could include using unpatched versions of operating systems and software, removing end-point detection software, and using weak password. It may also include opening firewall ports, adding proxy capabilities, or introducing elements that an adversary can easily leverage to bypass an obstacle in their operations.

ID: DTA0006


DTE0001 - Admin Access Modify a user's administrative privileges.
DTE0004 - Application Diversity Present the adversary with a variety of installed applications and services.
DTE0007 - Behavioral Analytics Deploy tools that detect unusual system or user behavior.
DTE0008 - Burn-In Exercise a target system in a manner where it will generate desirable system artifacts.
DTE0010 - Decoy Account Create an account that is used for active defense purposes.
DTE0011 - Decoy Content Seed content that can be used to lead an adversary in a specific direction, entice a behavior, etc.
DTE0012 - Decoy Credentials Create user credentials that are used for active defense purposes.
DTE0013 - Decoy Diversity Deploy a set of decoy systems with different OS and software configurations.
DTE0015 - Decoy Persona Develop personal information (aka a backstory) about a user and plant data to support that backstory.
DTE0017 - Decoy System Configure a computing system to serve as an attack target or experimental environment.
DTE0025 - Network Diversity Use a diverse set of devices on the network to help establish the legitimacy of a decoy network.
DTE0026 - Network Manipulation Make changes to network properties and functions to achieve a desired effect.
DTE0029 - Peripheral Management Manage peripheral devices used on systems within the network for active defense purposes.
DTE0030 - Pocket Litter Place data on a system to reinforce the legitimacy of the system or user.
DTE0032 - Security Controls Alter security controls to make the system more or less vulnerable to attack.
DTE0036 - Software Manipulation Make changes to a system's software properties and functions to achieve a desired effect.