Newsletter

Guide · from Palo Alto Networks

The Complete Guide to the Latest MITRE ATT&CK Evaluations

How the top endpoint security vendors performed.

The Complete Guide to the Latest MITRE ATT&CK Evaluations
Format
Guide
Published by
Palo Alto Networks
Added
5 Aug 2025

About this guide

How the top endpoint security vendors performed.

How the top endpoint security vendors performed. Round 6 of MITRE’s Enterprise ATT&CK® Evaluations introduced crucial new metrics for endpoint security solutions, including false positives and expanded coverage across Windows®, Linux and macOS platforms. The evals focused on two sophisticated adversaries: ransomware as a service and North Korean state-sponsored campaigns.

This essential guide breaks down the test methodology, highlighting changes this year and shows how endpoint security vendors performed. You'll discover how Cortex XDR® achieved historic, industry-leading results and what they mean for you when choosing your next endpoint security provider.

Key highlights covered in this guide:

  • What the MITRE ATT&CK Evaluations are and how they simulate real-world cyberattacks.
  • Complete analysis of vendor performance across ransomware and the Democratic People’s Republic of Korea (DPRK) attack scenarios on Windows, Linux and macOS.
  • Cortex XDR's real-world results compared to other leading solutions.

Download the guide to get strategic insights for strengthening your organization's endpoint security posture.

Listen or skim

Summaries are generated from this page’s text. Read the full piece for the detail.

More from Palo Alto Networks

All 11 →

Elsewhere in Cybersecurity

See the category →