MITRE Engenuity, Incorporated, a technology foundation for public good (“MITRE Engenuity”) respects the privacy of its website users that request to utilize the MITRE ATT&CK® Evaluation methodologies, results, and related information for MITRE Engenuity-conducted and/or self-accessed evaluations.
Information Collected from Cookies on Web Traffic Reporting and Content Tools
"Cookies" are data that may be sent to your web browser and stored on your computer. Most web browsers can be configured not to accept cookies, or to notify you if a cookie is sent to you. If you wish not to have cookies set during your visit to this Site, you can disable them in your web browser.
The Site is hosted on GitHub®. MITRE Engenuity and GitHub use a free third-party software service called Google Analytics® to capture and analyze non-personally identifiable website usage information.
MITRE Engenuity logs all accesses and the following information is recorded for each Site user: IP address, date and time of access, the requested URL, the referring URL (if provided by the Web browser), and the browser type (if provided by the Web browser). The IP address and its associated domain name (if any) are used to determine broad demographic information. The IP address may be used to track how users navigate through the Site.
MITRE Engenuity additionally collects User-entered keyword search strings to gauge User interest in specific types of vulnerability information. Each access of an individual Site entry or candidate page is used to gauge User interest. This information does not identify you personally. MITRE Engenuity may store such information, or it may be included in databases owned and maintained by our service providers.
Information Collected from User Subscriptions, E-mail, and Web Forms
Information that User subscribers may provide, such as company name, location, or job function, is used to determine broad demographic and non-personally identifiable information regarding the types of users of these mailing lists. User subscribers are not required to provide this information. MITRE Engenuity may provide broad non-personally identifiable demographic information to other organizations.
MITRE Engenuity evaluations related mailing lists that are sponsored by MITRE Engenuity use commercially reasonable efforts to prevent attackers from identifying the subscribers to such mailing lists.
Users may contact MITRE Engenuity electronically, via firstname.lastname@example.org. MITRE Engenuity may share the information that you provide to us via e-mail within the corporation to respond to your queries, but we do not provide information to anyone outside of the corporation unless required by law to do so.
Information Collected from Third Party Software and Media Sites