{"id":59829,"date":"2025-12-10T00:00:00","date_gmt":"2025-12-10T00:00:00","guid":{"rendered":"urn:uuid:be28d7f8-6fae-a25f-6383-7a2f673f61f6"},"modified":"2025-12-10T00:00:00","modified_gmt":"2025-12-10T00:00:00","slug":"trend-vision-one-stacks-up-against-scattered-spider-and-mustang-panda-in-2025-mitre-attck-evaluations","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/trend-vision-one-stacks-up-against-scattered-spider-and-mustang-panda-in-2025-mitre-attck-evaluations\/","title":{"rendered":"Trend Vision One\u2122 Stacks Up Against Scattered Spider and Mustang Panda in 2025 MITRE ATT&CK\u00ae Evaluations"},"content":{"rendered":"

<\/p>\n

<\/div>\n

The 2025 MITRE ATT&CK\u00ae Evaluations once again put the world\u2019s leading cybersecurity platforms to the test, and Trend Vision One accepted the challenge.<\/span><\/p>\n

This year\u2019s evaluation, the Enterprise Round 7 (ER7), introduced the most complex and realistic test environment to date, simulating multi-stage, hybrid attacks spanning on-premises systems, cloud workloads, and containerized applications.<\/p>\n

In an evaluation that demanded autonomous, correlated detections and real-time protection, we believe Trend Vision One delivered exceptional performance across all phases of the attack chain. In our view, this reinforces our position as a trusted leader in detection and response innovation, providing you with reliable, real-time threat detection and response to strengthen security and operational efficiency.<\/p>\n

This cycle included 11 participating vendors. As always, MITRE does not rank or score solutions. Instead, it provides transparent data that organizations can interpret based on their own operational requirements. That said, organizations should focus on the data most relevant to their environment, including detection coverage, alert fidelity, protection performance, and cloud visibility<\/p>\n

A new era of testing: What\u2019s new in MITRE ATT&CK Evaluations ER7 (2025)<\/span><\/p>\n

The 2025 evaluation marked a significant evolution in MITRE\u2019s approach. Unlike previous years, this round now includes both on-premises and cloud-based attacks, as well as the Reconnaissance tactic. This not only simulates hybrid environments that real SOC teams defend against today but also highlights the necessity for SOC teams to rely on effective enterprise tools. This enables you to identify and stop threats in motion, providing central visibility for both preventive and detection methodologies.<\/p>\n

Specifically, to mirror modern enterprise stacks, MITRE added AWS workloads, identity and access management (IAM) manipulation, and Docker-based applications (GitLab, Airbyte, AuthenTik, WeKan).<\/p>\n

This directly tested whether solutions can:<\/p>\n