attack.mitre.org
MITRE ATT&CK is a knowledge base of adversary tactics and techniques based on real-world observations. It is used as a foundation for threat models and methodologies in the private sector, government and cybersecurity community, and is available for use at no charge.