License

License and citation

The PH!SH Framework content is free to use, share, and adapt with attribution. This page states the terms, what they do not cover, and how to cite a release.

Framework content

The PH!SH Framework content is licensed under the Creative Commons Attribution 4.0 International license (CC BY 4.0). The license covers the entry IDs, names, descriptions, categories, and the crosswalk to MITRE ATT&CK®. Read the full terms at creativecommons.org/licenses/by/4.0.

Attribution means naming Hoxhunt as the source, linking to this site or to the entry you used, and stating whether you changed the text.

Names and logos

The license covers the framework content only. As CC BY 4.0 states, it grants no patent or trademark rights, so it gives no right to use the PH!SH name, the Hoxhunt name, or the Hoxhunt logo.

Third-party content

© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

ATT&CK content stays under the terms set by MITRE. The CC BY 4.0 license above applies to the PH!SH entries and to the mappings themselves.

How to cite

Cite the framework as a whole, or link a single entry by its ID. Replace the date with the day you read the page.

Citation Hoxhunt Threat Research. PH!SH Framework, PH!SH v1.0. framework.hoxhunt.com/ (accessed DAY MONTH YEAR).

Website code and design

© 2026 Hoxhunt. All rights reserved. The CC BY 4.0 license covers the framework content, and the code, layout, and visual design of this site stay under copyright.