Sophos Achieves 100% Detection in 2025 MITRE ATT&CK Enterprise Evaluation

Cybersecurity leader Sophos has achieved full detection coverage in the 2025 MITRE ATT&CK Enterprise Evaluation, successfully identifying 100% of adversary activity across two demanding, real-world attack scenarios.
Cybersecurity leader Sophos has achieved full detection coverage in the 2025 MITRE ATT&CK Enterprise Evaluation, successfully identifying 100% of adversary activity across two demanding, real-world attack scenarios.
The independent assessment, considered a global benchmark for security detection, tested Sophos XDR against simulations of Scattered Spider, a financially motivated cybercrime group, and Mustang Panda, a long-running China-linked espionage group.
The evaluation examined complex attack chains across Windows, Linux, and Amazon Web Services (AWS) cloud environments for the Scattered Spider scenario, while the Mustang Panda scenario focused on Windows systems.
In addition to the perfect detection score, Sophos earned the highest possible “Technique”-level rating for 86 of the 90 attack steps, demonstrating the tool’s precision and ability to deliver detailed, high-confidence detections rather than generic alerts.
This achievement underscores Sophos’ commitment to providing robust, enterprise-grade cybersecurity solutions capable of addressing sophisticated, multi-platform threats.