# Picus Red Report

> The top 10 most prevalent MITRE ATT&CK techniques in malware.

Published annually by Picus Labs, the Red Report distills massive malware datasets into a practical top-10 list of adversary techniques. Security teams use it to prioritize detection and validation efforts against the most common real-world behaviors.

- **Category:** [Research & Reports](https://gracker.ai/cyber-resources/research)
- **Website:** https://www.picussecurity.com/red-report
- **Location:** San Francisco, CA, USA
- **Verified:** Yes
- **Last updated:** June 9, 2026

## Frequently asked questions

### What is Picus Red Report?

The Picus Red Report analyzes over a million malware samples annually, mapping millions of observed behaviors to MITRE ATT&CK to rank the techniques attackers use most, such as process injection and defense evasion. A focused, actionable prioritization reference for defenders.

### Where is Picus Red Report based?

Picus Red Report is based in San Francisco, CA, USA.

### What is Picus Red Report listed under on Cyber Resources?

Picus Red Report is listed in the Research & Reports category of Cyber Resources, the curated directory of the cybersecurity marketing and growth ecosystem.