Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| ATT Felismus | Julia Kisielius. (2017, April 25). The Felismus RAT: Powerful Threat, Mysterious Purpose. Retrieved November 17, 2024. |
| ATT Lazarus TTP Evolution | Fernando Martinez. (2021, July 6). Lazarus campaign TTPs and evolution. Retrieved September 22, 2021. |
| ATT QakBot April 2021 | Morrow, D. (2021, April 15). The rise of QakBot. Retrieved September 27, 2021. |
| ATT ScanBox | Blasco, J. (2014, August 28). Scanbox: A Reconnaissance Framework Used with Watering Hole Attacks. Retrieved October 19, 2020. |
| ATT Sidewinder January 2021 | Hegel, T. (2021, January 13). A Global Perspective of the SideWinder APT. Retrieved January 27, 2021. |
| ATT TeamTNT Chimaera September 2020 | AT&T Alien Labs. (2021, September 8). TeamTNT with new campaign aka Chimaera. Retrieved September 22, 2021. |
| ATTACK IQ | Federico Quattrin, Nick Desler, Tin Tam, & Matthew Rutkoske. (2023, March 16). Hiding in Plain Sight: Monitoring and Testing for Living-Off-the-Land Binaries. Retrieved July 15, 2024. |
| ATTACKIQ MUSTANG PANDA TONESHELL March 2023 | Ken Towne, Francis Guibernau. (2023, March 23). Emulating the Politically Motivated Chinese APT Mustang Panda. Retrieved September 10, 2025. |
| AWS Cloud Trail | AWS. (n.d.). update-trail. Retrieved April 15, 2026. |
| AWS Create IAM User | AWS. (n.d.). Creating an IAM User in Your AWS Account. Retrieved January 29, 2020. |
| AWS Describe DB Instances | Amazon Web Services. (n.d.). Retrieved May 28, 2021. |
| AWS DisableAWSServiceAccess | AWS. (n.d.). DisableAWSServiceAccess. Retrieved May 22, 2025. |
| AWS EKS IAM Roles for Service Accounts | Amazon Web Services. (n.d.). IAM roles for service accounts. Retrieved July 14, 2023. |
| AWS Get Bucket ACL | Amazon Web Services. (n.d.). Retrieved May 28, 2021. |
| AWS Get Public Access Block | Amazon Web Services. (n.d.). Retrieved May 28, 2021. |
| AWS GetPasswordPolicy | Amazon Web Services. (n.d.). AWS API GetAccountPasswordPolicy. Retrieved June 8, 2021. |
| AWS Head Bucket | Amazon Web Services. (n.d.). AWS HeadBucket. Retrieved February 14, 2022. |
| AWS IAM Conditions | AWS. (n.d.). IAM JSON policy elements: Condition. Retrieved January 2, 2024. |
| AWS IAM Policies and Permissions | AWS. (n.d.). Policies and permissions in IAM. Retrieved April 1, 2022. |
| AWS Identity Federation | Amazon. (n.d.). Identity Federation in AWS. Retrieved March 13, 2020. |
| AWS Instance Identity Documents | Amazon. (n.d.). Instance identity documents. Retrieved April 2, 2021. |
| AWS Instance Metadata API | AWS. (n.d.). Instance Metadata and User Data. Retrieved July 18, 2019. |
| AWS Instance Profiles | AWS. (n.d.). Using instance profiles. Retrieved February 28, 2024. |
| AWS Lambda Execution Role | AWS. (n.d.). Lambda execution role. Retrieved February 28, 2024. |
| AWS Lambda Redirector | Adam Chester. (2020, February 25). AWS Lambda Redirector. Retrieved July 8, 2022. |
| AWS List Roles | Amazon. (n.d.). List Roles. Retrieved August 11, 2020. |
| AWS List Users | Amazon. (n.d.). List Users. Retrieved August 11, 2020. |
| AWS Organizations | AWS. (n.d.). Terminology and concepts for AWS Organizations. Retrieved September 25, 2024. |
| AWS PassRole | AWS. (n.d.). Granting a user permissions to pass a role to an AWS service. Retrieved July 10, 2023. |
| AWS RE:Inforce Threat Detection 2024 | Ben Fletcher and Steve de Vera. (2024, June). New tactics and techniques for proactive threat detection. Retrieved September 25, 2024. |
| AWS Root User | Amazon. (n.d.). AWS Account Root User. Retrieved April 5, 2021. |
| AWS Secrets Manager | AWS. (n.d.). Retrieve secrets from AWS Secrets Manager. Retrieved September 25, 2023. |
| AWS Storage Lifecycles | AWS. (n.d.). Managing the lifecycle of objects. Retrieved September 25, 2024. |
| AWS System Manager | AWS. (2023, June 2). What is AWS System Manager?. Retrieved June 2, 2023. |
| AWS Systems Manager Run Command | AWS. (n.d.). AWS Systems Manager Run Command. Retrieved March 13, 2023. |
| AWS Temporary Security Credentials | AWS. (n.d.). Requesting temporary security credentials. Retrieved April 1, 2022. |
| AWS Traffic Mirroring | Amazon Web Services. (n.d.). How Traffic Mirroring works. Retrieved March 17, 2022. |
| AWS docs describe volumes | AWS. (n.d.). describe-volumes. Retrieved October 20, 2025. |
| AWS re Inforce Trust Mod | AWS re Inforce. (2024, June). Retrieved April 15, 2026. |
| About UEFI | UEFI Forum. (n.d.). About UEFI Forum. Retrieved January 5, 2016. |
| Abramovsky VSCode Security | Abramovsky, O. (2023, May 16). VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads- PII Exposed, and Backdoors Enabled. Retrieved March 30, 2025. |
| Accenture Dragonfish Jan 2018 | Accenture Security. (2018, January 27). DRAGONFISH DELIVERS NEW FORM OF ELISE MALWARE TARGETING ASEAN DEFENCE MINISTERS’ MEETING AND ASSOCIATES. Retrieved November 17, 2024. |
| Accenture Hogfish April 2018 | Accenture Security. (2018, April 23). Hogfish Redleaves Campaign. Retrieved July 2, 2018. |
| Accenture HyperStack October 2020 | Accenture. (2020, October). Turla uses HyperStack, Carbon, and Kazuar to compromise government entity. Retrieved December 2, 2020. |
| Accenture Lyceum Targets November 2021 | Accenture. (2021, November 9). Who are latest targets of cyber group Lyceum?. Retrieved June 16, 2022. |
| Accenture MUDCARP March 2019 | Accenture iDefense Unit. (2019, March 5). Mudcarp's Focus on Submarine Technologies. Retrieved August 24, 2021. |
| Accenture SNAKEMACKEREL Nov 2018 | Accenture Security. (2018, November 29). SNAKEMACKEREL. Retrieved April 15, 2019. |
| AcidRain JAGS 2022 | Juan Andres Guerrero-Saade and Max van Amerongen, SentinelOne. (2022, March 31). AcidRain | A Modem Wiper Rains Down on Europe. Retrieved March 25, 2024. |
| AcidRain State Department 2022 | Antony J. Blinken, US Department of State. (2022, May 10). Attribution of Russia’s Malicious Cyber Activity Against Ukraine. Retrieved March 25, 2024. |
| Acronis XLoader 2021 | Acronis. (2021, November 26). Trojan-as-a-service: From Formbook to XLoader. Retrieved March 11, 2025. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
