Reports, blog posts and papers that MITRE cites as evidence.
3865 references
| Citation | Description |
|---|---|
| GitHub Diamorphine | Mello, V. (2018, March 8). Diamorphine - LMK rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64). Retrieved April 9, 2018. |
| GitHub GhostPack Certificates | HarmJ0y. (2018, August 22). SharpDPAPI - Certificates. Retrieved August 2, 2022. |
| GitHub Gitrob | Michael Henriksen. (2018, June 9). Gitrob: Putting the Open Source in OSINT. Retrieved October 19, 2020. |
| GitHub Hashjacking | Dunning, J. (2016, August 1). Hashjacking. Retrieved December 21, 2017. |
| GitHub Inveigh | Robertson, K. (2015, April 2). Inveigh: Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool. Retrieved March 11, 2019. |
| GitHub Invoke-Obfuscation | Bohannon, D.. (2017, March 13). Invoke-Obfuscation - PowerShell Obfuscator. Retrieved June 18, 2017. |
| GitHub Invoke-PSImage | Adams, B. (2017, December 17). Invoke-PSImage. Retrieved April 10, 2018. |
| GitHub LaZagne Dec 2018 | Zanni, A. (n.d.). The LaZagne Project !!!. Retrieved December 14, 2018. |
| GitHub MailSniper | Bullock, B., . (2018, November 20). MailSniper. Retrieved October 4, 2019. |
| GitHub Mauraena | Orrù, M., Trotta, G.. (2019, September 11). Muraena. Retrieved October 14, 2019. |
| GitHub Mimikatz kerberos Module | Deply, B., Le Toux, V.. (2016, June 5). module ~ kerberos. Retrieved March 17, 2020. |
| GitHub Mimikatz lsadump Module | Deply, B., Le Toux, V. (2016, June 5). module ~ lsadump. Retrieved August 7, 2017. |
| GitHub Mimikittenz July 2016 | Jamieson O'Reilly (putterpanda). (2016, July 4). mimikittenz. Retrieved June 20, 2019. |
| GitHub NBNSpoof | Nomex. (2014, February 7). NBNSpoof. Retrieved November 17, 2017. |
| GitHub Neo-reGeorg 2019 | L-Codes. (2019). Neo-reGeorg. Retrieved December 4, 2024. |
| GitHub Office 365 User Enumeration | gremwell. (2020, March 24). Office 365 User Enumeration. Retrieved May 27, 2022. |
| GitHub OmerYa Invisi-Shell | Yair, O. (2019, August 19). Invisi-Shell. Retrieved June 24, 2020. |
| GitHub PSImage | Barrett Adams . (n.d.). Invoke-PSImage . Retrieved September 30, 2022. |
| GitHub Pacu | Rhino Security Labs. (2019, August 22). Pacu. Retrieved October 17, 2019. |
| GitHub PcShare 2014 | LiveMirror. (2014, September 17). PcShare. Retrieved October 11, 2022. |
| GitHub Phishery | Ryan Hanson. (2016, September 24). phishery. Retrieved October 23, 2020. |
| GitHub PoshC2 | Nettitude. (2018, July 23). Python Server for PoshC2. Retrieved April 23, 2019. |
| GitHub PowerSploit May 2012 | PowerShellMafia. (2012, May 26). PowerSploit - A PowerShell Post-Exploitation Framework. Retrieved February 6, 2018. |
| GitHub Pupy | Nicolas Verdier. (n.d.). Retrieved January 29, 2018. |
| GitHub QuasarRAT | MaxXor. (n.d.). QuasarRAT. Retrieved July 10, 2018. |
| GitHub Raindance | Stringer, M.. (2018, November 21). RainDance. Retrieved October 6, 2019. |
| GitHub Reptile | Augusto, I. (2018, March 8). Reptile - LMK Linux rootkit. Retrieved April 9, 2018. |
| GitHub Responder | Gaffie, L. (2016, August 25). Responder. Retrieved November 17, 2017. |
| GitHub Rubeus March 2023 | Harmj0y. (n.d.). Rubeus. Retrieved March 29, 2023. |
| GitHub SILENTTRINITY March 2022 | Salvati, M (2019, August 6). SILENTTRINITY. Retrieved March 23, 2022. |
| GitHub SILENTTRINITY Modules July 2019 | Salvati, M. (2019, August 6). SILENTTRINITY Modules. Retrieved March 24, 2022. |
| GitHub SIP POC Sept 2017 | Graeber, M. (2017, September 14). PoCSubjectInterfacePackage. Retrieved January 31, 2018. |
| GitHub Security Lab GitHub Actions Security 2021 | Jaroslav Lobačevski. (2021, August 3). Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests. Retrieved May 22, 2025. |
| GitHub Security Labs GitHub Actions Security Part 2 2021 | Jaroslav Lobačevski. (2021, August 4). Keeping your GitHub Actions and workflows secure Part 2: Untrusted input. Retrieved May 22, 2025. |
| GitHub SigFlip opensource tool | Mohamed El Azaar (med0x2e), TimWhite (timwhitez). (2023, August 28). GitHub SigFlip. Retrieved September 30, 2025. |
| GitHub Sliver C2 | BishopFox. (n.d.). Sliver. Retrieved September 15, 2021. |
| GitHub Sliver C2 DNS | BishopFox. (n.d.). Sliver DNS C2 . Retrieved September 15, 2021. |
| GitHub Sliver Download | BishopFox. (n.d.). Sliver Download. Retrieved September 16, 2021. |
| GitHub Sliver Encryption | BishopFox. (n.d.). Sliver Transport Encryption. Retrieved September 16, 2021. |
| GitHub Sliver File System August 2021 | BishopFox. (2021, August 18). Sliver Filesystem. Retrieved September 22, 2021. |
| GitHub Sliver HTTP | BishopFox. (n.d.). Sliver HTTP(S) C2. Retrieved September 16, 2021. |
| GitHub Sliver Ifconfig | BishopFox. (n.d.). Sliver Ifconfig. Retrieved September 16, 2021. |
| GitHub Sliver Netstat | BishopFox. (n.d.). Sliver Netstat. Retrieved September 16, 2021. |
| GitHub Sliver Screen | BishopFox. (n.d.). Sliver Screenshot. Retrieved September 16, 2021. |
| GitHub Sliver Upload | BishopFox. (n.d.). Sliver Upload. Retrieved September 16, 2021. |
| GitHub Turla Driver Loader | TDL Project. (2016, February 4). TDL (Turla Driver Loader). Retrieved April 22, 2021. |
| GitHub Ultimate AppLocker Bypass List | Moe, O. (2018, March 1). Ultimate AppLocker Bypass List. Retrieved April 10, 2018. |
| GitHub reGeorg 2016 | xl7dev. (2016). reGeorg-master. Retrieved December 3, 2024. |
| GitHub truffleHog | Dylan Ayrey. (2016, December 31). truffleHog. Retrieved October 19, 2020. |
| Github AD-Pentest-Script | Twi1ight. (2015, July 11). AD-Pentest-Script - wmiexec.vbs. Retrieved June 29, 2017. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
