ATT&CKTechniques

Techniques

222 results

ID	Name	Tactics	Sub-techniques	Examples
T1001	Data Obfuscation	Command and Control	3	15
T1003	OS Credential Dumping	Credential Access	8	20
T1005	Data from Local System	Collection	0	230
T1006	Direct Volume Access	Stealth	0	5
T1007	System Service Discovery	Discovery	0	69
T1008	Fallback Channels	Command and Control	0	57
T1010	Application Window Discovery	Discovery	0	37
T1011	Exfiltration Over Other Network Medium	Exfiltration	1	0
T1012	Query Registry	Discovery	0	119
T1014	Rootkit	Stealth	0	32
T1016	System Network Configuration Discovery	Discovery	2	289
T1018	Remote System Discovery	Discovery	0	104
T1020	Automated Exfiltration	Exfiltration	1	31
T1021	Remote Services	Lateral Movement	8	7
T1025	Data from Removable Media	Collection	0	24
T1027	Obfuscated Files or Information	Stealth	18	160
T1029	Scheduled Transfer	Exfiltration	0	18
T1030	Data Transfer Size Limits	Exfiltration	0	21
T1033	System Owner/User Discovery	Discovery	0	244
T1036	Masquerading	Stealth	12	60
T1037	Boot or Logon Initialization Scripts	Persistence Privilege Escalation	5	8
T1039	Data from Network Shared Drive	Collection	0	13
T1040	Network Sniffing	Credential Access Discovery	0	28
T1041	Exfiltration Over C2 Channel	Exfiltration	0	203
T1046	Network Service Discovery	Discovery	0	73
T1047	Windows Management Instrumentation	Execution	0	147
T1048	Exfiltration Over Alternative Protocol	Exfiltration	3	9
T1049	System Network Connections Discovery	Discovery	0	98
T1052	Exfiltration Over Physical Medium	Exfiltration	1	0
T1053	Scheduled Task/Job	Execution Persistence Privilege Escalation	5	2
T1055	Process Injection	Privilege Escalation Stealth	12	87
T1056	Input Capture	Credential Access Collection	4	12
T1057	Process Discovery	Discovery	0	319
T1059	Command and Scripting Interpreter	Execution	13	44
T1068	Exploitation for Privilege Escalation	Privilege Escalation	0	43
T1069	Permission Groups Discovery	Discovery	3	13
T1070	Indicator Removal	Stealth	8	33
T1071	Application Layer Protocol	Command and Control	5	16
T1072	Software Deployment Tools	Execution Lateral Movement	0	10
T1074	Data Staged	Collection	2	9
T1078	Valid Accounts	Initial Access Persistence Privilege Escalation Stealth	4	65
T1080	Taint Shared Content	Lateral Movement	0	12
T1082	System Information Discovery	Discovery	0	427
T1083	File and Directory Discovery	Discovery	0	373
T1087	Account Discovery	Discovery	4	10
T1090	Proxy	Command and Control	4	76
T1091	Replication Through Removable Media	Initial Access Lateral Movement	0	28
T1092	Communication Through Removable Media	Command and Control	0	3
T1095	Non-Application Layer Protocol	Command and Control	0	108
T1098	Account Manipulation	Persistence Privilege Escalation	7	9

Page 1 of 5 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.