ATT&CKTechniques

Techniques

475 results

ID	Name	Tactics	Examples
T1036.010	Masquerade Account Name	Stealth	7
T1036.011	Overwrite Process Arguments	Stealth	1
T1036.012	Browser Fingerprint	Stealth	1
T1037.001	Logon Script (Windows)	Persistence Privilege Escalation	6
T1037.002	Login Hook	Persistence Privilege Escalation	0
T1037.003	Network Logon Script	Persistence Privilege Escalation	0
T1037.004	RC Scripts	Persistence Privilege Escalation	7
T1037.005	Startup Items	Persistence Privilege Escalation	1
T1048.001	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Exfiltration	0
T1048.002	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Exfiltration	8
T1048.003	Exfiltration Over Unencrypted Non-C2 Protocol	Exfiltration	35
T1052.001	Exfiltration over USB	Exfiltration	7
T1053.002	At	Execution Persistence Privilege Escalation	6
T1053.003	Cron	Execution Persistence Privilege Escalation	16
T1053.005	Scheduled Task	Execution Persistence Privilege Escalation	190
T1053.006	Systemd Timers	Execution Persistence Privilege Escalation	2
T1053.007	Container Orchestration Job	Execution Persistence Privilege Escalation	0
T1055.001	Dynamic-link Library Injection	Privilege Escalation Stealth	67
T1055.002	Portable Executable Injection	Privilege Escalation Stealth	15
T1055.003	Thread Execution Hijacking	Privilege Escalation Stealth	4
T1055.004	Asynchronous Procedure Call	Privilege Escalation Stealth	13
T1055.005	Thread Local Storage	Privilege Escalation Stealth	2
T1055.008	Ptrace System Calls	Privilege Escalation Stealth	1
T1055.009	Proc Memory	Privilege Escalation Stealth	1
T1055.011	Extra Window Memory Injection	Privilege Escalation Stealth	2
T1055.012	Process Hollowing	Privilege Escalation Stealth	43
T1055.013	Process Doppelgänging	Privilege Escalation Stealth	3
T1055.014	VDSO Hijacking	Privilege Escalation Stealth	0
T1055.015	ListPlanting	Privilege Escalation Stealth	1
T1056.001	Keylogging	Credential Access Collection	155
T1056.002	GUI Input Capture	Credential Access Collection	15
T1056.003	Web Portal Capture	Credential Access Collection	6
T1056.004	Credential API Hooking	Credential Access Collection	12
T1059.001	PowerShell	Execution	233
T1059.002	AppleScript	Execution	6
T1059.003	Windows Command Shell	Execution	386
T1059.004	Unix Shell	Execution	66
T1059.005	Visual Basic	Execution	131
T1059.006	Python	Execution	63
T1059.007	JavaScript	Execution	75
T1059.008	Network Device CLI	Execution	5
T1059.009	Cloud API	Execution	6
T1059.010	AutoHotKey & AutoIT	Execution	6
T1059.011	Lua	Execution	5
T1059.012	Hypervisor CLI	Execution	4
T1059.013	Container CLI/API	Execution	3
T1069.001	Local Groups	Discovery	32
T1069.002	Domain Groups	Discovery	38
T1069.003	Cloud Groups	Discovery	5
T1070.003	Clear Command History	Stealth	11

First Previous Page 2 of 10 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.