ATT&CKTechniques

Techniques

222 results

ID	Name	Tactics	Sub-techniques	Examples
T1102	Web Service	Command and Control	3	50
T1104	Multi-Stage Channels	Command and Control	0	15
T1105	Ingress Tool Transfer	Command and Control	0	520
T1106	Native API	Execution	0	228
T1110	Brute Force	Credential Access	4	25
T1111	Multi-Factor Authentication Interception	Credential Access	0	9
T1112	Modify Registry	Persistence Defense Impairment	0	173
T1113	Screen Capture	Collection	0	171
T1114	Email Collection	Collection	3	6
T1115	Clipboard Data	Collection	0	46
T1119	Automated Collection	Collection	0	75
T1120	Peripheral Device Discovery	Discovery	0	58
T1123	Audio Capture	Collection	0	32
T1124	System Time Discovery	Discovery	0	100
T1125	Video Capture	Collection	0	35
T1127	Trusted Developer Utilities Proxy Execution	Execution Stealth	3	0
T1129	Shared Modules	Execution	0	22
T1132	Data Encoding	Command and Control	2	8
T1133	External Remote Services	Initial Access Persistence	0	43
T1134	Access Token Manipulation	Privilege Escalation Stealth	5	23
T1135	Network Share Discovery	Discovery	0	77
T1136	Create Account	Persistence	3	5
T1137	Office Application Startup	Persistence	6	2
T1140	Deobfuscate/Decode Files or Information	Stealth	0	353
T1176	Software Extensions	Persistence	2	0
T1185	Browser Session Hijacking	Collection	0	16
T1187	Forced Authentication	Credential Access	0	3
T1189	Drive-by Compromise	Initial Access	0	44
T1190	Exploit Public-Facing Application	Initial Access	0	75
T1195	Supply Chain Compromise	Initial Access	3	5
T1197	BITS Jobs	Execution Persistence Stealth	0	13
T1199	Trusted Relationship	Initial Access	0	13
T1200	Hardware Additions	Initial Access	0	1
T1201	Password Policy Discovery	Discovery	0	8
T1202	Indirect Command Execution	Stealth	0	4
T1203	Exploitation for Client Execution	Execution	0	61
T1204	User Execution	Execution	5	5
T1205	Traffic Signaling	Persistence Stealth Command and Control	2	23
T1207	Rogue Domain Controller	Defense Impairment	0	1
T1210	Exploitation of Remote Services	Lateral Movement	0	25
T1211	Exploitation for Stealth	Stealth	0	2
T1212	Exploitation for Credential Access	Credential Access	0	2
T1213	Data from Information Repositories	Collection	6	4
T1216	System Script Proxy Execution	Stealth	2	0
T1217	Browser Information Discovery	Discovery	0	29
T1218	System Binary Proxy Execution	Stealth	14	2
T1219	Remote Access Tools	Command and Control	3	22
T1220	XSL Script Processing	Stealth	0	4
T1221	Template Injection	Stealth	0	12
T1222	File and Directory Permissions Modification	Defense Impairment	2	1

First Previous Page 2 of 5 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.