ATT&CKReferences

References

Reports, blog posts and papers that MITRE cites as evidence.

3865 references

CitationDescription
Microsoft HTML Help May 2018Microsoft. (2018, May 30). Microsoft HTML Help 1.4. Retrieved October 3, 2018.
Microsoft Hacking Team BreachMicrosoft Secure Team. (2016, June 1). Hacking Team Breach: A Cyber Jurassic Park. Retrieved March 5, 2019.
Microsoft Holmium June 2020Microsoft Threat Protection Intelligence Team. (2020, June 18). Inside Microsoft Threat Protection: Mapping attack chains from cloud to endpoint. Retrieved June 22, 2020.
Microsoft Hook OverviewMicrosoft. (n.d.). Hooks Overview. Retrieved December 12, 2017.
Microsoft ICMPMicrosoft. (n.d.). Internet Control Message Protocol (ICMP) Basics. Retrieved December 1, 2014.
Microsoft IIS Modules Overview 2007Microsoft. (2007, November 24). IIS Modules Overview. Retrieved June 17, 2021.
Microsoft ISAPI Extension All Incoming 2017Microsoft. (2017, June 16). Intercepting All Incoming IIS Requests. Retrieved June 3, 2021.
Microsoft ISAPI Extension Overview 2017Microsoft. (2017, June 16). ISAPI Extension Overview. Retrieved June 3, 2021.
Microsoft ISAPI Filter Overview 2017Microsoft. (2017, June 16). ISAPI Filter Overview. Retrieved June 3, 2021.
Microsoft Identity Platform Access 2019Cai, S., Flores, J., de Guzman, C., et. al.. (2019, August 27). Microsoft identity platform access tokens. Retrieved October 4, 2019.
Microsoft Identity Platform Protocols May 2019Microsoft. (n.d.). Retrieved September 12, 2019.
Microsoft Impersonation and EWS in ExchangeMicrosoft. (2022, September 13). Impersonation and EWS in Exchange. Retrieved July 10, 2023.
Microsoft Implementing CPLM. (n.d.). Implementing Control Panel Items. Retrieved January 18, 2018.
Microsoft Inbox RulesMicrosoft. (n.d.). Manage email messages by using rules. Retrieved June 11, 2021.
Microsoft Installation ProceduresMicrosoft. (2021, January 7). Installation Procedure Tables Group. Retrieved December 27, 2023.
Microsoft Internal Solorigate Investigation BlogMSRC Team. (2021, February 18). Microsoft Internal Solorigate Investigation – Final Update. Retrieved May 14, 2021.
Microsoft Intro Print ProcessorsMicrosoft. (2023, June 26). Introduction to print processors. Retrieved September 27, 2023.
Microsoft Iran Cyber 2023Microsoft Threat Intelligence. (2023, May 2). Iran turning to cyber-enabled influence operations for greater effect. Retrieved May 21, 2024.
Microsoft Iranian Threat Actor Trends November 2021MSTIC. (2021, November 16). Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021. Retrieved January 12, 2023.
Microsoft JScript 2007Microsoft. (2007, August 15). The World of JScript, JavaScript, ECMAScript …. Retrieved June 23, 2020.
Microsoft KasidetManuel, J. and Plantado, R.. (2015, August 9). Win32/Kasidet. Retrieved March 24, 2016.
Microsoft Kerberos Preauth 2014Sanyal, M.. (2014, March 18). Kerberos Pre-Authentication: Why It Should Not Be Disabled. Retrieved August 25, 2020.
Microsoft KlistMicrosoft. (2021, March 3). klist. Retrieved October 14, 2021.
Microsoft KnuckleTouch 2024Microsoft. (2024, February 14). Backdoor:Win64/KnuckleTouch.A!dha. Retrieved January 6, 2025.
Microsoft Lamin Sept 2017Microsoft. (2009, May 17). Backdoor:Win32/Lamin.A. Retrieved September 6, 2018.
Microsoft LearnMicrosoft. (2021, April 6). 2.5 ExtraData. Retrieved September 30, 2022.
Microsoft Learn ClickOnceMicrosoft. (2023, September 14). ClickOnce security and deployment. Retrieved September 9, 2024.
Microsoft List View ControlsMicrosoft. (2021, May 25). About List-View Controls. Retrieved January 4, 2022.
Microsoft Local Accounts Feb 2019Microsoft. (2018, December 9). Local Accounts. Retrieved February 11, 2019.
Microsoft Log4j Vulnerability Exploitation December 2021Microsoft Threat Intelligence. (2021, December 11). Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability. Retrieved December 7, 2023.
Microsoft MOF May 2018Satran, M. (2018, May 30). Managed Object Format (MOF). Retrieved January 24, 2020.
Microsoft MSBuild Inline Tasks 2017Microsoft. (2017, September 21). MSBuild inline tasks. Retrieved March 5, 2021.
Microsoft Mail Flow Rules 2023Microsoft. (2023, February 22). Mail flow rules (transport rules) in Exchange Online. Retrieved March 13, 2023.
Microsoft Malicious OAuth Applications 2022Microsoft Threat Intelligence. (2022, September 22). Malicious OAuth applications abuse cloud email services to spread spam. Retrieved March 20, 2025.
Microsoft Managing WebDAV SecurityMicrosoft. (n.d.). Managing WebDAV Security (IIS 6.0). Retrieved November 17, 2024.
Microsoft March 2025 XCSSETMicrosoft Threat Intelligence. (2025, March 11). New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects. Retrieved April 2, 2025.
Microsoft Midnight Blizzard Replay AttackMicrosoft Threat Intelligence. (2023, June 21). Credential Attacks. Retrieved September 12, 2024.
Microsoft Moonstone Sleet 2024Microsoft Threat Intelligence. (2024, May 28). Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks. Retrieved August 26, 2024.
Microsoft MsolroleMicrosoft. (n.d.). Get-MsolRole. Retrieved October 6, 2019.
Microsoft MutexesMicrosoft. (2022, March 11). Mutexes. Retrieved September 19, 2024.
Microsoft NEODYMIUM Dec 2016Microsoft. (2016, December 14). Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe. Retrieved November 27, 2017.
Microsoft NETMicrosoft. (n.d.). What is .NET Framework?. Retrieved March 15, 2020.
Microsoft NICKEL December 2021MSTIC. (2021, December 6). NICKEL targeting government organizations across Latin America and Europe. Retrieved March 18, 2022.
Microsoft NRPC Dec 2017Microsoft. (2017, December 1). MS-NRPC - Netlogon Remote Protocol. Retrieved December 6, 2017.
Microsoft NTFS File Attributes Aug 2010Hughes, J. (2010, August 25). NTFS File Attributes. Retrieved March 21, 2018.
Microsoft NetMicrosoft. (2017, February 14). Net Commands On Windows Operating Systems. Retrieved March 19, 2020.
Microsoft Net GroupMicrosoft. (2016, August 31). Net group. Retrieved August 5, 2024.
Microsoft Net LocalgroupMicrosoft. (2016, August 31). Net Localgroup. Retrieved August 5, 2024.
Microsoft Net UtilityMicrosoft. (2006, October 18). Net.exe Utility. Retrieved September 22, 2015.
Microsoft New-InboxRuleMicrosoft. (n.d.). New-InboxRule. Retrieved June 7, 2021.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.