ATT&CKTechniques

Techniques

475 results

ID	Name	Tactics	Examples
T1001.001	Junk Data	Command and Control	18
T1001.002	Steganography	Command and Control	13
T1001.003	Protocol or Service Impersonation	Command and Control	22
T1003.001	LSASS Memory	Credential Access	79
T1003.002	Security Account Manager	Credential Access	36
T1003.003	NTDS	Credential Access	26
T1003.004	LSA Secrets	Credential Access	19
T1003.005	Cached Domain Credentials	Credential Access	8
T1003.006	DCSync	Credential Access	8
T1003.007	Proc Filesystem	Credential Access	5
T1003.008	/etc/passwd and /etc/shadow	Credential Access	2
T1011.001	Exfiltration Over Bluetooth	Exfiltration	1
T1016.001	Internet Connection Discovery	Discovery	26
T1016.002	Wi-Fi Discovery	Discovery	7
T1020.001	Traffic Duplication	Exfiltration	0
T1021.001	Remote Desktop Protocol	Lateral Movement	63
T1021.002	SMB/Windows Admin Shares	Lateral Movement	65
T1021.003	Distributed Component Object Model	Lateral Movement	3
T1021.004	SSH	Lateral Movement	27
T1021.005	VNC	Lateral Movement	11
T1021.006	Windows Remote Management	Lateral Movement	10
T1021.007	Cloud Services	Lateral Movement	5
T1021.008	Direct Cloud VM Connections	Lateral Movement	0
T1027.001	Binary Padding	Stealth	30
T1027.002	Software Packing	Stealth	103
T1027.003	Steganography	Stealth	31
T1027.004	Compile After Delivery	Stealth	10
T1027.005	Indicator Removal from Tools	Stealth	18
T1027.006	HTML Smuggling	Stealth	3
T1027.007	Dynamic API Resolution	Stealth	20
T1027.008	Stripped Payloads	Stealth	2
T1027.009	Embedded Payloads	Stealth	24
T1027.010	Command Obfuscation	Stealth	70
T1027.011	Fileless Storage	Stealth	31
T1027.012	LNK Icon Smuggling	Stealth	4
T1027.013	Encrypted/Encoded File	Stealth	248
T1027.014	Polymorphic Code	Stealth	1
T1027.015	Compression	Stealth	35
T1027.016	Junk Code Insertion	Stealth	24
T1027.017	SVG Smuggling	Stealth	0
T1027.018	Invisible Unicode	Stealth	1
T1036.001	Invalid Code Signature	Stealth	9
T1036.002	Right-to-Left Override	Stealth	5
T1036.003	Rename Legitimate Utilities	Stealth	11
T1036.004	Masquerade Task or Service	Stealth	93
T1036.005	Match Legitimate Resource Name or Location	Stealth	221
T1036.006	Space after Filename	Stealth	2
T1036.007	Double File Extension	Stealth	5
T1036.008	Masquerade File Type	Stealth	20
T1036.009	Break Process Trees	Stealth	2

Page 1 of 10 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.