ATT&CKTechniques

Techniques

475 results

ID	Name	Tactics	Examples
T1070.004	File Deletion	Stealth	311
T1070.005	Network Share Connection Removal	Stealth	5
T1070.006	Timestomp	Stealth	58
T1070.007	Clear Network Connection History and Configurations	Stealth	4
T1070.008	Clear Mailbox Data	Stealth	5
T1070.009	Clear Persistence	Stealth	15
T1070.010	Relocate Malware	Stealth	1
T1071.001	Web Protocols	Command and Control	422
T1071.002	File Transfer Protocols	Command and Control	27
T1071.003	Mail Protocols	Command and Control	26
T1071.004	DNS	Command and Control	55
T1071.005	Publish/Subscribe Protocols	Command and Control	1
T1074.001	Local Data Staging	Collection	136
T1074.002	Remote Data Staging	Collection	14
T1078.001	Default Accounts	Initial Access Persistence Privilege Escalation Stealth	7
T1078.002	Domain Accounts	Initial Access Persistence Privilege Escalation Stealth	35
T1078.003	Local Accounts	Initial Access Persistence Privilege Escalation Stealth	21
T1078.004	Cloud Accounts	Initial Access Persistence Privilege Escalation Stealth	21
T1087.001	Local Account	Discovery	65
T1087.002	Domain Account	Discovery	61
T1087.003	Email Account	Discovery	15
T1087.004	Cloud Account	Discovery	7
T1090.001	Internal Proxy	Command and Control	35
T1090.002	External Proxy	Command and Control	23
T1090.003	Multi-hop Proxy	Command and Control	43
T1090.004	Domain Fronting	Command and Control	5
T1098.001	Additional Cloud Credentials	Persistence Privilege Escalation	4
T1098.002	Additional Email Delegate Permissions	Persistence Privilege Escalation	5
T1098.003	Additional Cloud Roles	Persistence Privilege Escalation	5
T1098.004	SSH Authorized Keys	Persistence Privilege Escalation	7
T1098.005	Device Registration	Persistence Privilege Escalation	4
T1098.006	Additional Container Cluster Roles	Persistence Privilege Escalation	0
T1098.007	Additional Local or Domain Groups	Persistence Privilege Escalation	11
T1102.001	Dead Drop Resolver	Command and Control	27
T1102.002	Bidirectional Communication	Command and Control	56
T1102.003	One-Way Communication	Command and Control	9
T1110.001	Password Guessing	Credential Access	12
T1110.002	Password Cracking	Credential Access	7
T1110.003	Password Spraying	Credential Access	17
T1110.004	Credential Stuffing	Credential Access	3
T1114.001	Local Email Collection	Collection	20
T1114.002	Remote Email Collection	Collection	20
T1114.003	Email Forwarding Rule	Collection	5
T1127.001	MSBuild	Execution Stealth	5
T1127.002	ClickOnce	Execution Stealth	0
T1127.003	JamPlus	Execution Stealth	0
T1132.001	Standard Encoding	Command and Control	126
T1132.002	Non-Standard Encoding	Command and Control	18
T1134.001	Token Impersonation/Theft	Privilege Escalation Stealth	20
T1134.002	Create Process with Token	Privilege Escalation Stealth	13

First Previous Page 3 of 10 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.