475 results
| ID | Name | Tactics | Sub-techniques | Examples |
|---|---|---|---|---|
| T1134.003 | Make and Impersonate Token | 0 | 5 | |
| T1134.004 | Parent PID Spoofing | 0 | 4 | |
| T1134.005 | SID-History Injection | 0 | 2 | |
| T1136.001 | Local Account | 0 | 30 | |
| T1136.002 | Domain Account | 0 | 11 | |
| T1136.003 | Cloud Account | 0 | 3 | |
| T1137.001 | Office Template Macros | 0 | 5 | |
| T1137.002 | Office Test | 0 | 1 | |
| T1137.003 | Outlook Forms | 0 | 1 | |
| T1137.004 | Outlook Home Page | 0 | 2 | |
| T1137.005 | Outlook Rules | 0 | 1 | |
| T1137.006 | Add-ins | 0 | 4 | |
| T1176.001 | Browser Extensions | 0 | 7 | |
| T1176.002 | IDE Extensions | 0 | 2 | |
| T1195.001 | Compromise Software Dependencies and Development Tools | 0 | 9 | |
| T1195.002 | Compromise Software Supply Chain | 0 | 14 | |
| T1195.003 | Compromise Hardware Supply Chain | 0 | 0 | |
| T1204.001 | Malicious Link | 0 | 88 | |
| T1204.002 | Malicious File | 0 | 196 | |
| T1204.003 | Malicious Image | 0 | 1 | |
| T1204.004 | Malicious Copy and Paste | 0 | 5 | |
| T1204.005 | Malicious Library | 0 | 1 | |
| T1205.001 | Port Knocking | 0 | 6 | |
| T1205.002 | Socket Filters | 0 | 4 | |
| T1213.001 | Confluence | 0 | 2 | |
| T1213.002 | Sharepoint | 0 | 10 | |
| T1213.003 | Code Repositories | 0 | 10 | |
| T1213.004 | Customer Relationship Management Software | 0 | 1 | |
| T1213.005 | Messaging Applications | 0 | 4 | |
| T1213.006 | Databases | 0 | 12 | |
| T1216.001 | PubPrn | 0 | 1 | |
| T1216.002 | SyncAppvPublishingServer | 0 | 0 | |
| T1218.001 | Compiled HTML File | 0 | 6 | |
| T1218.002 | Control Panel | 0 | 2 | |
| T1218.003 | CMSTP | 0 | 4 | |
| T1218.004 | InstallUtil | 0 | 6 | |
| T1218.005 | Mshta | 0 | 30 | |
| T1218.007 | Msiexec | 0 | 31 | |
| T1218.008 | Odbcconf | 0 | 3 | |
| T1218.009 | Regsvcs/Regasm | 0 | 1 | |
| T1218.010 | Regsvr32 | 0 | 36 | |
| T1218.011 | Rundll32 | 0 | 103 | |
| T1218.012 | Verclsid | 0 | 1 | |
| T1218.013 | Mavinject | 0 | 1 | |
| T1218.014 | MMC | 0 | 2 | |
| T1218.015 | Electron Applications | 0 | 2 | |
| T1219.001 | IDE Tunneling | 0 | 3 | |
| T1219.002 | Remote Desktop Software | 0 | 15 | |
| T1219.003 | Remote Access Hardware | 0 | 0 | |
| T1222.001 | Windows Permissions | 0 | 12 |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.