475 results
| ID | Name | Tactics | Sub-techniques | Examples |
|---|---|---|---|---|
| T1222.002 | Linux and Mac Permissions | 0 | 15 | |
| T1480.001 | Environmental Keying | 0 | 10 | |
| T1480.002 | Mutual Exclusion | 0 | 20 | |
| T1484.001 | Group Policy Modification | 0 | 16 | |
| T1484.002 | Trust Modification | 0 | 4 | |
| T1485.001 | Lifecycle-Triggered Deletion | 0 | 0 | |
| T1491.001 | Internal Defacement | 0 | 15 | |
| T1491.002 | External Defacement | 0 | 2 | |
| T1496.001 | Compute Hijacking | 0 | 14 | |
| T1496.002 | Bandwidth Hijacking | 0 | 0 | |
| T1496.003 | SMS Pumping | 0 | 0 | |
| T1496.004 | Cloud Service Hijacking | 0 | 0 | |
| T1497.001 | System Checks | 0 | 70 | |
| T1497.002 | User Activity Based Checks | 0 | 7 | |
| T1497.003 | Time Based Checks | 0 | 49 | |
| T1498.001 | Direct Network Flood | 0 | 0 | |
| T1498.002 | Reflection Amplification | 0 | 0 | |
| T1499.001 | OS Exhaustion Flood | 0 | 0 | |
| T1499.002 | Service Exhaustion Flood | 0 | 0 | |
| T1499.003 | Application Exhaustion Flood | 0 | 0 | |
| T1499.004 | Application or System Exploitation | 0 | 1 | |
| T1505.001 | SQL Stored Procedures | 0 | 2 | |
| T1505.002 | Transport Agent | 0 | 1 | |
| T1505.003 | Web Shell | 0 | 66 | |
| T1505.004 | IIS Components | 0 | 5 | |
| T1505.005 | Terminal Services DLL | 0 | 0 | |
| T1505.006 | vSphere Installation Bundles | 0 | 2 | |
| T1518.001 | Security Software Discovery | 0 | 141 | |
| T1518.002 | Backup Software Discovery | 0 | 1 | |
| T1542.001 | System Firmware | 0 | 3 | |
| T1542.002 | Component Firmware | 0 | 2 | |
| T1542.003 | Bootkit | 0 | 9 | |
| T1542.004 | ROMMONkit | 0 | 0 | |
| T1542.005 | TFTP Boot | 0 | 0 | |
| T1543.001 | Launch Agent | 0 | 23 | |
| T1543.002 | Systemd Service | 0 | 16 | |
| T1543.003 | Windows Service | 0 | 140 | |
| T1543.004 | Launch Daemon | 0 | 11 | |
| T1543.005 | Container Service | 0 | 0 | |
| T1546.001 | Change Default File Association | 0 | 2 | |
| T1546.002 | Screensaver | 0 | 1 | |
| T1546.003 | Windows Management Instrumentation Event Subscription | 0 | 25 | |
| T1546.004 | Unix Shell Configuration Modification | 0 | 7 | |
| T1546.005 | Trap | 0 | 0 | |
| T1546.006 | LC_LOAD_DYLIB Addition | 0 | 0 | |
| T1546.007 | Netsh Helper DLL | 0 | 1 | |
| T1546.008 | Accessibility Features | 0 | 7 | |
| T1546.009 | AppCert DLLs | 0 | 1 | |
| T1546.010 | AppInit DLLs | 0 | 4 | |
| T1546.011 | Application Shimming | 0 | 4 |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.