ATT&CKTechniques

Techniques

475 results

ID	Name	Tactics	Examples
T1546.012	Image File Execution Options Injection	Persistence Privilege Escalation	3
T1546.013	PowerShell Profile	Persistence Privilege Escalation	1
T1546.014	Emond	Persistence Privilege Escalation	0
T1546.015	Component Object Model Hijacking	Persistence Privilege Escalation	12
T1546.016	Installer Packages	Persistence Privilege Escalation	5
T1546.017	Udev Rules	Persistence Privilege Escalation	1
T1546.018	Python Startup Hooks	Persistence Privilege Escalation	2
T1547.001	Registry Run Keys / Startup Folder	Persistence Privilege Escalation	261
T1547.002	Authentication Package	Persistence Privilege Escalation	1
T1547.003	Time Providers	Persistence Privilege Escalation	0
T1547.004	Winlogon Helper DLL	Persistence Privilege Escalation	13
T1547.005	Security Support Provider	Persistence Privilege Escalation	3
T1547.006	Kernel Modules and Extensions	Persistence Privilege Escalation	4
T1547.007	Re-opened Applications	Persistence Privilege Escalation	0
T1547.008	LSASS Driver	Persistence Privilege Escalation	2
T1547.009	Shortcut Modification	Persistence Privilege Escalation	29
T1547.010	Port Monitors	Persistence Privilege Escalation	0
T1547.012	Print Processors	Persistence Privilege Escalation	3
T1547.013	XDG Autostart Entries	Persistence Privilege Escalation	7
T1547.014	Active Setup	Persistence Privilege Escalation	1
T1547.015	Login Items	Persistence Privilege Escalation	3
T1548.001	Setuid and Setgid	Privilege Escalation	2
T1548.002	Bypass User Account Control	Privilege Escalation	63
T1548.003	Sudo and Sudo Caching	Privilege Escalation	6
T1548.004	Elevated Execution with Prompt	Privilege Escalation	1
T1548.005	Temporary Elevated Cloud Access	Privilege Escalation	0
T1548.006	TCC Manipulation	Privilege Escalation	1
T1550.001	Application Access Token	Lateral Movement	11
T1550.002	Pass the Hash	Lateral Movement	22
T1550.003	Pass the Ticket	Lateral Movement	6
T1550.004	Web Session Cookie	Lateral Movement	2
T1552.001	Credentials In Files	Credential Access	41
T1552.002	Credentials in Registry	Credential Access	10
T1552.003	Shell History	Credential Access	2
T1552.004	Private Keys	Credential Access	23
T1552.005	Cloud Instance Metadata API	Credential Access	6
T1552.006	Group Policy Preferences	Credential Access	5
T1552.007	Container API	Credential Access	3
T1552.008	Chat Messages	Credential Access	1
T1553.001	Gatekeeper Bypass	Defense Impairment	6
T1553.002	Code Signing	Defense Impairment	89
T1553.003	SIP and Trust Provider Hijacking	Defense Impairment	0
T1553.004	Install Root Certificate	Defense Impairment	5
T1553.005	Mark-of-the-Web Bypass	Defense Impairment	5
T1553.006	Code Signing Policy Modification	Defense Impairment	5
T1555.001	Keychain	Credential Access	12
T1555.002	Securityd Memory	Credential Access	1
T1555.003	Credentials from Web Browsers	Credential Access	89
T1555.004	Windows Credential Manager	Credential Access	14
T1555.005	Password Managers	Credential Access	13

First Previous Page 6 of 10 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.