ATT&CKTechniques

Techniques

475 results

ID	Name	Tactics	Examples
T1555.006	Cloud Secrets Management Stores	Credential Access	9
T1556.001	Domain Controller Authentication	Persistence Defense Impairment Credential Access	2
T1556.002	Password Filter DLL	Persistence Defense Impairment Credential Access	4
T1556.003	Pluggable Authentication Modules	Persistence Defense Impairment Credential Access	2
T1556.004	Network Device Authentication	Persistence Defense Impairment Credential Access	3
T1556.005	Reversible Encryption	Persistence Defense Impairment Credential Access	0
T1556.006	Multi-Factor Authentication	Persistence Defense Impairment Credential Access	4
T1556.007	Hybrid Identity	Persistence Defense Impairment Credential Access	2
T1556.008	Network Provider DLL	Persistence Defense Impairment Credential Access	0
T1556.009	Conditional Access Policies	Persistence Defense Impairment Credential Access	2
T1557.001	Name Resolution Poisoning and SMB Relay	Credential Access Collection	7
T1557.002	ARP Cache Poisoning	Credential Access Collection	2
T1557.003	DHCP Spoofing	Credential Access Collection	0
T1557.004	Evil Twin	Credential Access Collection	1
T1558.001	Golden Ticket	Credential Access	5
T1558.002	Silver Ticket	Credential Access	4
T1558.003	Kerberoasting	Credential Access	12
T1558.004	AS-REP Roasting	Credential Access	1
T1558.005	Ccache Files	Credential Access	1
T1559.001	Component Object Model	Execution	22
T1559.002	Dynamic Data Exchange	Execution	20
T1559.003	XPC Services	Execution	0
T1560.001	Archive via Utility	Collection	86
T1560.002	Archive via Library	Collection	16
T1560.003	Archive via Custom Method	Collection	39
T1561.001	Disk Content Wipe	Impact	17
T1561.002	Disk Structure Wipe	Impact	20
T1563.001	SSH Hijacking	Lateral Movement	1
T1563.002	RDP Hijacking	Lateral Movement	2
T1564.001	Hidden Files and Directories	Stealth	60
T1564.002	Hidden Users	Stealth	3
T1564.003	Hidden Window	Stealth	61
T1564.004	NTFS File Attributes	Stealth	16
T1564.005	Hidden File System	Stealth	6
T1564.006	Run Virtual Instance	Stealth	3
T1564.007	VBA Stomping	Stealth	0
T1564.008	Email Hiding Rules	Stealth	3
T1564.009	Resource Forking	Stealth	2
T1564.010	Process Argument Spoofing	Stealth	2
T1564.011	Ignore Process Interrupts	Stealth	9
T1564.012	File/Path Exclusions	Stealth	1
T1564.013	Bind Mounts	Stealth	1
T1564.014	Extended Attributes	Stealth	0
T1565.001	Stored Data Manipulation	Impact	3
T1565.002	Transmitted Data Manipulation	Impact	5
T1565.003	Runtime Data Manipulation	Impact	1
T1566.001	Spearphishing Attachment	Initial Access	149
T1566.002	Spearphishing Link	Initial Access	86
T1566.003	Spearphishing via Service	Initial Access	16
T1566.004	Spearphishing Voice	Initial Access	2

First Previous Page 7 of 10 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.