ATT&CKTechniques

Techniques

222 results

ID	Name	Tactics	Sub-techniques	Examples
T1571	Non-Standard Port	Command and Control	0	66
T1572	Protocol Tunneling	Command and Control	0	42
T1573	Encrypted Channel	Command and Control	2	17
T1574	Hijack Execution Flow	Execution Stealth	12	11
T1578	Modify Cloud Compute Infrastructure	Defense Impairment	5	0
T1580	Cloud Infrastructure Discovery	Discovery	0	6
T1583	Acquire Infrastructure	Resource Development	8	9
T1584	Compromise Infrastructure	Resource Development	8	2
T1585	Establish Accounts	Resource Development	3	6
T1586	Compromise Accounts	Resource Development	3	0
T1587	Develop Capabilities	Resource Development	4	3
T1588	Obtain Capabilities	Resource Development	7	0
T1589	Gather Victim Identity Information	Reconnaissance	3	12
T1590	Gather Victim Network Information	Reconnaissance	6	3
T1591	Gather Victim Org Information	Reconnaissance	4	9
T1592	Gather Victim Host Information	Reconnaissance	4	1
T1593	Search Open Websites/Domains	Reconnaissance	3	6
T1594	Search Victim-Owned Websites	Reconnaissance	0	9
T1595	Active Scanning	Reconnaissance	3	1
T1596	Search Open Technical Databases	Reconnaissance	5	2
T1597	Search Closed Sources	Reconnaissance	2	1
T1598	Phishing for Information	Reconnaissance	4	6
T1599	Network Boundary Bridging	Defense Impairment	1	2
T1600	Weaken Encryption	Defense Impairment	2	0
T1601	Modify System Image	Defense Impairment	2	1
T1602	Data from Configuration Repository	Collection	2	0
T1606	Forge Web Credentials	Credential Access	2	0
T1608	Stage Capabilities	Resource Development	6	1
T1609	Container Administration Command	Execution	0	8
T1610	Deploy Container	Execution	0	4
T1611	Escape to Host	Privilege Escalation	0	5
T1612	Build Image on Host	Stealth	0	0
T1613	Container and Resource Discovery	Discovery	0	5
T1614	System Location Discovery	Discovery	1	27
T1615	Group Policy Discovery	Discovery	0	7
T1619	Cloud Storage Object Discovery	Discovery	0	4
T1620	Reflective Code Loading	Stealth	0	32
T1621	Multi-Factor Authentication Request Generation	Credential Access	0	4
T1622	Debugger Evasion	Stealth Discovery	0	26
T1647	Plist File Modification	Defense Impairment	0	2
T1648	Serverless Execution	Execution	0	1
T1649	Steal or Forge Authentication Certificates	Credential Access	0	4
T1650	Acquire Access	Resource Development	0	1
T1651	Cloud Administration Command	Execution	0	4
T1652	Device Driver Discovery	Discovery	0	4
T1653	Power Settings	Persistence	0	3
T1654	Log Enumeration	Discovery	0	10
T1657	Financial Theft	Impact	0	26
T1659	Content Injection	Initial Access Command and Control	0	2
T1665	Hide Infrastructure	Command and Control	0	8

First Previous Page 4 of 5 Next Last

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.