MITRE ATTCK Matrix Enterprise ATTCK SECURITM

Куда я попал?

SECURITM это SGRC система, автоматизирующая процессы в службах информационной безопасности. SECURITM помогает построить и управлять ИСПДн, КИИ, ГИС, СМИБ/СУИБ, банковскими системами защиты.
А еще SECURITM это место для обмена опытом и наработками для служб безопасности.

Подробнее

Наш канал

Reconnaissance

10 techniques

T1592

T1594

Search Victim-Owned Websites

T1589

T1596

T1595

T1591

T1590

T1593

T1597

T1598

Resource Development

8 techniques

T1583

T1584

T1586

T1608

T1585

T1588

T1650

Acquire Access

T1587

Initial Access

11 techniques

T1133

External Remote Services

T1091

Replication Through Removable Media

T1195

T1190

Exploit Public-Facing Application

T1659

Content Injection

T1199

Trusted Relationship

T1566

T1078

T1200

Hardware Additions

T1189

Drive-by Compromise

T1669

Wi-Fi Networks

Execution

16 techniques

T1047

Windows Management Instrumentation

T1129

Shared Modules

T1675

ESXi Administration Command

T1053

T1106

Native API

T1610

Deploy Container

T1674

Input Injection

T1059

T1609

Container Administration Command

T1204

T1072

Software Deployment Tools

T1559

T1203

Exploitation for Client Execution

T1569

T1651

Cloud Administration Command

T1648

Serverless Execution

Persistence

23 techniques

T1037

T1543

T1133

External Remote Services

T1547

T1137

T1053

T1176

T1205

T1525

Implant Internal Image

T1112

Modify Registry

T1542

T1554

Compromise Host Software Binary

T1098

T1574

T1078

T1546

T1671

Cloud Application Integration

T1197

BITS Jobs

T1505

T1668

Exclusive Control

T1136

T1653

Power Settings

T1556

Privilege Escalation

14 techniques

T1037

T1543

T1547

T1053

T1055

T1611

Escape to Host

T1548

T1098

T1574

T1078

T1068

Exploitation for Privilege Escalation

T1546

T1134

T1484

Defense Evasion

45 techniques

T1006

Direct Volume Access

T1666

Modify Cloud Resource Hierarchy

T1014

Rootkit

T1578

T1600

T1564

T1202

Indirect Command Execution

T1140

Deobfuscate/Decode Files or Information

T1562

T1036

T1055

T1205

T1218

T1620

Reflective Code Loading

T1550

T1207

Rogue Domain Controller

T1610

Deploy Container

T1112

Modify Registry

T1535

Unused/Unsupported Cloud Regions

T1222

T1548

T1070

T1647

Plist File Modification

T1542

T1612

Build Image on Host

T1497

T1480

T1601

T1574

T1078

T1027

T1599

T1553

T1197

BITS Jobs

T1656

Impersonation

T1221

Template Injection

T1134

T1672

Email Spoofing

T1622

Debugger Evasion

T1484

T1220

XSL Script Processing

T1556

T1216

T1211

Exploitation for Defense Evasion

T1127

Credential Access

17 techniques

T1557

T1003

T1539

Steal Web Session Cookie

T1040

Network Sniffing

T1558

T1555

T1552

T1649

Steal or Forge Authentication Certificates

T1528

Steal Application Access Token

T1606

T1621

Multi-Factor Authentication Request Generation

T1212

Exploitation for Credential Access

T1110

T1187

Forced Authentication

T1056

T1111

Multi-Factor Authentication Interception

T1556

Discovery

33 techniques

T1033

System Owner/User Discovery

T1613

Container and Resource Discovery

T1069

T1615

Group Policy Discovery

T1652

Device Driver Discovery

T1007

System Service Discovery

T1040

Network Sniffing

T1135

Network Share Discovery

T1120

Peripheral Device Discovery

T1082

System Information Discovery

T1010

Application Window Discovery

T1580

Cloud Infrastructure Discovery

T1217

Browser Information Discovery

T1673

Virtual Machine Discovery

T1016

T1087

T1482

Domain Trust Discovery

T1083

File and Directory Discovery

T1049

System Network Connections Discovery

T1497

T1619

Cloud Storage Object Discovery

T1654

Log Enumeration

T1057

Process Discovery

T1201

Password Policy Discovery

T1012

Query Registry

T1614

T1526

Cloud Service Discovery

T1018

Remote System Discovery

T1046

Network Service Discovery

T1518

T1538

Cloud Service Dashboard

T1622

Debugger Evasion

T1124

System Time Discovery

Lateral Movement

9 techniques

T1080

Taint Shared Content

T1091

Replication Through Removable Media

T1550

T1021

T1563

T1072

Software Deployment Tools

T1210

Exploitation of Remote Services

T1534

Internal Spearphishing

T1570

Lateral Tool Transfer

Collection

17 techniques

T1113

Screen Capture

T1557

T1602

T1123

Audio Capture

T1114

T1025

Data from Removable Media

T1119

Automated Collection

T1115

Clipboard Data

T1530

Data from Cloud Storage

T1005

Data from Local System

T1560

T1185

Browser Session Hijacking

T1125

Video Capture

T1074

T1039

Data from Network Shared Drive

T1056

T1213

Command and Control

18 techniques

T1071

T1219

T1659

Content Injection

T1205

T1572

Protocol Tunneling

T1092

Communication Through Removable Media

T1090

T1568

T1102

T1104

Multi-Stage Channels

T1001

T1571

Non-Standard Port

T1573

T1095

Non-Application Layer Protocol

T1132

T1105

Ingress Tool Transfer

T1665

Hide Infrastructure

T1008

Fallback Channels

Exfiltration

9 techniques

T1567

T1029

Scheduled Transfer

T1011

T1020

T1041

Exfiltration Over C2 Channel

T1048

T1030

Data Transfer Size Limits

T1537

Transfer Data to Cloud Account

T1052

Impact

15 techniques

T1561

T1489

Service Stop

T1491

T1657

Financial Theft

T1565

T1531

Account Access Removal

T1486

Data Encrypted for Impact

T1667

Email Bombing

T1499

T1496

T1485

T1498

T1495

Firmware Corruption

T1490

Inhibit System Recovery

T1529

System Shutdown/Reboot

Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.

Техники