Techniques
How an adversary achieves a tactical goal.
227 entries (top-level; sub-techniques are listed on each technique).
- T1102 Web Service +3 sub
- T1104 Multi-Stage Channels
- T1105 Ingress Tool Transfer
- T1106 Native API
- T1110 Brute Force +4 sub
- T1111 Multi-Factor Authentication Interception
- T1112 Modify Registry
- T1113 Screen Capture
- T1114 Email Collection +3 sub
- T1115 Clipboard Data
- T1119 Automated Collection
- T1120 Peripheral Device Discovery
- T1123 Audio Capture
- T1124 System Time Discovery
- T1125 Video Capture
- T1127 Trusted Developer Utilities Proxy Execution +3 sub
- T1129 Shared Modules
- T1132 Data Encoding +2 sub
- T1133 External Remote Services
- T1134 Access Token Manipulation +5 sub
- T1135 Network Share Discovery
- T1136 Create Account +3 sub
- T1137 Office Application Startup +6 sub
- T1140 Deobfuscate/Decode Files or Information
- T1176 Software Extensions +2 sub
- T1185 Browser Session Hijacking
- T1187 Forced Authentication
- T1189 Drive-by Compromise
- T1190 Exploit Public-Facing Application
- T1195 Supply Chain Compromise +3 sub
- T1197 BITS Jobs
- T1199 Trusted Relationship
- T1200 Hardware Additions
- T1201 Password Policy Discovery
- T1202 Indirect Command Execution
- T1203 Exploitation for Client Execution
- T1204 User Execution +5 sub
- T1205 Traffic Signaling +2 sub
- T1207 Rogue Domain Controller
- T1210 Exploitation of Remote Services
- T1211 Exploitation for Stealth
- T1212 Exploitation for Credential Access
- T1213 Data from Information Repositories +6 sub
- T1216 System Script Proxy Execution +2 sub
- T1217 Browser Information Discovery
- T1218 System Binary Proxy Execution +14 sub
- T1219 Remote Access Tools +3 sub
- T1220 XSL Script Processing
- T1221 Template Injection
- T1222 File and Directory Permissions Modification +2 sub