MITRE ATT&CK - Threat Intelligence

Browse 100 MITRE ATT&CK techniques. Map threats to the ATT&CK framework.

MITRE ATT&CK Techniques (100 total)

T1566 - Phishing · 0T1041 - Exfiltration Over C2 Channel · 0T1071 - Application Layer Protocol · 0T1059 - Command and Scripting Interpreter · 0T1566.002 - Spearphishing Link · 0T1567 - Exfiltration Over Web Service · 0T1195 - Supply Chain Compromise · 0T1078 - Valid Accounts · 0T1190 - Exploit Public-Facing Application · 0T1068 - Exploitation for Privilege Escalation · 0T1003 - OS Credential Dumping · 0T1059.001 - PowerShell · 0T1021 - Remote Services · 0T1486 - Data Encrypted for Impact · 0T1566.001 - Spearphishing Attachment · 0T1203 - Exploitation for Client Execution · 0T1055 - Process Injection · 0T1110 - Brute Force · 0T1053 - Scheduled Task/Job · 0T1574 - Hijack Execution Flow · 0T1505.003 - Web Shell · 0T1547 - Boot Or Logon Autostart Execution · 0T1056 - Input Capture · 0T1105 - Ingress Tool Transfer · 0T1059.007 - JavaScript · 0T1027 - Obfuscated Files Or Information · 0T1036 - Masquerading · 0T1071.001 - Web Protocols · 0T1499 - Endpoint Denial of Service · 0T1059.003 - Windows Command Shell · 0T1059.006 - Python · 0T1567.002 - Exfiltration to Cloud Storage · 0T1059.005 - Visual Basic · 0T1543.003 - Windows Service · 0T1047 - Windows Management Instrumentation · 0T1059.004 - Unix Shell · 0T1485 - Data Destruction · 0T1189 - Drive-by Compromise · 0T1555.003 - Credentials From Web Browsers · 0T1562.001 - Disable Or Modify Tools · 0T1113 - Screen Capture · 0T1547.001 - Registry Run Keys / Startup Folder · 0T1136 - Create Account · 0T1056.001 - Keylogging · 0T1566.003 - Spearphishing Via Service · 0T1566 - Spearphishing Attachment · 0T1021.001 - Remote Desktop Protocol · 0T1082 - System Information Discovery · 0T1046 - Network Service Discovery · 0T1133 - External Remote Services · 0T1566 - Spearphishing · 0T1071.004 - DNS · 0T1090 - Proxy · 0T1218.005 - Mshta · 0T1557 - Adversary-in-the-Middle · 0T1112 - Modify Registry · 0T1552.001 - Credentials In Files · 0T1115 - Clipboard Data · 0T1070 - Indicator Removal · 0T1562 - Impair Defenses · 0T1055.012 - Process Hollowing · 0T1021.004 - SSH · 0Go · 0T1497 - Virtualization/Sandbox Evasion · 0T1548.002 - Bypass User Account Control · 0T1218.011 - Rundll32 · 0T1574.001 - DLL · 0Lateral Movement · 0T1490 - Inhibit System Recovery · 0Steganography · 0T1204 - User Execution · 0T1572 - Protocol Tunneling · 0T1053 - Scheduled Task · 0T1204.002 - Malicious File · 0Remote Desktop Protocol · 0T1033 - System Owner/User Discovery · 0T1070.001 - Clear Windows Event Logs · 0T1496 - Resource Hijacking · 0Web Shell · 0Cross-Site Scripting (xss) · 0T1014 - Rootkit · 0T1053.005 - Scheduled Task · 0T1134 - Access Token Manipulation · 0T1057 - Process Discovery · 0T1083 - File And Directory Discovery · 0T1091 - Replication Through Removable Media · 0T1125 - Video Capture · 0T1021.002 - SMB/Windows Admin Shares · 0T1027 - Obfuscated/Compressed Files and Information · 0Lua · 0T1005 - Data From Local System · 0T1123 - Audio Capture · 0T1218 - System Binary Proxy Execution · 0Reconnaissance · 0Spearphishing · 0T1132 - Data Encoding · 0T1543 - Create Or Modify System Process · 0T1003.001 - Lsass Memory · 0T1087 - Account Discovery · 0T1098 - Account Manipulation · 0