CINXE.COM
Matrix - Mobile | MITRE ATT&CK®
<!DOCTYPE html> <html lang='en'> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-62667723-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-62667723-1'); </script> <meta name="google-site-verification" content="2oJKLqNN62z6AOCb0A0IXGtbQuj-lev5YPAHFF_cbHQ"/> <meta charset='utf-8'> <meta name='viewport' content='width=device-width, initial-scale=1,shrink-to-fit=no'> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel='shortcut icon' href='/theme/favicon.ico' type='image/x-icon'> <title>Matrix - Mobile | MITRE ATT&CK®</title> <!-- USWDS CSS --> <!-- Bootstrap CSS --> <link rel='stylesheet' href='/theme/style/bootstrap.min.css' /> <link rel='stylesheet' href='/theme/style/bootstrap-tourist.css' /> <link rel='stylesheet' href='/theme/style/bootstrap-select.min.css' /> <!-- Fontawesome CSS --> <link rel="stylesheet" href="/theme/style/fontawesome-6.5.1/css/fontawesome.min.css"/> <link rel="stylesheet" href="/theme/style/fontawesome-6.5.1/css/brands.min.css"/> <link rel="stylesheet" href="/theme/style/fontawesome-6.5.1/css/solid.min.css"/> <link rel="stylesheet" type="text/css" href="/theme/style.min.css?6689c2db"> </head> <body> <div class="container-fluid attack-website-wrapper d-flex flex-column h-100"> <div class="row sticky-top flex-grow-0 flex-shrink-1"> <!-- header elements --> <header class="col px-0"> <nav class='navbar navbar-expand-lg navbar-dark position-static'> <a class='navbar-brand' href='/'><img src="/theme/images/mitre_attack_logo.png" class="attack-logo"></a> <button class='navbar-toggler' type='button' data-toggle='collapse' data-target='#navbarCollapse' aria-controls='navbarCollapse' aria-expanded='false' aria-label='Toggle navigation'> <span class='navbar-toggler-icon'></span> </button> <div class='collapse navbar-collapse' id='navbarCollapse'> <ul class='nav nav-tabs ml-auto'> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/matrices/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Matrices</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/matrices/enterprise/">Enterprise</a> <a class="dropdown-item" href="/matrices/mobile/">Mobile</a> <a class="dropdown-item" href="/matrices/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/tactics/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Tactics</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/tactics/enterprise/">Enterprise</a> <a class="dropdown-item" href="/tactics/mobile/">Mobile</a> <a class="dropdown-item" href="/tactics/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/techniques/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Techniques</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/techniques/enterprise/">Enterprise</a> <a class="dropdown-item" href="/techniques/mobile/">Mobile</a> <a class="dropdown-item" href="/techniques/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/datasources" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Defenses</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/datasources">Data Sources</a> <div class="dropright dropdown"> <a class="dropdown-item dropdown-toggle" href="/mitigations/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Mitigations</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/mitigations/enterprise/">Enterprise</a> <a class="dropdown-item" href="/mitigations/mobile/">Mobile</a> <a class="dropdown-item" href="/mitigations/ics/">ICS</a> </div> </div> <a class="dropdown-item" href="/assets">Assets</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/groups" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>CTI</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/groups">Groups</a> <a class="dropdown-item" href="/software">Software</a> <a class="dropdown-item" href="/campaigns">Campaigns</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/resources/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Resources</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/resources/">Get Started</a> <a class="dropdown-item" href="/resources/learn-more-about-attack/">Learn More about ATT&CK</a> <a class="dropdown-item" href="/resources/attackcon/">ATT&CKcon</a> <a class="dropdown-item" href="/resources/attack-data-and-tools/">ATT&CK Data & Tools</a> <a class="dropdown-item" href="/resources/faq/">FAQ</a> <a class="dropdown-item" href="/resources/engage-with-attack/contact/">Engage with ATT&CK</a> <a class="dropdown-item" href="/resources/versions/">Version History</a> <a class="dropdown-item" href="/resources/legal-and-branding/">Legal & Branding</a> </div> </li> <li class="nav-item"> <a href="/resources/engage-with-attack/benefactors/" class="nav-link" ><b>Benefactors</b></a> </li> <li class="nav-item"> <a href="https://medium.com/mitre-attack/" target="_blank" class="nav-link"> <b>Blog</b> <img src="/theme/images/external-site.svg" alt="External site" class="external-icon" /> </a> </li> <li class="nav-item"> <button id="search-button" class="btn search-button">Search <div id="search-icon" class="icon-button search-icon"></div></button> </li> </ul> </div> </nav> </header> </div> <div class="row flex-grow-0 flex-shrink-1"> <!-- banner elements --> <div class="col px-0"> <!-- don't edit or remove the line below even though it's commented out, it gets parsed and replaced by the versioning feature --> <!-- !versions banner! --> <div class="container-fluid banner-message"> Reminder: the TAXII 2.0 server will be <a href='https://medium.com/mitre-attack/introducing-taxii-2-1-and-a-fond-farewell-to-taxii-2-0-d9fca6ce4c58'>retiring on December 18</a>. Please switch to the <a href='https://github.com/mitre-attack/attack-workbench-taxii-server/blob/main/docs/USAGE.md'>TAXII 2.1 server</a> to ensure uninterrupted service. </div> </div> </div> <div class="row flex-grow-1 flex-shrink-0"> <!-- main content elements --> <!--start-indexing-for-search--> <div class="sidebar nav sticky-top flex-column pr-0 pt-4 pb-3 pl-3" id="v-tab" role="tablist" aria-orientation="vertical"> <div class="resizer" id="resizer"></div> <!--stop-indexing-for-search--> <div id="sidebars"></div> <!--start-indexing-for-search--> </div> <div class="tab-content col-xl-9 pt-4" id="v-tabContent"> <div class="tab-pane fade show active" id="v-attckmatrix" role="tabpanel" aria-labelledby="v-attckmatrix-tab"> <div class="row"> <div class="col-md-9"> <ol class="breadcrumb mx-0 px-1"> <li class="breadcrumb-item"><a href="/">Home</a></li> <li class="breadcrumb-item"><a href="/matrices/">Matrices</a></li> <li class="breadcrumb-item"><a href="/matrices/mobile/">Mobile</a></li> <li class="breadcrumb-item">Mobile</li> </ol> </div> </div> <div class="tab-pane fade show active" id="v-attckmatrix" role="tabpanel" aria-labelledby="v-attckmatrix-tab"> <div class="matrix-container p-3"> <div class="row"> <div class="col-md-9"> <h1>Mobile Matrix</h1> <p> Below are the tactics and techniques representing the MITRE ATT&CK<sup>®</sup> Matrix for Mobile. The Matrix covers techniques involving device access and network-based effects that can be used by adversaries without device access. The Matrix contains information for the following platforms: <a href="/matrices/mobile/android">Android</a>, <a href="/matrices/mobile/ios">iOS</a>. </p> </div> <div class="matrix-border col-md-3"> <div class="col py-2"> <!-- only show navigator link if it's defined in the config --> <div class="row p-2"> <a href="https://mitre-attack.github.io/attack-navigator/" target="_blank">View on the ATT&CK<sup>®</sup> Navigator <img src="/theme/images/external-site-dark.jpeg" width="10"></a> </div> <div class="row p-2"> <div class="version-button live"> <div class="live"> <a data-toggle="tooltip" data-placement="bottom" title="Permalink to this version of the matrix" href="/versions/v16/matrices/mobile/" data-test-ignore="true">Version Permalink</a> </div> <div class="permalink"> <a data-toggle="tooltip" data-placement="bottom" title="Go to the live version of the matrix" href="/versions/v16/matrices/mobile/" data-test-ignore="true">Live Version</a><!--do not change this line without also changing versions.py--> </div> </div> </div> </div> </div> </div> </div> <div class="pb-3"> <div id="tour-matrix-container"> <div class="matrix-controls"> <div class="btn-toolbar" role="toolbar" aria-label="matrix controls"> <div class="btn-group mr-2" role="group"> <div class="btn-group" role="group"> <button class="btn btn-default dropdown-toggle" id="layout-options" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" data-selected_layout="side">layout: side</button> <div class="dropdown-menu" aria-labelledby="layout-options"> <a class="dropdown-item layout-button side active" href="#" onclick="showSideMatrix()"> side </a> <a class="dropdown-item layout-button flat" href="#" onclick="showFlatMatrix(); tour_layout_clicked() "> flat </a> </div> </div> </div> <div class="btn-group mr-2" role="group"> <button type="button" class="btn btn-default" onclick="toggleAllMatrixSubTechniques(true)">show sub-techniques</button> <button type="button" class="btn btn-default" onclick="toggleAllMatrixSubTechniques(false)">hide sub-techniques</button> </div> <!-- no help button on index page --> <div class="btn-group" role="group"> <button type="button" class="btn btn-default" onclick="start_tour()">help</button> </div> </div> </div> <div id="layouts-content"> <div class="matrix-type side"> <div class="matrix-container p-3"> <div class="scroll-indicator-group"> <div class="scroll-indicator left"> <div class="cover"></div> </div> <div class="overflow-x-auto matrix-scroll-box pb-3"> <table class="matrix side"> <thead> <tr> <td class="tactic name"><a href="/tactics/TA0027" data-toggle="tooltip" data-placement="top" title="TA0027">Initial Access</a></td> <td class="tactic name"><a href="/tactics/TA0041" data-toggle="tooltip" data-placement="top" title="TA0041">Execution</a></td> <td class="tactic name"><a href="/tactics/TA0028" data-toggle="tooltip" data-placement="top" title="TA0028">Persistence</a></td> <td class="tactic name"><a href="/tactics/TA0029" data-toggle="tooltip" data-placement="top" title="TA0029">Privilege Escalation</a></td> <td class="tactic name"><a href="/tactics/TA0030" data-toggle="tooltip" data-placement="top" title="TA0030">Defense Evasion</a></td> <td class="tactic name"><a href="/tactics/TA0031" data-toggle="tooltip" data-placement="top" title="TA0031">Credential Access</a></td> <td class="tactic name"><a href="/tactics/TA0032" data-toggle="tooltip" data-placement="top" title="TA0032">Discovery</a></td> <td class="tactic name"><a href="/tactics/TA0033" data-toggle="tooltip" data-placement="top" title="TA0033">Lateral Movement</a></td> <td class="tactic name"><a href="/tactics/TA0035" data-toggle="tooltip" data-placement="top" title="TA0035">Collection</a></td> <td class="tactic name"><a href="/tactics/TA0037" data-toggle="tooltip" data-placement="top" title="TA0037">Command and Control</a></td> <td class="tactic name"><a href="/tactics/TA0036" data-toggle="tooltip" data-placement="top" title="TA0036">Exfiltration</a></td> <td class="tactic name"><a href="/tactics/TA0034" data-toggle="tooltip" data-placement="top" title="TA0034">Impact</a></td> </tr> <tr> <td class="tactic count"> 7 techniques </td> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 7 techniques </td> <td class="tactic count"> 3 techniques </td> <td class="tactic count"> 16 techniques </td> <td class="tactic count"> 5 techniques </td> <td class="tactic count"> 8 techniques </td> <td class="tactic count"> 2 techniques </td> <td class="tactic count"> 13 techniques </td> <td class="tactic count"> 9 techniques </td> <td class="tactic count"> 2 techniques </td> <td class="tactic count"> 10 techniques </td> </tr> </thead> <tbody> <tr> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258"> <a href="/techniques/T1661" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258" title="T1661">Application Versioning</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--fd339382-bfec-4bf0-8d47-1caedc9e7e57"> <a href="/techniques/T1456" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--fd339382-bfec-4bf0-8d47-1caedc9e7e57" title="T1456">Drive-By Compromise</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--fd339382-bfec-4bf0-8d47-1caedc9e7e57"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--6ecbc2eb-e85a-440a-ab68-4d98f8d56fbe"> <a href="/techniques/T1664" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--6ecbc2eb-e85a-440a-ab68-4d98f8d56fbe" title="T1664">Exploitation for Initial Access</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--6ecbc2eb-e85a-440a-ab68-4d98f8d56fbe"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--dfe29258-ce59-421c-9dee-e85cb9fa90cd"> <a href="/techniques/T1461" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--dfe29258-ce59-421c-9dee-e85cb9fa90cd" title="T1461">Lockscreen Bypass</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--dfe29258-ce59-421c-9dee-e85cb9fa90cd"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--defc1257-4db1-4fb3-8ef5-bb77f63146df"> <a href="/techniques/T1660" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--defc1257-4db1-4fb3-8ef5-bb77f63146df" title="T1660">Phishing</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--defc1257-4db1-4fb3-8ef5-bb77f63146df"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d"> <a href="/techniques/T1458" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d" title="T1458">Replication Through Removable Media</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad"> <a href="/techniques/T1474" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad" title="T1474">Supply Chain Compromise <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad" onclick="toggleMatrixSubTechniques('x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6', 'attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--7827ced0-95e7-4d05-bdcf-0d8f2d37a3d3"> <a href="/techniques/T1474/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--7827ced0-95e7-4d05-bdcf-0d8f2d37a3d3" title="T1474.001">Compromise Software Dependencies and Development Tools</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--c08366bb-8d11-4921-853f-f0a3b6a2a1da"> <a href="/techniques/T1474/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--c08366bb-8d11-4921-853f-f0a3b6a2a1da" title="T1474.002">Compromise Hardware Supply Chain</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--9558a84e-2d5e-4872-918e-d847494a8ffc"> <a href="/techniques/T1474/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--9558a84e-2d5e-4872-918e-d847494a8ffc" title="T1474.003">Compromise Software Supply Chain</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c"> <a href="/techniques/T1623" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c" title="T1623">Command and Scripting Interpreter <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756', 'attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--693cdbff-ea73-49c6-ac3f-91e7285c31d1"> <a href="/techniques/T1623/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--693cdbff-ea73-49c6-ac3f-91e7285c31d1" title="T1623.001">Unix Shell</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--5abfc5e6-3c56-49e7-ad72-502d01acf28b"> <a href="/techniques/T1658" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--5abfc5e6-3c56-49e7-ad72-502d01acf28b" title="T1658">Exploitation for Client Execution</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--5abfc5e6-3c56-49e7-ad72-502d01acf28b"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb"> <a href="/techniques/T1575" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb" title="T1575">Native API</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d"> <a href="/techniques/T1603" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d" title="T1603">Scheduled Task/Job</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--46d818a5-67fa-4585-a7fc-ecf15376c8d5"> <a href="/techniques/T1398" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--46d818a5-67fa-4585-a7fc-ecf15376c8d5" title="T1398">Boot or Logon Initialization Scripts</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--46d818a5-67fa-4585-a7fc-ecf15376c8d5"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d3bc5020-f6a2-41c0-8ccb-5e563101b60c"> <a href="/techniques/T1577" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d3bc5020-f6a2-41c0-8ccb-5e563101b60c" title="T1577">Compromise Application Executable</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d3bc5020-f6a2-41c0-8ccb-5e563101b60c"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--4f14e30b-8b57-4a7b-9093-2c0778ea99cf"> <a href="/techniques/T1645" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--4f14e30b-8b57-4a7b-9093-2c0778ea99cf" title="T1645">Compromise Client Software Binary</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--4f14e30b-8b57-4a7b-9093-2c0778ea99cf"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14"> <a href="/techniques/T1624" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14" title="T1624">Event Triggered Execution <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14" onclick="toggleMatrixSubTechniques('x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54', 'attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--3775a580-a1d1-46c4-8147-c614a715f2e9"> <a href="/techniques/T1624/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--3775a580-a1d1-46c4-8147-c614a715f2e9" title="T1624.001">Broadcast Receivers</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e"> <a href="/techniques/T1541" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e" title="T1541">Foreground Persistence</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd"> <a href="/techniques/T1625" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd" title="T1625">Hijack Execution Flow <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd" onclick="toggleMatrixSubTechniques('x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54', 'attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--c6e17ca2-08b5-4379-9786-89bd05241831"> <a href="/techniques/T1625/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--c6e17ca2-08b5-4379-9786-89bd05241831" title="T1625.001">System Runtime API Hijacking</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d"> <a href="/techniques/T1603" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d" title="T1603">Scheduled Task/Job</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3"> <a href="/techniques/T1626" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3" title="T1626">Abuse Elevation Control Mechanism <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8', 'attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--9c049d7b-c92a-4733-9381-27e2bd2ccadc"> <a href="/techniques/T1626/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--9c049d7b-c92a-4733-9381-27e2bd2ccadc" title="T1626.001">Device Administrator Permissions</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--351c0927-2fc1-4a2c-ad84-cbbee7eb8172"> <a href="/techniques/T1404" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--351c0927-2fc1-4a2c-ad84-cbbee7eb8172" title="T1404">Exploitation for Privilege Escalation</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--351c0927-2fc1-4a2c-ad84-cbbee7eb8172"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <a href="/techniques/T1631" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" title="T1631">Process Injection <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8', 'attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee"> <a href="/techniques/T1631/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee" title="T1631.001">Ptrace System Calls</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258"> <a href="/techniques/T1661" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258" title="T1661">Application Versioning</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6c49d50f-494d-4150-b774-a655022d20a6"> <a href="/techniques/T1407" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6c49d50f-494d-4150-b774-a655022d20a6" title="T1407">Download New Code at Runtime</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6c49d50f-494d-4150-b774-a655022d20a6"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286"> <a href="/techniques/T1627" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286" title="T1627">Execution Guardrails <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--498e7b81-238d-404c-aa5e-332904d63286');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--e422b6fa-4739-46b9-992e-82f1b350c780"> <a href="/techniques/T1627/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--e422b6fa-4739-46b9-992e-82f1b350c780" title="T1627.001">Geofencing</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e"> <a href="/techniques/T1541" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e" title="T1541">Foreground Persistence</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f"> <a href="/techniques/T1628" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f" title="T1628">Hide Artifacts <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f05fc151-aa62-47e3-ae57-2d1b23d64bf6"> <a href="/techniques/T1628/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f05fc151-aa62-47e3-ae57-2d1b23d64bf6" title="T1628.001">Suppress Application Icon</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--24a77e53-0751-46fc-b207-99378fb35c08"> <a href="/techniques/T1628/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--24a77e53-0751-46fc-b207-99378fb35c08" title="T1628.002">User Evasion</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ea132c68-b518-4478-ae8d-1763cda26ee3"> <a href="/techniques/T1628/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ea132c68-b518-4478-ae8d-1763cda26ee3" title="T1628.003">Conceal Multimedia Files</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ccde43e4-78f9-4f32-b401-c081e7db71ea"> <a href="/techniques/T1617" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ccde43e4-78f9-4f32-b401-c081e7db71ea" title="T1617">Hooking</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ccde43e4-78f9-4f32-b401-c081e7db71ea"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a"> <a href="/techniques/T1629" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a" title="T1629">Impair Defenses <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--dc01774a-d1c1-45fb-b506-0a5d1d6593d9"> <a href="/techniques/T1629/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--dc01774a-d1c1-45fb-b506-0a5d1d6593d9" title="T1629.001">Prevent Application Removal</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--acf8fd2a-dc98-43b4-8d37-64e10728e591"> <a href="/techniques/T1629/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--acf8fd2a-dc98-43b4-8d37-64e10728e591" title="T1629.002">Device Lockout</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--2aa78dfd-cb6f-4c70-9408-137cfd96be49"> <a href="/techniques/T1629/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--2aa78dfd-cb6f-4c70-9408-137cfd96be49" title="T1629.003">Disable or Modify Tools</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d"> <a href="/techniques/T1630" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d" title="T1630">Indicator Removal on Host <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0cdd66ad-26ac-4338-a764-4972a1e17ee3"> <a href="/techniques/T1630/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0cdd66ad-26ac-4338-a764-4972a1e17ee3" title="T1630.001">Uninstall Malicious Application</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ab7400b7-3476-4776-9545-ef3fa373de63"> <a href="/techniques/T1630/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ab7400b7-3476-4776-9545-ef3fa373de63" title="T1630.002">File Deletion</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--a91262d5-b9ff-463f-b8d2-12e4ea1eb3c9"> <a href="/techniques/T1630/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--a91262d5-b9ff-463f-b8d2-12e4ea1eb3c9" title="T1630.003">Disguise Root/Jailbreak Indicators</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62"> <a href="/techniques/T1516" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62" title="T1516">Input Injection</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc"> <a href="/techniques/T1655" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc" title="T1655">Masquerading <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--114fed8b-7eed-4136-8b9c-411c5c7fff4b"> <a href="/techniques/T1655/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--114fed8b-7eed-4136-8b9c-411c5c7fff4b" title="T1655.001">Match Legitimate Name or Location</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb"> <a href="/techniques/T1575" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb" title="T1575">Native API</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a"> <a href="/techniques/T1406" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a" title="T1406">Obfuscated Files or Information <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fa801609-ca8e-415e-815e-65f3826ff4df"> <a href="/techniques/T1406/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fa801609-ca8e-415e-815e-65f3826ff4df" title="T1406.001">Steganography</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--51636761-2e35-44bf-9e56-e337adf97174"> <a href="/techniques/T1406/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--51636761-2e35-44bf-9e56-e337adf97174" title="T1406.002">Software Packing</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <a href="/techniques/T1631" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" title="T1631">Process Injection <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee"> <a href="/techniques/T1631/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee" title="T1631.001">Ptrace System Calls</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--5ca3c7ec-55b2-4587-9376-cf6c96f8047a"> <a href="/techniques/T1604" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--5ca3c7ec-55b2-4587-9376-cf6c96f8047a" title="T1604">Proxy Through Victim</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--5ca3c7ec-55b2-4587-9376-cf6c96f8047a"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1"> <a href="/techniques/T1632" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1" title="T1632">Subvert Trust Controls <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fcb11f06-ce0e-490b-bcc1-04a1623579f0"> <a href="/techniques/T1632/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fcb11f06-ce0e-490b-bcc1-04a1623579f0" title="T1632.001">Code Signing Policy Modification</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f"> <a href="/techniques/T1633" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f" title="T1633">Virtualization/Sandbox Evasion <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6ffad4be-bfe0-424f-abde-4d9a84a800ad"> <a href="/techniques/T1633/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6ffad4be-bfe0-424f-abde-4d9a84a800ad" title="T1633.001">System Checks</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2"> <a href="/techniques/T1517" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2" title="T1517">Access Notifications</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692"> <a href="/techniques/T1414" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692" title="T1414">Clipboard Data</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3"> <a href="/techniques/T1634" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3" title="T1634">Credentials from Password Store <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10', 'attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--8605a0ec-b44a-4e98-a7fc-87d4bd3acb66"> <a href="/techniques/T1634/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--8605a0ec-b44a-4e98-a7fc-87d4bd3acb66" title="T1634.001">Keychain</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <a href="/techniques/T1417" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" title="T1417">Input Capture <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10', 'attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47"> <a href="/techniques/T1417/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47" title="T1417.001">Keylogging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512"> <a href="/techniques/T1417/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512" title="T1417.002">GUI Input Capture</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce"> <a href="/techniques/T1635" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce" title="T1635">Steal Application Access Token <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10', 'attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--789ef15a-34d9-4b32-a779-8cbbc9eb32f5"> <a href="/techniques/T1635/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--789ef15a-34d9-4b32-a779-8cbbc9eb32f5" title="T1635.001">URI Hijacking</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--cf28ca46-1fd3-46b4-b1f6-ec0b72361848"> <a href="/techniques/T1420" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--cf28ca46-1fd3-46b4-b1f6-ec0b72361848" title="T1420">File and Directory Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--cf28ca46-1fd3-46b4-b1f6-ec0b72361848"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <a href="/techniques/T1430" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" title="T1430">Location Tracking <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1', 'attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f"> <a href="/techniques/T1430/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f" title="T1430.001">Remote Device Management Services</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7"> <a href="/techniques/T1430/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7" title="T1430.002">Impersonate SS7 Nodes</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--2de38279-043e-47e8-aaad-1b07af6d0790"> <a href="/techniques/T1423" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--2de38279-043e-47e8-aaad-1b07af6d0790" title="T1423">Network Service Scanning</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--2de38279-043e-47e8-aaad-1b07af6d0790"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1b51f5bc-b97a-498a-8dbd-bc6b1901bf19"> <a href="/techniques/T1424" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1b51f5bc-b97a-498a-8dbd-bc6b1901bf19" title="T1424">Process Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1b51f5bc-b97a-498a-8dbd-bc6b1901bf19"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2"> <a href="/techniques/T1418" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2" title="T1418">Software Discovery <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1', 'attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1d44f529-6fe6-489f-8a01-6261ac43f05e"> <a href="/techniques/T1418/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1d44f529-6fe6-489f-8a01-6261ac43f05e" title="T1418.001">Security Software Discovery</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--e2ea7f6b-8d4f-49c3-819d-660530d12b77"> <a href="/techniques/T1426" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--e2ea7f6b-8d4f-49c3-819d-660530d12b77" title="T1426">System Information Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--e2ea7f6b-8d4f-49c3-819d-660530d12b77"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd"> <a href="/techniques/T1422" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd" title="T1422">System Network Configuration Discovery <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1', 'attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--45a5fe76-eda3-4d40-8f22-c186efd6278d"> <a href="/techniques/T1422/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--45a5fe76-eda3-4d40-8f22-c186efd6278d" title="T1422.001">Internet Connection Discovery</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--be63612f-a48f-44f2-a7a6-1763509fcf80"> <a href="/techniques/T1422/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--be63612f-a48f-44f2-a7a6-1763509fcf80" title="T1422.002">Wi-Fi Discovery</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--dd818ea5-adf5-41c7-93b5-f3b839a219fb"> <a href="/techniques/T1421" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--dd818ea5-adf5-41c7-93b5-f3b839a219fb" title="T1421">System Network Connections Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--dd818ea5-adf5-41c7-93b5-f3b839a219fb"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--22379609-a99f-4a01-bd7e-70f3e105859d"> <a href="/techniques/T1428" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--22379609-a99f-4a01-bd7e-70f3e105859d" title="T1428">Exploitation of Remote Services</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--22379609-a99f-4a01-bd7e-70f3e105859d"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d"> <a href="/techniques/T1458" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d" title="T1458">Replication Through Removable Media</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2"> <a href="/techniques/T1517" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2" title="T1517">Access Notifications</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--08e22979-d320-48ed-8711-e7bf94aabb13"> <a href="/techniques/T1638" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--08e22979-d320-48ed-8711-e7bf94aabb13" title="T1638">Adversary-in-the-Middle</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--08e22979-d320-48ed-8711-e7bf94aabb13"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e3b936a4-6321-4172-9114-038a866362ec"> <a href="/techniques/T1532" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e3b936a4-6321-4172-9114-038a866362ec" title="T1532">Archive Collected Data</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e3b936a4-6321-4172-9114-038a866362ec"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--6683aa0c-d98a-4f5b-ac57-ca7e9934a760"> <a href="/techniques/T1429" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--6683aa0c-d98a-4f5b-ac57-ca7e9934a760" title="T1429">Audio Capture</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--6683aa0c-d98a-4f5b-ac57-ca7e9934a760"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> <a href="/techniques/T1616" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69" title="T1616">Call Control</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692"> <a href="/techniques/T1414" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692" title="T1414">Clipboard Data</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e1c912a9-e305-434b-9172-8a6ce3ec9c4a"> <a href="/techniques/T1533" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e1c912a9-e305-434b-9172-8a6ce3ec9c4a" title="T1533">Data from Local System</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e1c912a9-e305-434b-9172-8a6ce3ec9c4a"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <a href="/techniques/T1417" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" title="T1417">Input Capture <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba', 'attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47"> <a href="/techniques/T1417/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47" title="T1417.001">Keylogging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512"> <a href="/techniques/T1417/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512" title="T1417.002">GUI Input Capture</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <a href="/techniques/T1430" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" title="T1430">Location Tracking <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba', 'attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f"> <a href="/techniques/T1430/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f" title="T1430.001">Remote Device Management Services</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7"> <a href="/techniques/T1430/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7" title="T1430.002">Impersonate SS7 Nodes</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" id="tour-side-technique" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e"> <a href="/techniques/T1636" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e" title="T1636">Protected User Data <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e sidebar--tour" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba', 'attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e'); tour_technique_clicked();"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td" id="tour-side-subtechniques" > <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e subtechniques--tour"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a9fa0d30-a8ff-45bf-922e-7720da0b7922"> <a href="/techniques/T1636/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a9fa0d30-a8ff-45bf-922e-7720da0b7922" title="T1636.001">Calendar Entries</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--1d1b1558-c833-482e-aabb-d07ef6eae63d"> <a href="/techniques/T1636/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--1d1b1558-c833-482e-aabb-d07ef6eae63d" title="T1636.002">Call Log</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e0b9ecb8-a7d1-43c7-aa30-8e19c6a92c86"> <a href="/techniques/T1636/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e0b9ecb8-a7d1-43c7-aa30-8e19c6a92c86" title="T1636.003">Contact List</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c6421411-ae61-42bb-9098-73fddb315002"> <a href="/techniques/T1636/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c6421411-ae61-42bb-9098-73fddb315002" title="T1636.004">SMS Messages</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--73c26732-6422-4081-8b63-6d0ae93d449e"> <a href="/techniques/T1513" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--73c26732-6422-4081-8b63-6d0ae93d449e" title="T1513">Screen Capture</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--73c26732-6422-4081-8b63-6d0ae93d449e"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--702055ac-4e54-4ae9-9527-e23a38e0b160"> <a href="/techniques/T1409" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--702055ac-4e54-4ae9-9527-e23a38e0b160" title="T1409">Stored Application Data</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--702055ac-4e54-4ae9-9527-e23a38e0b160"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--d8940e76-f9c1-4912-bea6-e21c251370b6"> <a href="/techniques/T1512" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--d8940e76-f9c1-4912-bea6-e21c251370b6" title="T1512">Video Capture</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--d8940e76-f9c1-4912-bea6-e21c251370b6"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673"> <a href="/techniques/T1437" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673" title="T1437">Application Layer Protocol <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2282a98b-5049-4f61-9381-55baca7c1add"> <a href="/techniques/T1437/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2282a98b-5049-4f61-9381-55baca7c1add" title="T1437.001">Web Protocols</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> <a href="/techniques/T1616" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69" title="T1616">Call Control</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26"> <a href="/techniques/T1637" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26" title="T1637">Dynamic Resolution <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--fd211238-f767-4599-8c0d-9dca36624626"> <a href="/techniques/T1637/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--fd211238-f767-4599-8c0d-9dca36624626" title="T1637.001">Domain Generation Algorithms</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84"> <a href="/techniques/T1521" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84" title="T1521">Encrypted Channel <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--bb4387ab-7a51-468b-bf5f-a9a8612f0303"> <a href="/techniques/T1521/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--bb4387ab-7a51-468b-bf5f-a9a8612f0303" title="T1521.001">Symmetric Cryptography</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--16d73b64-5681-4ea0-9af4-4ad86f7c96e8"> <a href="/techniques/T1521/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--16d73b64-5681-4ea0-9af4-4ad86f7c96e8" title="T1521.002">Asymmetric Cryptography</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--dfafc230-5465-4993-8dc5-f51fa9fec002"> <a href="/techniques/T1521/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--dfafc230-5465-4993-8dc5-f51fa9fec002" title="T1521.003">SSL Pinning</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2bb20118-e6c0-41dc-a07c-283ea4dd0fb8"> <a href="/techniques/T1544" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2bb20118-e6c0-41dc-a07c-283ea4dd0fb8" title="T1544">Ingress Tool Transfer</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2bb20118-e6c0-41dc-a07c-283ea4dd0fb8"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--948a447c-d783-4ba0-8516-a64140fcacd5"> <a href="/techniques/T1509" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--948a447c-d783-4ba0-8516-a64140fcacd5" title="T1509">Non-Standard Port</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--948a447c-d783-4ba0-8516-a64140fcacd5"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ec4c4baa-026f-43e8-8f56-58c36f3162dd"> <a href="/techniques/T1644" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ec4c4baa-026f-43e8-8f56-58c36f3162dd" title="T1644">Out of Band Data</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ec4c4baa-026f-43e8-8f56-58c36f3162dd"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--0b761f2b-197a-40f2-b100-8152cb957c0c"> <a href="/techniques/T1663" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--0b761f2b-197a-40f2-b100-8152cb957c0c" title="T1663">Remote Access Software</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--0b761f2b-197a-40f2-b100-8152cb957c0c"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380"> <a href="/techniques/T1481" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380" title="T1481">Web Service <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--986f80f7-ff0e-4f48-87bd-0394814bbce5"> <a href="/techniques/T1481/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--986f80f7-ff0e-4f48-87bd-0394814bbce5" title="T1481.001">Dead Drop Resolver</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--939808a7-121d-467a-b028-4441ee8b7cee"> <a href="/techniques/T1481/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--939808a7-121d-467a-b028-4441ee8b7cee" title="T1481.002">Bidirectional Communication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--d916f176-a1ca-4a78-9fdd-4058bc28162e"> <a href="/techniques/T1481/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--d916f176-a1ca-4a78-9fdd-4058bc28162e" title="T1481.003">One-Way Communication</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d"> <a href="/techniques/T1639" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d" title="T1639">Exfiltration Over Alternative Protocol <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981', 'attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--37047267-3e56-453c-833e-d92b68118120"> <a href="/techniques/T1639/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--37047267-3e56-453c-833e-d92b68118120" title="T1639.001">Exfiltration Over Unencrypted Non-C2 Protocol</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--32063d7f-0a39-440d-a4a3-2694488f96cc"> <a href="/techniques/T1646" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--32063d7f-0a39-440d-a4a3-2694488f96cc" title="T1646">Exfiltration Over C2 Channel</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--32063d7f-0a39-440d-a4a3-2694488f96cc"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table"> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--e2c2249a-eb82-4614-8dd4-9c514dde65e2"> <a href="/techniques/T1640" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--e2c2249a-eb82-4614-8dd4-9c514dde65e2" title="T1640">Account Access Removal</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--e2c2249a-eb82-4614-8dd4-9c514dde65e2"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> <a href="/techniques/T1616" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69" title="T1616">Call Control</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--9ef14445-6f35-4ed0-a042-5024f13a9242"> <a href="/techniques/T1662" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--9ef14445-6f35-4ed0-a042-5024f13a9242" title="T1662">Data Destruction</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--9ef14445-6f35-4ed0-a042-5024f13a9242"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d9e88203-2b5d-405f-a406-2933b1e3d7e4"> <a href="/techniques/T1471" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d9e88203-2b5d-405f-a406-2933b1e3d7e4" title="T1471">Data Encrypted for Impact</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d9e88203-2b5d-405f-a406-2933b1e3d7e4"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36"> <a href="/techniques/T1641" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36" title="T1641">Data Manipulation <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e', 'attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--74e6003f-c7f4-4047-983b-708cc19b96b6"> <a href="/techniques/T1641/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--74e6003f-c7f4-4047-983b-708cc19b96b6" title="T1641.001">Transmitted Data Manipulation</a> </div> </div> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--eb6cf439-1bcb-4d10-bc68-1eed844ed7b3"> <a href="/techniques/T1642" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--eb6cf439-1bcb-4d10-bc68-1eed844ed7b3" title="T1642">Endpoint Denial of Service</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--eb6cf439-1bcb-4d10-bc68-1eed844ed7b3"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--a8e971b8-8dc7-4514-8249-ae95427ec467"> <a href="/techniques/T1643" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--a8e971b8-8dc7-4514-8249-ae95427ec467" title="T1643">Generate Traffic from Victim</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--a8e971b8-8dc7-4514-8249-ae95427ec467"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62"> <a href="/techniques/T1516" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62" title="T1516">Input Injection</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d2e112dc-f6d4-488d-b8df-ecbfb57a0a2d"> <a href="/techniques/T1464" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d2e112dc-f6d4-488d-b8df-ecbfb57a0a2d" title="T1464">Network Denial of Service</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d2e112dc-f6d4-488d-b8df-ecbfb57a0a2d"> </div> </td> </tr> <!-- tour technique is scheduled task under privilege escalation --> <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--b327a9c0-e709-495c-aa6e-00b042136e2b"> <a href="/techniques/T1582" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--b327a9c0-e709-495c-aa6e-00b042136e2b" title="T1582">SMS Control</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--b327a9c0-e709-495c-aa6e-00b042136e2b"> </div> </td> </tr> </table> </td> </tr> </tbody> </table> </div> <div class="scroll-indicator right"> <div class="cover"></div> </div> </div> <!-- TODO: Re-enable this once we figure out how to show the last modified timestamp of the latest domain release, not the Matrix object itself <div class="timestamp deemphasis text-center pt-3">Last modified: 06 April 2022</div> --> </div> </div> <div class="matrix-type flat d-none"> <div class="matrix-container p-3"> <div class="scroll-indicator-group"> <div class="scroll-indicator left"> <div class="cover"></div> </div> <div class="overflow-x-auto matrix-scroll-box pb-3"> <table class="matrix flat"> <thead> <tr> <td class="tactic name"><a href="/tactics/TA0027" data-toggle="tooltip" data-placement="top" title="TA0027">Initial Access</a></td> <td class="tactic name"><a href="/tactics/TA0041" data-toggle="tooltip" data-placement="top" title="TA0041">Execution</a></td> <td class="tactic name"><a href="/tactics/TA0028" data-toggle="tooltip" data-placement="top" title="TA0028">Persistence</a></td> <td class="tactic name"><a href="/tactics/TA0029" data-toggle="tooltip" data-placement="top" title="TA0029">Privilege Escalation</a></td> <td class="tactic name"><a href="/tactics/TA0030" data-toggle="tooltip" data-placement="top" title="TA0030">Defense Evasion</a></td> <td class="tactic name"><a href="/tactics/TA0031" data-toggle="tooltip" data-placement="top" title="TA0031">Credential Access</a></td> <td class="tactic name"><a href="/tactics/TA0032" data-toggle="tooltip" data-placement="top" title="TA0032">Discovery</a></td> <td class="tactic name"><a href="/tactics/TA0033" data-toggle="tooltip" data-placement="top" title="TA0033">Lateral Movement</a></td> <td class="tactic name"><a href="/tactics/TA0035" data-toggle="tooltip" data-placement="top" title="TA0035">Collection</a></td> <td class="tactic name"><a href="/tactics/TA0037" data-toggle="tooltip" data-placement="top" title="TA0037">Command and Control</a></td> <td class="tactic name"><a href="/tactics/TA0036" data-toggle="tooltip" data-placement="top" title="TA0036">Exfiltration</a></td> <td class="tactic name"><a href="/tactics/TA0034" data-toggle="tooltip" data-placement="top" title="TA0034">Impact</a></td> </tr> <tr> <td class="tactic count"> 7 techniques </td> <td class="tactic count"> 4 techniques </td> <td class="tactic count"> 7 techniques </td> <td class="tactic count"> 3 techniques </td> <td class="tactic count"> 16 techniques </td> <td class="tactic count"> 5 techniques </td> <td class="tactic count"> 8 techniques </td> <td class="tactic count"> 2 techniques </td> <td class="tactic count"> 13 techniques </td> <td class="tactic count"> 9 techniques </td> <td class="tactic count"> 2 techniques </td> <td class="tactic count"> 10 techniques </td> </tr> </thead> <tbody> <tr> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258"> <a href="/techniques/T1661" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258" title="T1661">Application Versioning</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--fd339382-bfec-4bf0-8d47-1caedc9e7e57"> <a href="/techniques/T1456" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--fd339382-bfec-4bf0-8d47-1caedc9e7e57" title="T1456">Drive-By Compromise</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--6ecbc2eb-e85a-440a-ab68-4d98f8d56fbe"> <a href="/techniques/T1664" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--6ecbc2eb-e85a-440a-ab68-4d98f8d56fbe" title="T1664">Exploitation for Initial Access</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--dfe29258-ce59-421c-9dee-e85cb9fa90cd"> <a href="/techniques/T1461" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--dfe29258-ce59-421c-9dee-e85cb9fa90cd" title="T1461">Lockscreen Bypass</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--defc1257-4db1-4fb3-8ef5-bb77f63146df"> <a href="/techniques/T1660" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--defc1257-4db1-4fb3-8ef5-bb77f63146df" title="T1660">Phishing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d"> <a href="/techniques/T1458" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d" title="T1458">Replication Through Removable Media</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad" onclick="toggleMatrixSubTechniques('x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6', 'attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad"> <a href="/techniques/T1474" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad" title="T1474">Supply Chain Compromise <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--0d95940f-9583-4e0f-824c-a42c1be47fad"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--7827ced0-95e7-4d05-bdcf-0d8f2d37a3d3"> <a href="/techniques/T1474/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--7827ced0-95e7-4d05-bdcf-0d8f2d37a3d3" title="T1474.001">Compromise Software Dependencies and Development Tools</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--c08366bb-8d11-4921-853f-f0a3b6a2a1da"> <a href="/techniques/T1474/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--c08366bb-8d11-4921-853f-f0a3b6a2a1da" title="T1474.002">Compromise Hardware Supply Chain</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--9558a84e-2d5e-4872-918e-d847494a8ffc"> <a href="/techniques/T1474/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--0a93fd8e-4a83-4c15-8203-db290e5f2ac6--attack-pattern--9558a84e-2d5e-4872-918e-d847494a8ffc" title="T1474.003">Compromise Software Supply Chain</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756', 'attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c"> <a href="/techniques/T1623" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c" title="T1623">Command and Scripting Interpreter <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--29f1f56c-7b7a-4c14-9e39-59577ea2743c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--693cdbff-ea73-49c6-ac3f-91e7285c31d1"> <a href="/techniques/T1623/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--693cdbff-ea73-49c6-ac3f-91e7285c31d1" title="T1623.001">Unix Shell</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--5abfc5e6-3c56-49e7-ad72-502d01acf28b"> <a href="/techniques/T1658" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--5abfc5e6-3c56-49e7-ad72-502d01acf28b" title="T1658">Exploitation for Client Execution</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb"> <a href="/techniques/T1575" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb" title="T1575">Native API</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d"> <a href="/techniques/T1603" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4a800987-a3a8-4d56-a1bd-0d7171431756--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d" title="T1603">Scheduled Task/Job</a> </div> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--46d818a5-67fa-4585-a7fc-ecf15376c8d5"> <a href="/techniques/T1398" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--46d818a5-67fa-4585-a7fc-ecf15376c8d5" title="T1398">Boot or Logon Initialization Scripts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d3bc5020-f6a2-41c0-8ccb-5e563101b60c"> <a href="/techniques/T1577" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d3bc5020-f6a2-41c0-8ccb-5e563101b60c" title="T1577">Compromise Application Executable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--4f14e30b-8b57-4a7b-9093-2c0778ea99cf"> <a href="/techniques/T1645" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--4f14e30b-8b57-4a7b-9093-2c0778ea99cf" title="T1645">Compromise Client Software Binary</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14" onclick="toggleMatrixSubTechniques('x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54', 'attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14"> <a href="/techniques/T1624" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14" title="T1624">Event Triggered Execution <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--d446b9f0-06a9-4a8d-97ee-298cfee84f14"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--3775a580-a1d1-46c4-8147-c614a715f2e9"> <a href="/techniques/T1624/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--3775a580-a1d1-46c4-8147-c614a715f2e9" title="T1624.001">Broadcast Receivers</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e"> <a href="/techniques/T1541" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e" title="T1541">Foreground Persistence</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd" onclick="toggleMatrixSubTechniques('x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54', 'attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd"> <a href="/techniques/T1625" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd" title="T1625">Hijack Execution Flow <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--670a4d75-103b-4b14-8a9e-4652fa795edd"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--c6e17ca2-08b5-4379-9786-89bd05241831"> <a href="/techniques/T1625/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--c6e17ca2-08b5-4379-9786-89bd05241831" title="T1625.001">System Runtime API Hijacking</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d"> <a href="/techniques/T1603" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--363bbeff-bb2a-4734-ac74-d6d37202fe54--attack-pattern--00290ac5-551e-44aa-bbd8-c4b913488a6d" title="T1603">Scheduled Task/Job</a> </div> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8', 'attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3"> <a href="/techniques/T1626" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3" title="T1626">Abuse Elevation Control Mechanism <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--08ea902d-ecb5-47ed-a453-2798057bb2d3"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--9c049d7b-c92a-4733-9381-27e2bd2ccadc"> <a href="/techniques/T1626/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--9c049d7b-c92a-4733-9381-27e2bd2ccadc" title="T1626.001">Device Administrator Permissions</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--351c0927-2fc1-4a2c-ad84-cbbee7eb8172"> <a href="/techniques/T1404" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--351c0927-2fc1-4a2c-ad84-cbbee7eb8172" title="T1404">Exploitation for Privilege Escalation</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8', 'attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <a href="/techniques/T1631" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" title="T1631">Process Injection <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee"> <a href="/techniques/T1631/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3e962de5-3280-43b7-bc10-334fbc1d6fa8--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee" title="T1631.001">Ptrace System Calls</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258"> <a href="/techniques/T1661" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--28fdd23d-aee3-4afe-bc3f-5f1f52929258" title="T1661">Application Versioning</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6c49d50f-494d-4150-b774-a655022d20a6"> <a href="/techniques/T1407" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6c49d50f-494d-4150-b774-a655022d20a6" title="T1407">Download New Code at Runtime</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--498e7b81-238d-404c-aa5e-332904d63286');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286"> <a href="/techniques/T1627" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286" title="T1627">Execution Guardrails <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--498e7b81-238d-404c-aa5e-332904d63286"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--e422b6fa-4739-46b9-992e-82f1b350c780"> <a href="/techniques/T1627/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--e422b6fa-4739-46b9-992e-82f1b350c780" title="T1627.001">Geofencing</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e"> <a href="/techniques/T1541" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--648f8051-1a35-46d3-b1d8-3a3f5cf2cc8e" title="T1541">Foreground Persistence</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f"> <a href="/techniques/T1628" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f" title="T1628">Hide Artifacts <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fc53309d-ebd5-4573-9242-57024ebdad4f"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f05fc151-aa62-47e3-ae57-2d1b23d64bf6"> <a href="/techniques/T1628/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f05fc151-aa62-47e3-ae57-2d1b23d64bf6" title="T1628.001">Suppress Application Icon</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--24a77e53-0751-46fc-b207-99378fb35c08"> <a href="/techniques/T1628/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--24a77e53-0751-46fc-b207-99378fb35c08" title="T1628.002">User Evasion</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ea132c68-b518-4478-ae8d-1763cda26ee3"> <a href="/techniques/T1628/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ea132c68-b518-4478-ae8d-1763cda26ee3" title="T1628.003">Conceal Multimedia Files</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ccde43e4-78f9-4f32-b401-c081e7db71ea"> <a href="/techniques/T1617" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ccde43e4-78f9-4f32-b401-c081e7db71ea" title="T1617">Hooking</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a"> <a href="/techniques/T1629" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a" title="T1629">Impair Defenses <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--20b0931a-8952-42ca-975f-775bad295f1a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--dc01774a-d1c1-45fb-b506-0a5d1d6593d9"> <a href="/techniques/T1629/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--dc01774a-d1c1-45fb-b506-0a5d1d6593d9" title="T1629.001">Prevent Application Removal</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--acf8fd2a-dc98-43b4-8d37-64e10728e591"> <a href="/techniques/T1629/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--acf8fd2a-dc98-43b4-8d37-64e10728e591" title="T1629.002">Device Lockout</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--2aa78dfd-cb6f-4c70-9408-137cfd96be49"> <a href="/techniques/T1629/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--2aa78dfd-cb6f-4c70-9408-137cfd96be49" title="T1629.003">Disable or Modify Tools</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d"> <a href="/techniques/T1630" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d" title="T1630">Indicator Removal on Host <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0d4e3bbb-7af5-4c88-a215-0c0906bc1e8d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0cdd66ad-26ac-4338-a764-4972a1e17ee3"> <a href="/techniques/T1630/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--0cdd66ad-26ac-4338-a764-4972a1e17ee3" title="T1630.001">Uninstall Malicious Application</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ab7400b7-3476-4776-9545-ef3fa373de63"> <a href="/techniques/T1630/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--ab7400b7-3476-4776-9545-ef3fa373de63" title="T1630.002">File Deletion</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--a91262d5-b9ff-463f-b8d2-12e4ea1eb3c9"> <a href="/techniques/T1630/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--a91262d5-b9ff-463f-b8d2-12e4ea1eb3c9" title="T1630.003">Disguise Root/Jailbreak Indicators</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62"> <a href="/techniques/T1516" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62" title="T1516">Input Injection</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc"> <a href="/techniques/T1655" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc" title="T1655">Masquerading <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--f856eaab-e84a-4265-a8a2-7bf37e5dc2fc"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--114fed8b-7eed-4136-8b9c-411c5c7fff4b"> <a href="/techniques/T1655/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--114fed8b-7eed-4136-8b9c-411c5c7fff4b" title="T1655.001">Match Legitimate Name or Location</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb"> <a href="/techniques/T1575" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--52eff1c7-dd30-4121-b762-24ae6fa61bbb" title="T1575">Native API</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a"> <a href="/techniques/T1406" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a" title="T1406">Obfuscated Files or Information <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fa801609-ca8e-415e-815e-65f3826ff4df"> <a href="/techniques/T1406/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fa801609-ca8e-415e-815e-65f3826ff4df" title="T1406.001">Steganography</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--51636761-2e35-44bf-9e56-e337adf97174"> <a href="/techniques/T1406/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--51636761-2e35-44bf-9e56-e337adf97174" title="T1406.002">Software Packing</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <a href="/techniques/T1631" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff" title="T1631">Process Injection <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--b7c0e45f-0206-4f75-96e7-fe7edad3aaff"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee"> <a href="/techniques/T1631/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee" title="T1631.001">Ptrace System Calls</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--5ca3c7ec-55b2-4587-9376-cf6c96f8047a"> <a href="/techniques/T1604" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--5ca3c7ec-55b2-4587-9376-cf6c96f8047a" title="T1604">Proxy Through Victim</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1"> <a href="/techniques/T1632" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1" title="T1632">Subvert Trust Controls <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--79cb02f4-ac4e-4335-8b51-425c9573cce1"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fcb11f06-ce0e-490b-bcc1-04a1623579f0"> <a href="/techniques/T1632/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--fcb11f06-ce0e-490b-bcc1-04a1623579f0" title="T1632.001">Code Signing Policy Modification</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df', 'attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f"> <a href="/techniques/T1633" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f" title="T1633">Virtualization/Sandbox Evasion <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--27d18e87-8f32-4be1-b456-39b90454360f"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6ffad4be-bfe0-424f-abde-4d9a84a800ad"> <a href="/techniques/T1633/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--987cda6d-eb77-406b-bf68-bcb5f3d2e1df--attack-pattern--6ffad4be-bfe0-424f-abde-4d9a84a800ad" title="T1633.001">System Checks</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2"> <a href="/techniques/T1517" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2" title="T1517">Access Notifications</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692"> <a href="/techniques/T1414" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692" title="T1414">Clipboard Data</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10', 'attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3"> <a href="/techniques/T1634" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3" title="T1634">Credentials from Password Store <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--cc6e0637-76d2-4af3-a604-9d8d3ff8a6b3"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--8605a0ec-b44a-4e98-a7fc-87d4bd3acb66"> <a href="/techniques/T1634/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--8605a0ec-b44a-4e98-a7fc-87d4bd3acb66" title="T1634.001">Keychain</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10', 'attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <a href="/techniques/T1417" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" title="T1417">Input Capture <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47"> <a href="/techniques/T1417/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47" title="T1417.001">Keylogging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512"> <a href="/techniques/T1417/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512" title="T1417.002">GUI Input Capture</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10', 'attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce"> <a href="/techniques/T1635" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce" title="T1635">Steal Application Access Token <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--233fe2c0-cb41-4765-b454-e0087597fbce"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--789ef15a-34d9-4b32-a779-8cbbc9eb32f5"> <a href="/techniques/T1635/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6fcb36b8-3776-483b-8699-42215714fb10--attack-pattern--789ef15a-34d9-4b32-a779-8cbbc9eb32f5" title="T1635.001">URI Hijacking</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--cf28ca46-1fd3-46b4-b1f6-ec0b72361848"> <a href="/techniques/T1420" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--cf28ca46-1fd3-46b4-b1f6-ec0b72361848" title="T1420">File and Directory Discovery</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1', 'attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <a href="/techniques/T1430" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" title="T1430">Location Tracking <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f"> <a href="/techniques/T1430/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f" title="T1430.001">Remote Device Management Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7"> <a href="/techniques/T1430/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7" title="T1430.002">Impersonate SS7 Nodes</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--2de38279-043e-47e8-aaad-1b07af6d0790"> <a href="/techniques/T1423" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--2de38279-043e-47e8-aaad-1b07af6d0790" title="T1423">Network Service Scanning</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1b51f5bc-b97a-498a-8dbd-bc6b1901bf19"> <a href="/techniques/T1424" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1b51f5bc-b97a-498a-8dbd-bc6b1901bf19" title="T1424">Process Discovery</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1', 'attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2"> <a href="/techniques/T1418" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2" title="T1418">Software Discovery <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--198ce408-1470-45ee-b47f-7056050d4fc2"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1d44f529-6fe6-489f-8a01-6261ac43f05e"> <a href="/techniques/T1418/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--1d44f529-6fe6-489f-8a01-6261ac43f05e" title="T1418.001">Security Software Discovery</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--e2ea7f6b-8d4f-49c3-819d-660530d12b77"> <a href="/techniques/T1426" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--e2ea7f6b-8d4f-49c3-819d-660530d12b77" title="T1426">System Information Discovery</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1', 'attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd"> <a href="/techniques/T1422" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd" title="T1422">System Network Configuration Discovery <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--d4536441-1bcc-49fa-80ae-a596ed3f7ffd"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--45a5fe76-eda3-4d40-8f22-c186efd6278d"> <a href="/techniques/T1422/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--45a5fe76-eda3-4d40-8f22-c186efd6278d" title="T1422.001">Internet Connection Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--be63612f-a48f-44f2-a7a6-1763509fcf80"> <a href="/techniques/T1422/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--be63612f-a48f-44f2-a7a6-1763509fcf80" title="T1422.002">Wi-Fi Discovery</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--dd818ea5-adf5-41c7-93b5-f3b839a219fb"> <a href="/techniques/T1421" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d418cdeb-1b9f-4a6b-a15d-2f89f549f8c1--attack-pattern--dd818ea5-adf5-41c7-93b5-f3b839a219fb" title="T1421">System Network Connections Discovery</a> </div> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--22379609-a99f-4a01-bd7e-70f3e105859d"> <a href="/techniques/T1428" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--22379609-a99f-4a01-bd7e-70f3e105859d" title="T1428">Exploitation of Remote Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d"> <a href="/techniques/T1458" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7be441c2-0095-4b1e-8125-fa8ffda29b0f--attack-pattern--667e5707-3843-4da8-bd34-88b922526f0d" title="T1458">Replication Through Removable Media</a> </div> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2"> <a href="/techniques/T1517" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--39dd7871-f59b-495f-a9a5-3cb8cc50c9b2" title="T1517">Access Notifications</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--08e22979-d320-48ed-8711-e7bf94aabb13"> <a href="/techniques/T1638" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--08e22979-d320-48ed-8711-e7bf94aabb13" title="T1638">Adversary-in-the-Middle</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e3b936a4-6321-4172-9114-038a866362ec"> <a href="/techniques/T1532" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e3b936a4-6321-4172-9114-038a866362ec" title="T1532">Archive Collected Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--6683aa0c-d98a-4f5b-ac57-ca7e9934a760"> <a href="/techniques/T1429" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--6683aa0c-d98a-4f5b-ac57-ca7e9934a760" title="T1429">Audio Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> <a href="/techniques/T1616" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69" title="T1616">Call Control</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692"> <a href="/techniques/T1414" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c4b96c0b-cb58-497a-a1c2-bb447d79d692" title="T1414">Clipboard Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e1c912a9-e305-434b-9172-8a6ce3ec9c4a"> <a href="/techniques/T1533" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e1c912a9-e305-434b-9172-8a6ce3ec9c4a" title="T1533">Data from Local System</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba', 'attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <a href="/techniques/T1417" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad" title="T1417">Input Capture <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a8c31121-852b-46bd-9ba4-674ae5afe7ad"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47"> <a href="/techniques/T1417/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--b1c95426-2550-4621-8028-ceebf28b3a47" title="T1417.001">Keylogging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512"> <a href="/techniques/T1417/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--4c58b7c6-a839-4789-bda9-9de33e4d4512" title="T1417.002">GUI Input Capture</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba', 'attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <a href="/techniques/T1430" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4" title="T1430">Location Tracking <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--99e6295e-741b-4857-b6e5-64989eb039b4"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f"> <a href="/techniques/T1430/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--9ef05e3d-52db-4c12-be4f-519214bbe91f" title="T1430.001">Remote Device Management Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7"> <a href="/techniques/T1430/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--0f4fb01b-d57a-4375-b7a2-342c9d3248f7" title="T1430.002">Impersonate SS7 Nodes</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique" id="tour-flat-technique" > <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e sidebar--tour" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba', 'attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e'); tour_technique_clicked();"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e"> <a href="/techniques/T1636" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e" title="T1636">Protected User Data <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--11c2c2b7-1fd4-408f-bc2e-fe772ef9df5e subtechniques--tour"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques" id="tour-flat-subtechniques" > <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a9fa0d30-a8ff-45bf-922e-7720da0b7922"> <a href="/techniques/T1636/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--a9fa0d30-a8ff-45bf-922e-7720da0b7922" title="T1636.001">Calendar Entries</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--1d1b1558-c833-482e-aabb-d07ef6eae63d"> <a href="/techniques/T1636/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--1d1b1558-c833-482e-aabb-d07ef6eae63d" title="T1636.002">Call Log</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e0b9ecb8-a7d1-43c7-aa30-8e19c6a92c86"> <a href="/techniques/T1636/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--e0b9ecb8-a7d1-43c7-aa30-8e19c6a92c86" title="T1636.003">Contact List</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c6421411-ae61-42bb-9098-73fddb315002"> <a href="/techniques/T1636/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--c6421411-ae61-42bb-9098-73fddb315002" title="T1636.004">SMS Messages</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--73c26732-6422-4081-8b63-6d0ae93d449e"> <a href="/techniques/T1513" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--73c26732-6422-4081-8b63-6d0ae93d449e" title="T1513">Screen Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--702055ac-4e54-4ae9-9527-e23a38e0b160"> <a href="/techniques/T1409" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--702055ac-4e54-4ae9-9527-e23a38e0b160" title="T1409">Stored Application Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--d8940e76-f9c1-4912-bea6-e21c251370b6"> <a href="/techniques/T1512" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7a0d25d3-f0c0-40bf-bf90-c743871b19ba--attack-pattern--d8940e76-f9c1-4912-bea6-e21c251370b6" title="T1512">Video Capture</a> </div> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673"> <a href="/techniques/T1437" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673" title="T1437">Application Layer Protocol <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--6a3f6490-9c44-40de-b059-e5940f246673"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2282a98b-5049-4f61-9381-55baca7c1add"> <a href="/techniques/T1437/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2282a98b-5049-4f61-9381-55baca7c1add" title="T1437.001">Web Protocols</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> <a href="/techniques/T1616" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69" title="T1616">Call Control</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26"> <a href="/techniques/T1637" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26" title="T1637">Dynamic Resolution <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2ccc3d39-9598-4d32-9657-42e1c7095d26"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--fd211238-f767-4599-8c0d-9dca36624626"> <a href="/techniques/T1637/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--fd211238-f767-4599-8c0d-9dca36624626" title="T1637.001">Domain Generation Algorithms</a> </div> </div> </td> </tr> </table> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84"> <a href="/techniques/T1521" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84" title="T1521">Encrypted Channel <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ed2c05a1-4f81-4d97-9e1b-aff01c34ae84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--bb4387ab-7a51-468b-bf5f-a9a8612f0303"> <a href="/techniques/T1521/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--bb4387ab-7a51-468b-bf5f-a9a8612f0303" title="T1521.001">Symmetric Cryptography</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--16d73b64-5681-4ea0-9af4-4ad86f7c96e8"> <a href="/techniques/T1521/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--16d73b64-5681-4ea0-9af4-4ad86f7c96e8" title="T1521.002">Asymmetric Cryptography</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--dfafc230-5465-4993-8dc5-f51fa9fec002"> <a href="/techniques/T1521/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--dfafc230-5465-4993-8dc5-f51fa9fec002" title="T1521.003">SSL Pinning</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2bb20118-e6c0-41dc-a07c-283ea4dd0fb8"> <a href="/techniques/T1544" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--2bb20118-e6c0-41dc-a07c-283ea4dd0fb8" title="T1544">Ingress Tool Transfer</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--948a447c-d783-4ba0-8516-a64140fcacd5"> <a href="/techniques/T1509" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--948a447c-d783-4ba0-8516-a64140fcacd5" title="T1509">Non-Standard Port</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ec4c4baa-026f-43e8-8f56-58c36f3162dd"> <a href="/techniques/T1644" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--ec4c4baa-026f-43e8-8f56-58c36f3162dd" title="T1644">Out of Band Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--0b761f2b-197a-40f2-b100-8152cb957c0c"> <a href="/techniques/T1663" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--0b761f2b-197a-40f2-b100-8152cb957c0c" title="T1663">Remote Access Software</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380" onclick="toggleMatrixSubTechniques('x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3', 'attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380"> <a href="/techniques/T1481" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380" title="T1481">Web Service <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--c6a146ae-9c63-4606-97ff-e261e76e8380"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--986f80f7-ff0e-4f48-87bd-0394814bbce5"> <a href="/techniques/T1481/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--986f80f7-ff0e-4f48-87bd-0394814bbce5" title="T1481.001">Dead Drop Resolver</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--939808a7-121d-467a-b028-4441ee8b7cee"> <a href="/techniques/T1481/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--939808a7-121d-467a-b028-4441ee8b7cee" title="T1481.002">Bidirectional Communication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--d916f176-a1ca-4a78-9fdd-4058bc28162e"> <a href="/techniques/T1481/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--3f660805-fa2e-42e8-8851-57f9e9b653e3--attack-pattern--d916f176-a1ca-4a78-9fdd-4058bc28162e" title="T1481.003">One-Way Communication</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981', 'attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d"> <a href="/techniques/T1639" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d" title="T1639">Exfiltration Over Alternative Protocol <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--3e091a89-a493-4a6c-8e88-d57be19bb98d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--37047267-3e56-453c-833e-d92b68118120"> <a href="/techniques/T1639/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--37047267-3e56-453c-833e-d92b68118120" title="T1639.001">Exfiltration Over Unencrypted Non-C2 Protocol</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--32063d7f-0a39-440d-a4a3-2694488f96cc"> <a href="/techniques/T1646" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--10fa8d8d-1b04-4176-917e-738724239981--attack-pattern--32063d7f-0a39-440d-a4a3-2694488f96cc" title="T1646">Exfiltration Over C2 Channel</a> </div> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--e2c2249a-eb82-4614-8dd4-9c514dde65e2"> <a href="/techniques/T1640" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--e2c2249a-eb82-4614-8dd4-9c514dde65e2" title="T1640">Account Access Removal</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69"> <a href="/techniques/T1616" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--351ddf79-2d3a-41b4-9bef-82ea5d3ccd69" title="T1616">Call Control</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--9ef14445-6f35-4ed0-a042-5024f13a9242"> <a href="/techniques/T1662" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--9ef14445-6f35-4ed0-a042-5024f13a9242" title="T1662">Data Destruction</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d9e88203-2b5d-405f-a406-2933b1e3d7e4"> <a href="/techniques/T1471" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d9e88203-2b5d-405f-a406-2933b1e3d7e4" title="T1471">Data Encrypted for Impact</a> </div> <!-- tour technique is scheduled task under privilege escalation --> <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36" onclick="toggleMatrixSubTechniques('x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e', 'attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36"> <a href="/techniques/T1641" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36" title="T1641">Data Manipulation <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--c548d8c4-a0a3-4a24-bb79-2a84abbc7b36"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--74e6003f-c7f4-4047-983b-708cc19b96b6"> <a href="/techniques/T1641/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--74e6003f-c7f4-4047-983b-708cc19b96b6" title="T1641.001">Transmitted Data Manipulation</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--eb6cf439-1bcb-4d10-bc68-1eed844ed7b3"> <a href="/techniques/T1642" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--eb6cf439-1bcb-4d10-bc68-1eed844ed7b3" title="T1642">Endpoint Denial of Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--a8e971b8-8dc7-4514-8249-ae95427ec467"> <a href="/techniques/T1643" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--a8e971b8-8dc7-4514-8249-ae95427ec467" title="T1643">Generate Traffic from Victim</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62"> <a href="/techniques/T1516" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d1f1337e-aea7-454c-86bd-482a98ffaf62" title="T1516">Input Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d2e112dc-f6d4-488d-b8df-ecbfb57a0a2d"> <a href="/techniques/T1464" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--d2e112dc-f6d4-488d-b8df-ecbfb57a0a2d" title="T1464">Network Denial of Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--b327a9c0-e709-495c-aa6e-00b042136e2b"> <a href="/techniques/T1582" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--6ebce653-294a-444a-bffb-14c04c8d137e--attack-pattern--b327a9c0-e709-495c-aa6e-00b042136e2b" title="T1582">SMS Control</a> </div> </td> </tr> </tbody> </table> </div> <div class="scroll-indicator right"> <div class="cover"></div> </div> </div> <!-- TODO: Re-enable this once we figure out how to show the last modified timestamp of the latest domain release, not the Matrix object itself <div class="timestamp deemphasis text-center pt-3">Last modified: 06 April 2022</div> --> </div> </div> </div> </div> </div> </div> </div> </div> <!--stop-indexing-for-search--> <!-- search overlay for entire page -- not displayed inline --> <div class="overlay search" id="search-overlay" style="display: none;"> <div class="overlay-inner"> <!-- text input for searching --> <div class="search-header"> <div class="search-input"> <input type="text" id="search-input" placeholder="search"> </div> <div class="search-icons"> <div class="search-parsing-icon spinner-border" style="display: none" id="search-parsing-icon"></div> <div class="close-search-icon" id="close-search-icon">×</div> </div> </div> <!-- results and controls for loading more results --> <div id="search-body" class="search-body"> <div class="results" id="search-results"> <!-- content will be appended here on search --> </div> <div id="load-more-results" class="load-more-results"> <button class="btn btn-default" id="load-more-results-button">load more results</button> </div> </div> </div> </div> </div> <div class="row flex-grow-0 flex-shrink-1"> <!-- footer elements --> <footer class="col footer"> <div class="container-fluid"> <div class="row row-footer"> <div class="col-2 col-sm-2 col-md-2"> <div class="footer-center-responsive my-auto"> <a href="https://www.mitre.org" target="_blank" rel="noopener" aria-label="MITRE"> <img src="/theme/images/mitrelogowhiteontrans.gif" class="mitre-logo-wtrans"> </a> </div> </div> <div class="col-2 col-sm-2 footer-responsive-break"></div> <div class="footer-link-group"> <div class="row row-footer"> <div class="px-3 col-footer"> <u class="footer-link"><a href="/resources/engage-with-attack/contact" class="footer-link">Contact Us</a></u> </div> <div class="px-3 col-footer"> <u class="footer-link"><a href="/resources/legal-and-branding/terms-of-use" class="footer-link">Terms of Use</a></u> </div> <div class="px-3 col-footer"> <u class="footer-link"><a href="/resources/legal-and-branding/privacy" class="footer-link">Privacy Policy</a></u> </div> <div class="px-3"> <u class="footer-link"><a href="/resources/changelog.html" class="footer-link" data-toggle="tooltip" data-placement="top" data-html="true" title="ATT&CK content v16.1
Website v4.2.1">Website Changelog</a></u> </div> </div> <div class="row"> <small class="px-3"> © 2015 - 2024, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. </small> </div> </div> <div class="w-100 p-2 footer-responsive-break"></div> <div class="col pr-4"> <div class="footer-float-right-responsive-brand"> <div class="row row-footer row-footer-icon"> <div class="mb-1"> <a href="https://twitter.com/MITREattack" class="btn btn-footer"> <i class="fa-brands fa-x-twitter fa-lg"></i> </a> <a href="https://github.com/mitre-attack" class="btn btn-footer"> <i class="fa-brands fa-github fa-lg"></i> </a> </div> </div> </div> </div> </div> </div> </div> </footer> </div> </div> <!--stopindex--> </div> <!--SCRIPTS--> <!--SCRIPTS--> <script src="/theme/scripts/jquery-3.5.1.min.js"></script> <script src="/theme/scripts/popper.min.js"></script> <script src="/theme/scripts/bootstrap-select.min.js"></script> <script src="/theme/scripts/bootstrap.bundle.min.js"></script> <script src="/theme/scripts/site.js"></script> <script src="/theme/scripts/settings.js"></script> <script src="/theme/scripts/search_bundle.js"></script> <!--SCRIPTS--> <script src="/theme/scripts/resizer.js"></script> <script src="/theme/scripts/matrix.js"></script> <script src="/theme/scripts/bootstrap-tourist.js"></script> <script src="/theme/scripts/settings.js"></script> <script src="/theme/scripts/tour/tour-matrices.js"></script> <script src="/theme/scripts/sidebar-load-all.js"></script> </body> </html>