MITRE ATT&CK®

<!DOCTYPE html> <html lang='en'> <head> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-62667723-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-62667723-1'); </script> <meta name="google-site-verification" content="2oJKLqNN62z6AOCb0A0IXGtbQuj-lev5YPAHFF_cbHQ"/> <meta charset='utf-8'> <meta name='viewport' content='width=device-width, initial-scale=1,shrink-to-fit=no'> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <link rel='shortcut icon' href="/versions/v16/theme/favicon.ico" type='image/x-icon'> <title>MITRE ATT&CK®</title>   <link rel='stylesheet' href="/versions/v16/theme/style/bootstrap.min.css" /> <link rel='stylesheet' href="/versions/v16/theme/style/bootstrap-tourist.css" /> <link rel='stylesheet' href="/versions/v16/theme/style/bootstrap-select.min.css" />  <link rel="stylesheet" href="/versions/v16/theme/style/fontawesome-6.5.1/css/fontawesome.min.css"/> <link rel="stylesheet" href="/versions/v16/theme/style/fontawesome-6.5.1/css/brands.min.css"/> <link rel="stylesheet" href="/versions/v16/theme/style/fontawesome-6.5.1/css/solid.min.css"/> <link rel="stylesheet" type="text/css" href="/versions/v16/theme/style.min.css?6689c2db"> </head> <body> <div class="container-fluid attack-website-wrapper d-flex flex-column h-100"> <div class="row sticky-top flex-grow-0 flex-shrink-1">  <header class="col px-0"> <nav class='navbar navbar-expand-lg navbar-dark position-static'> <a class='navbar-brand' href="/versions/v16/"><img src="/versions/v16/theme/images/mitre_attack_logo.png" class="attack-logo"></a> <button class='navbar-toggler' type='button' data-toggle='collapse' data-target='#navbarCollapse' aria-controls='navbarCollapse' aria-expanded='false' aria-label='Toggle navigation'> <span class='navbar-toggler-icon'></span> </button> <div class='collapse navbar-collapse' id='navbarCollapse'> <ul class='nav nav-tabs ml-auto'> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v16/matrices/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Matrices</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/matrices/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v16/matrices/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v16/matrices/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v16/tactics/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Tactics</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/tactics/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v16/tactics/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v16/tactics/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v16/techniques/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Techniques</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/techniques/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v16/techniques/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v16/techniques/ics/">ICS</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v16/datasources" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Defenses</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/datasources">Data Sources</a> <div class="dropright dropdown"> <a class="dropdown-item dropdown-toggle" href="/versions/v16/mitigations/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Mitigations</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/mitigations/enterprise/">Enterprise</a> <a class="dropdown-item" href="/versions/v16/mitigations/mobile/">Mobile</a> <a class="dropdown-item" href="/versions/v16/mitigations/ics/">ICS</a> </div> </div> <a class="dropdown-item" href="/versions/v16/assets">Assets</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v16/groups" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>CTI</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/groups">Groups</a> <a class="dropdown-item" href="/versions/v16/software">Software</a> <a class="dropdown-item" href="/versions/v16/campaigns">Campaigns</a> </div> </li> <li class="nav-item dropdown"> <a class="nav-link dropdown-toggle" href="/versions/v16/resources/" id="navbarDropdown" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <b>Resources</b> </a> <div class="dropdown-menu " aria-labelledby="navbarDropdown"> <a class="dropdown-item" href="/versions/v16/resources/">Get Started</a> <a class="dropdown-item" href="/versions/v16/resources/learn-more-about-attack/">Learn More about ATT&CK</a> <a class="dropdown-item" href="/versions/v16/resources/attackcon/">ATT&CKcon</a> <a class="dropdown-item" href="/versions/v16/resources/attack-data-and-tools/">ATT&CK Data & Tools</a> <a class="dropdown-item" href="/versions/v16/resources/faq/">FAQ</a> <a class="dropdown-item" href="/versions/v16/resources/engage-with-attack/contact/">Engage with ATT&CK</a> <a class="dropdown-item" href="/resources/versions/">Version History</a> <a class="dropdown-item" href="/versions/v16/resources/legal-and-branding/">Legal & Branding</a> </div> </li> <li class="nav-item"> <a href="/versions/v16/resources/engage-with-attack/benefactors/" class="nav-link" ><b>Benefactors</b></a> </li> <li class="nav-item"> <a href="https://medium.com/mitre-attack/" target="_blank" class="nav-link"> <b>Blog</b>  <img src="/versions/v16/theme/images/external-site.svg" alt="External site" class="external-icon" /> </a> </li> <li class="nav-item"> <button id="search-button" class="btn search-button">Search <div id="search-icon" class="icon-button search-icon"></div></button> </li> </ul> </div> </nav> </header> </div> <div class="row flex-grow-0 flex-shrink-1">  <div class="col px-0">  <div class="container-fluid version-banner"><div class="icon-inline baseline mr-1"><img src="/versions/v16/theme/images/icon-warning-24px.svg"></div>Currently viewing <a href="https://github.com/mitre/cti/releases/tag/ATT%26CK-v16.1" target="_blank">ATT&CK v16.1</a> which is the current version of ATT&CK. <a href="/resources/versions/">Learn more about the versioning system</a> or <a href="/">see the live site</a>.</div> <div class="container-fluid d-none"> Reminder: the TAXII 2.0 server will be <a href='https://medium.com/mitre-attack/introducing-taxii-2-1-and-a-fond-farewell-to-taxii-2-0-d9fca6ce4c58'>retiring on December 18</a>. Please switch to the <a href='https://github.com/mitre-attack/attack-workbench-taxii-server/blob/main/docs/USAGE.md'>TAXII 2.1 server</a> to ensure uninterrupted service. </div> </div> </div> <div class="row flex-grow-1 flex-shrink-0">   <div id="attack-jumbotron" class="col jumbotron-fluid"> <div class="container home-banner"> <div class="row-main-page pt-5"> <div class="col mb-5 home-left-col"> <div class="py-1"> <img src="/theme/images/ATT&CK_red.png" class="rounded mx-auto d-block pb-4 attack-logo-bold"> </div> <table id="tour-start-container" class="quick-links"> <tr> <td> <a href="/versions/v16/resources/" role="button">Get Started</a> </td> <td> <a href="#" id="tour-start" onclick="start_tour()" role="button">Take a Tour</a> </td> </tr> <tr> <td> <a href="/versions/v16/resources/engage-with-attack/contribute" role="button">Contribute</a> </td> <td> <a href="https://medium.com/mitre-attack" role="button" target="_blank" >Blog <img src="/versions/v16/theme/images/external-site-dark.jpeg" alt="External site" class="external-icon" /></a> </td> </tr> <tr> <td> <a href="/versions/v16/resources/faq" role="button">FAQ</a> </td> <td> <div class="btn-group"> <a href="#" onclick="navigate_random('');"> Random Page </a> <button type="button" class="btn dropdown-toggle dropdown-toggle-split" style="color: #4f7cac; background-color: white; padding: 0; padding-left: .375rem; padding-right: .375rem; border-left: 1px solid lightgray; margin-left: .375rem;" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <span class="sr-only">Toggle Dropdown</span> </button> <span class="sr-only">Toggle Dropdown</span> </button> <div class="dropdown-menu"> <a class="dropdown-item" href="#" onclick="navigate_random('Matrix');">Matrix</a> <a class="dropdown-item" href="#" onclick="navigate_random('Tactic');">Tactic</a> <a class="dropdown-item" href="#" onclick="navigate_random('Technique');">Technique</a> <a class="dropdown-item" href="#" onclick="navigate_random('Data Source');">Data Source</a> <a class="dropdown-item" href="#" onclick="navigate_random('Mitigation');">Mitigation</a> <a class="dropdown-item" href="#" onclick="navigate_random('Group');">Group</a> <a class="dropdown-item" href="#" onclick="navigate_random('Software');">Software</a> <a class="dropdown-item" href="#" onclick="navigate_random('Campaign');">Campaign</a> <a class="dropdown-item" href="#" onclick="navigate_random('Asset');">Asset</a> </div> </div> </td> </tr> </table>   </div>  <div class="col">  <p class="text-justify">MITRE ATT&CK<sup>®</sup> is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.</p> <p class="text-justify">With the creation of ATT&CK, MITRE is fulfilling its mission to solve problems for a safer world — by bringing communities together to develop more effective cybersecurity. ATT&CK is open and available to any person or organization for use at no charge.</p> </div>   </div> </div> </div> <div id="matrix-section" class="container-fluid bg-alternate pt-5 pb-3"> <div id="matrix-header" class="container text-center"> <h2>ATT&CK Matrix for Enterprise</h2> </div> <div id="matrix-enterprise"> <div id="tour-matrix-container"> <div class="matrix-controls"> <div class="btn-toolbar" role="toolbar" aria-label="matrix controls"> <div class="btn-group mr-2" role="group"> <div class="btn-group" role="group"> <button class="btn btn-default dropdown-toggle" id="layout-options" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" data-selected_layout="side">layout: side</button> <div class="dropdown-menu" aria-labelledby="layout-options"> <a class="dropdown-item layout-button side active" href="#" onclick="showSideMatrix()"> side </a> <a class="dropdown-item layout-button flat" href="#" onclick="showFlatMatrix(); "> flat </a> </div> </div> </div> <div class="btn-group mr-2" role="group"> <button type="button" class="btn btn-default" onclick="toggleAllMatrixSubTechniques(true)">show sub-techniques</button> <button type="button" class="btn btn-default" onclick="toggleAllMatrixSubTechniques(false)">hide sub-techniques</button> </div>  </div> </div> <div id="layouts-content"> <div class="matrix-type side"> <div class="matrix-container p-3"> <div class="scroll-indicator-group"> <div class="scroll-indicator left"> <div class="cover"></div> </div> <div class="overflow-x-auto matrix-scroll-box pb-3"> <table class="matrix side"> <thead> <tr> <td class="tactic name"><a href="/versions/v16/tactics/TA0043" data-toggle="tooltip" data-placement="top" title="TA0043">Reconnaissance</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0042" data-toggle="tooltip" data-placement="top" title="TA0042">Resource Development</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0001" data-toggle="tooltip" data-placement="top" title="TA0001">Initial Access</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0002" data-toggle="tooltip" data-placement="top" title="TA0002">Execution</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0003" data-toggle="tooltip" data-placement="top" title="TA0003">Persistence</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0004" data-toggle="tooltip" data-placement="top" title="TA0004">Privilege Escalation</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0005" data-toggle="tooltip" data-placement="top" title="TA0005">Defense Evasion</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0006" data-toggle="tooltip" data-placement="top" title="TA0006">Credential Access</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0007" data-toggle="tooltip" data-placement="top" title="TA0007">Discovery</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0008" data-toggle="tooltip" data-placement="top" title="TA0008">Lateral Movement</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0009" data-toggle="tooltip" data-placement="top" title="TA0009">Collection</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0011" data-toggle="tooltip" data-placement="top" title="TA0011">Command and Control</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0010" data-toggle="tooltip" data-placement="top" title="TA0010">Exfiltration</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0040" data-toggle="tooltip" data-placement="top" title="TA0040">Impact</a></td> </tr> <tr> <td class="tactic count"> 10 techniques </td> <td class="tactic count"> 8 techniques </td> <td class="tactic count"> 10 techniques </td> <td class="tactic count"> 14 techniques </td> <td class="tactic count"> 20 techniques </td> <td class="tactic count"> 14 techniques </td> <td class="tactic count"> 44 techniques </td> <td class="tactic count"> 17 techniques </td> <td class="tactic count"> 32 techniques </td> <td class="tactic count"> 9 techniques </td> <td class="tactic count"> 17 techniques </td> <td class="tactic count"> 18 techniques </td> <td class="tactic count"> 9 techniques </td> <td class="tactic count"> 14 techniques </td> </tr> </thead> <tbody> <tr> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b"> <a href="/versions/v16/techniques/T1595" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b" title="T1595">Active Scanning <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--db8f5003-3b20-48f0-9b76-123e44208120"> <a href="/versions/v16/techniques/T1595/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--db8f5003-3b20-48f0-9b76-123e44208120" title="T1595.001">Scanning IP Blocks</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5502c4e9-24ef-4d5f-8ee9-9e906c2f82c4"> <a href="/versions/v16/techniques/T1595/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5502c4e9-24ef-4d5f-8ee9-9e906c2f82c4" title="T1595.002">Vulnerability Scanning</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bed04f7d-e48a-4e76-bd0f-4c57fe31fc46"> <a href="/versions/v16/techniques/T1595/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bed04f7d-e48a-4e76-bd0f-4c57fe31fc46" title="T1595.003">Wordlist Scanning</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" id="tour-side-technique" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f"> <a href="/versions/v16/techniques/T1592" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f" title="T1592">Gather Victim Host Information <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f sidebar--tour" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f'); tour_technique_clicked();"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td" id="tour-side-subtechniques" > <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f subtechniques--tour"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--24286c33-d4a4-4419-85c2-1d094a896c26"> <a href="/versions/v16/techniques/T1592/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--24286c33-d4a4-4419-85c2-1d094a896c26" title="T1592.001">Hardware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--baf60e1a-afe5-4d31-830f-1b1ba2351884"> <a href="/versions/v16/techniques/T1592/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--baf60e1a-afe5-4d31-830f-1b1ba2351884" title="T1592.002">Software</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--b85f6ce5-81e8-4f36-aff2-3df9d02a9c9d"> <a href="/versions/v16/techniques/T1592/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--b85f6ce5-81e8-4f36-aff2-3df9d02a9c9d" title="T1592.003">Firmware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--774ad5bb-2366-4c13-a8a9-65e50b292e7c"> <a href="/versions/v16/techniques/T1592/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--774ad5bb-2366-4c13-a8a9-65e50b292e7c" title="T1592.004">Client Configurations</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4"> <a href="/versions/v16/techniques/T1589" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4" title="T1589">Gather Victim Identity Information <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bc76d0a4-db11-4551-9ac4-01a469cfb161"> <a href="/versions/v16/techniques/T1589/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bc76d0a4-db11-4551-9ac4-01a469cfb161" title="T1589.001">Credentials</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--69f897fd-12a9-4c89-ad6a-46d2f3c38262"> <a href="/versions/v16/techniques/T1589/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--69f897fd-12a9-4c89-ad6a-46d2f3c38262" title="T1589.002">Email Addresses</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--76551c52-b111-4884-bc47-ff3e728f0156"> <a href="/versions/v16/techniques/T1589/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--76551c52-b111-4884-bc47-ff3e728f0156" title="T1589.003">Employee Names</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109"> <a href="/versions/v16/techniques/T1590" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109" title="T1590">Gather Victim Network Information <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--e3b168bd-fcd7-439e-9382-2e6c2f63514d"> <a href="/versions/v16/techniques/T1590/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--e3b168bd-fcd7-439e-9382-2e6c2f63514d" title="T1590.001">Domain Properties</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0ff59227-8aa8-4c09-bf1f-925605bd07ea"> <a href="/versions/v16/techniques/T1590/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0ff59227-8aa8-4c09-bf1f-925605bd07ea" title="T1590.002">DNS</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--36aa137f-5166-41f8-b2f0-a4cfa1b4133e"> <a href="/versions/v16/techniques/T1590/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--36aa137f-5166-41f8-b2f0-a4cfa1b4133e" title="T1590.003">Network Trust Dependencies</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--34ab90a3-05f6-4259-8f21-621081fdaba5"> <a href="/versions/v16/techniques/T1590/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--34ab90a3-05f6-4259-8f21-621081fdaba5" title="T1590.004">Network Topology</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0dda99f0-4701-48ca-9774-8504922e92d3"> <a href="/versions/v16/techniques/T1590/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0dda99f0-4701-48ca-9774-8504922e92d3" title="T1590.005">IP Addresses</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6c2957f9-502a-478c-b1dd-d626c0659413"> <a href="/versions/v16/techniques/T1590/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6c2957f9-502a-478c-b1dd-d626c0659413" title="T1590.006">Network Security Appliances</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23"> <a href="/versions/v16/techniques/T1591" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23" title="T1591">Gather Victim Org Information <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ed730f20-0e44-48b9-85f8-0e2adeb76867"> <a href="/versions/v16/techniques/T1591/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ed730f20-0e44-48b9-85f8-0e2adeb76867" title="T1591.001">Determine Physical Locations</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6ee2dc99-91ad-4534-a7d8-a649358c331f"> <a href="/versions/v16/techniques/T1591/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6ee2dc99-91ad-4534-a7d8-a649358c331f" title="T1591.002">Business Relationships</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2339cf19-8f1e-48f7-8a91-0262ba547b6f"> <a href="/versions/v16/techniques/T1591/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2339cf19-8f1e-48f7-8a91-0262ba547b6f" title="T1591.003">Identify Business Tempo</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cc723aff-ec88-40e3-a224-5af9fd983cc4"> <a href="/versions/v16/techniques/T1591/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cc723aff-ec88-40e3-a224-5af9fd983cc4" title="T1591.004">Identify Roles</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a"> <a href="/versions/v16/techniques/T1598" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a" title="T1598">Phishing for Information <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--f870408c-b1cd-49c7-a5c7-0ef0fc496cc6"> <a href="/versions/v16/techniques/T1598/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--f870408c-b1cd-49c7-a5c7-0ef0fc496cc6" title="T1598.001">Spearphishing Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--8982a661-d84c-48c0-b4ec-1db29c6cf3bc"> <a href="/versions/v16/techniques/T1598/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--8982a661-d84c-48c0-b4ec-1db29c6cf3bc" title="T1598.002">Spearphishing Attachment</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2d3f5b3c-54ca-4f4d-bb1f-849346d31230"> <a href="/versions/v16/techniques/T1598/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2d3f5b3c-54ca-4f4d-bb1f-849346d31230" title="T1598.003">Spearphishing Link</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6a5d222a-a7e0-4656-b110-782c33098289"> <a href="/versions/v16/techniques/T1598/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6a5d222a-a7e0-4656-b110-782c33098289" title="T1598.004">Spearphishing Voice</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4"> <a href="/versions/v16/techniques/T1597" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4" title="T1597">Search Closed Sources <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--51e54974-a541-4fb6-a61b-0518e4c6de41"> <a href="/versions/v16/techniques/T1597/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--51e54974-a541-4fb6-a61b-0518e4c6de41" title="T1597.001">Threat Intel Vendors</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0a241b6c-7bb2-48f9-98f7-128145b4d27f"> <a href="/versions/v16/techniques/T1597/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0a241b6c-7bb2-48f9-98f7-128145b4d27f" title="T1597.002">Purchase Technical Data</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0"> <a href="/versions/v16/techniques/T1596" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0" title="T1596">Search Open Technical Databases <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--17fd695c-b88c-455a-a3d1-43b6cb728532"> <a href="/versions/v16/techniques/T1596/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--17fd695c-b88c-455a-a3d1-43b6cb728532" title="T1596.001">DNS/Passive DNS</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--166de1c6-2814-4fe5-8438-4e80f76b169f"> <a href="/versions/v16/techniques/T1596/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--166de1c6-2814-4fe5-8438-4e80f76b169f" title="T1596.002">WHOIS</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0979abf9-4e26-43ec-9b6e-54efc4e70fca"> <a href="/versions/v16/techniques/T1596/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0979abf9-4e26-43ec-9b6e-54efc4e70fca" title="T1596.003">Digital Certificates</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--91177e6d-b616-4a03-ba4b-f3b32f7dda75"> <a href="/versions/v16/techniques/T1596/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--91177e6d-b616-4a03-ba4b-f3b32f7dda75" title="T1596.004">CDNs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ec4be82f-940c-4dcb-87fe-2bbdd17c692f"> <a href="/versions/v16/techniques/T1596/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ec4be82f-940c-4dcb-87fe-2bbdd17c692f" title="T1596.005">Scan Databases</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365"> <a href="/versions/v16/techniques/T1593" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365" title="T1593">Search Open Websites/Domains <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3"> <a href="/versions/v16/techniques/T1593/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3" title="T1593.001">Social Media</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6e561441-8431-4773-a9b8-ccf28ef6a968"> <a href="/versions/v16/techniques/T1593/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6e561441-8431-4773-a9b8-ccf28ef6a968" title="T1593.002">Search Engines</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--70910fbd-58dc-4c1c-8c48-814d11fcd022"> <a href="/versions/v16/techniques/T1593/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--70910fbd-58dc-4c1c-8c48-814d11fcd022" title="T1593.003">Code Repositories</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--16cdd21f-da65-4e4f-bc04-dd7d198c7b26"> <a href="/versions/v16/techniques/T1594" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--16cdd21f-da65-4e4f-bc04-dd7d198c7b26" title="T1594">Search Victim-Owned Websites</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--16cdd21f-da65-4e4f-bc04-dd7d198c7b26"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--d21bb61f-08ad-4dc1-b001-81ca6cb79954"> <a href="/versions/v16/techniques/T1650" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--d21bb61f-08ad-4dc1-b001-81ca6cb79954" title="T1650">Acquire Access</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--d21bb61f-08ad-4dc1-b001-81ca6cb79954"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2"> <a href="/versions/v16/techniques/T1583" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2" title="T1583">Acquire Infrastructure <sub>(8)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--40f5caa0-4cb7-4117-89fc-d421bb493df3"> <a href="/versions/v16/techniques/T1583/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--40f5caa0-4cb7-4117-89fc-d421bb493df3" title="T1583.001">Domains</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--197ef1b9-e764-46c3-b96c-23f77985dc81"> <a href="/versions/v16/techniques/T1583/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--197ef1b9-e764-46c3-b96c-23f77985dc81" title="T1583.002">DNS Server</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--79da0971-3147-4af6-a4f5-e8cd447cd795"> <a href="/versions/v16/techniques/T1583/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--79da0971-3147-4af6-a4f5-e8cd447cd795" title="T1583.003">Virtual Private Server</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--60c4b628-4807-4b0b-bbf5-fdac8643c337"> <a href="/versions/v16/techniques/T1583/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--60c4b628-4807-4b0b-bbf5-fdac8643c337" title="T1583.004">Server</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31225cd3-cd46-4575-b287-c2c14011c074"> <a href="/versions/v16/techniques/T1583/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31225cd3-cd46-4575-b287-c2c14011c074" title="T1583.005">Botnet</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--88d31120-5bc7-4ce3-a9c0-7cf147be8e54"> <a href="/versions/v16/techniques/T1583/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--88d31120-5bc7-4ce3-a9c0-7cf147be8e54" title="T1583.006">Web Services</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--04a5a8ab-3bc8-4c83-95c9-55274a89786d"> <a href="/versions/v16/techniques/T1583/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--04a5a8ab-3bc8-4c83-95c9-55274a89786d" title="T1583.007">Serverless</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--155207c0-7f53-4f13-a06b-0a9907ef5096"> <a href="/versions/v16/techniques/T1583/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--155207c0-7f53-4f13-a06b-0a9907ef5096" title="T1583.008">Malvertising</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a"> <a href="/versions/v16/techniques/T1586" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a" title="T1586">Compromise Accounts <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--274770e0-2612-4ccf-a678-ef8e7bad365d"> <a href="/versions/v16/techniques/T1586/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--274770e0-2612-4ccf-a678-ef8e7bad365d" title="T1586.001">Social Media Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3dc8c101-d4db-4f4d-8150-1b5a76ca5f1b"> <a href="/versions/v16/techniques/T1586/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3dc8c101-d4db-4f4d-8150-1b5a76ca5f1b" title="T1586.002">Email Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3d52e51e-f6db-4719-813c-48002a99f43a"> <a href="/versions/v16/techniques/T1586/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3d52e51e-f6db-4719-813c-48002a99f43a" title="T1586.003">Cloud Accounts</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9"> <a href="/versions/v16/techniques/T1584" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9" title="T1584">Compromise Infrastructure <sub>(8)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f9cc4d06-775f-4ee1-b401-4e2cc0da30ba"> <a href="/versions/v16/techniques/T1584/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f9cc4d06-775f-4ee1-b401-4e2cc0da30ba" title="T1584.001">Domains</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c2f59d25-87fe-44aa-8f83-e8e59d077bf5"> <a href="/versions/v16/techniques/T1584/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c2f59d25-87fe-44aa-8f83-e8e59d077bf5" title="T1584.002">DNS Server</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--39cc9f64-cf74-4a48-a4d8-fe98c54a02e0"> <a href="/versions/v16/techniques/T1584/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--39cc9f64-cf74-4a48-a4d8-fe98c54a02e0" title="T1584.003">Virtual Private Server</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e196b5c5-8118-4a1c-ab8a-936586ce3db5"> <a href="/versions/v16/techniques/T1584/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e196b5c5-8118-4a1c-ab8a-936586ce3db5" title="T1584.004">Server</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--810d8072-afb6-4a56-9ee7-86379ac4a6f3"> <a href="/versions/v16/techniques/T1584/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--810d8072-afb6-4a56-9ee7-86379ac4a6f3" title="T1584.005">Botnet</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ae797531-3219-49a4-bccf-324ad7a4c7b2"> <a href="/versions/v16/techniques/T1584/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ae797531-3219-49a4-bccf-324ad7a4c7b2" title="T1584.006">Web Services</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--df1bc34d-1634-4c93-b89e-8120994fce77"> <a href="/versions/v16/techniques/T1584/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--df1bc34d-1634-4c93-b89e-8120994fce77" title="T1584.007">Serverless</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--149b477f-f364-4824-b1b5-aa1d56115869"> <a href="/versions/v16/techniques/T1584/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--149b477f-f364-4824-b1b5-aa1d56115869" title="T1584.008">Network Devices</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf"> <a href="/versions/v16/techniques/T1587" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf" title="T1587">Develop Capabilities <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--212306d8-efa4-44c9-8c2d-ed3d2e224aa0"> <a href="/versions/v16/techniques/T1587/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--212306d8-efa4-44c9-8c2d-ed3d2e224aa0" title="T1587.001">Malware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--34b3f738-bd64-40e5-a112-29b0542bc8bf"> <a href="/versions/v16/techniques/T1587/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--34b3f738-bd64-40e5-a112-29b0542bc8bf" title="T1587.002">Code Signing Certificates</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--1cec9319-743b-4840-bb65-431547bce82a"> <a href="/versions/v16/techniques/T1587/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--1cec9319-743b-4840-bb65-431547bce82a" title="T1587.003">Digital Certificates</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--bbc3cba7-84ae-410d-b18b-16750731dfa2"> <a href="/versions/v16/techniques/T1587/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--bbc3cba7-84ae-410d-b18b-16750731dfa2" title="T1587.004">Exploits</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8"> <a href="/versions/v16/techniques/T1585" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8" title="T1585">Establish Accounts <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--b1ccd744-3f78-4a0e-9bb2-2002057f7928"> <a href="/versions/v16/techniques/T1585/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--b1ccd744-3f78-4a0e-9bb2-2002057f7928" title="T1585.001">Social Media Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--65013dd2-bc61-43e3-afb5-a14c4fa7437a"> <a href="/versions/v16/techniques/T1585/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--65013dd2-bc61-43e3-afb5-a14c4fa7437a" title="T1585.002">Email Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--926d8cfd-1d0d-4da2-ab49-3ca10ec3f3b5"> <a href="/versions/v16/techniques/T1585/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--926d8cfd-1d0d-4da2-ab49-3ca10ec3f3b5" title="T1585.003">Cloud Accounts</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1"> <a href="/versions/v16/techniques/T1588" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1" title="T1588">Obtain Capabilities <sub>(7)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7807d3a4-a885-4639-a786-c1ed41484970"> <a href="/versions/v16/techniques/T1588/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7807d3a4-a885-4639-a786-c1ed41484970" title="T1588.001">Malware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--a2fdce72-04b2-409a-ac10-cc1695f4fce0"> <a href="/versions/v16/techniques/T1588/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--a2fdce72-04b2-409a-ac10-cc1695f4fce0" title="T1588.002">Tool</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e7cbc1de-1f79-48ee-abfd-da1241c65a15"> <a href="/versions/v16/techniques/T1588/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e7cbc1de-1f79-48ee-abfd-da1241c65a15" title="T1588.003">Code Signing Certificates</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--19401639-28d0-4c3c-adcc-bc2ba22f6421"> <a href="/versions/v16/techniques/T1588/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--19401639-28d0-4c3c-adcc-bc2ba22f6421" title="T1588.004">Digital Certificates</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f4b843c1-7e92-4701-8fed-ce82f8be2636"> <a href="/versions/v16/techniques/T1588/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f4b843c1-7e92-4701-8fed-ce82f8be2636" title="T1588.005">Exploits</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--2b5aa86b-a0df-4382-848d-30abea443327"> <a href="/versions/v16/techniques/T1588/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--2b5aa86b-a0df-4382-848d-30abea443327" title="T1588.006">Vulnerabilities</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0cc222f5-c3ff-48e6-9f52-3314baf9d37e"> <a href="/versions/v16/techniques/T1588/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0cc222f5-c3ff-48e6-9f52-3314baf9d37e" title="T1588.007">Artificial Intelligence</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0"> <a href="/versions/v16/techniques/T1608" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0" title="T1608">Stage Capabilities <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3ee16395-03f0-4690-a32e-69ce9ada0f9e"> <a href="/versions/v16/techniques/T1608/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3ee16395-03f0-4690-a32e-69ce9ada0f9e" title="T1608.001">Upload Malware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--506f6f49-7045-4156-9007-7474cb44ad6d"> <a href="/versions/v16/techniques/T1608/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--506f6f49-7045-4156-9007-7474cb44ad6d" title="T1608.002">Upload Tool</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c071d8c1-3b3a-4f22-9407-ca4e96921069"> <a href="/versions/v16/techniques/T1608/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c071d8c1-3b3a-4f22-9407-ca4e96921069" title="T1608.003">Install Digital Certificate</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31fe0ba2-62fd-4fd9-9293-4043d84f7fe9"> <a href="/versions/v16/techniques/T1608/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31fe0ba2-62fd-4fd9-9293-4043d84f7fe9" title="T1608.004">Drive-by Target</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84ae8255-b4f4-4237-b5c5-e717405a9701"> <a href="/versions/v16/techniques/T1608/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84ae8255-b4f4-4237-b5c5-e717405a9701" title="T1608.005">Link Target</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e5d550f3-2202-4634-85f2-4a200a1d49b3"> <a href="/versions/v16/techniques/T1608/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e5d550f3-2202-4634-85f2-4a200a1d49b3" title="T1608.006">SEO Poisoning</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c"> <a href="/versions/v16/techniques/T1659" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c" title="T1659">Content Injection</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6"> <a href="/versions/v16/techniques/T1189" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6" title="T1189">Drive-by Compromise</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f886f2a-874f-4333-b794-aa6075009b1c"> <a href="/versions/v16/techniques/T1190" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f886f2a-874f-4333-b794-aa6075009b1c" title="T1190">Exploit Public-Facing Application</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f886f2a-874f-4333-b794-aa6075009b1c"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d"> <a href="/versions/v16/techniques/T1133" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d" title="T1133">External Remote Services</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d40239b3-05ff-46d8-9bdd-b46d13463ef9"> <a href="/versions/v16/techniques/T1200" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d40239b3-05ff-46d8-9bdd-b46d13463ef9" title="T1200">Hardware Additions</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d40239b3-05ff-46d8-9bdd-b46d13463ef9"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <a href="/versions/v16/techniques/T1566" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" title="T1566">Phishing <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2e34237d-8574-43f6-aace-ae2915de8597"> <a href="/versions/v16/techniques/T1566/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2e34237d-8574-43f6-aace-ae2915de8597" title="T1566.001">Spearphishing Attachment</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7"> <a href="/versions/v16/techniques/T1566/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7" title="T1566.002">Spearphishing Link</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f6ad61ee-65f3-4bd0-a3f5-2f0accb36317"> <a href="/versions/v16/techniques/T1566/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f6ad61ee-65f3-4bd0-a3f5-2f0accb36317" title="T1566.003">Spearphishing via Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974"> <a href="/versions/v16/techniques/T1566/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974" title="T1566.004">Spearphishing Voice</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4"> <a href="/versions/v16/techniques/T1091" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4" title="T1091">Replication Through Removable Media</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7"> <a href="/versions/v16/techniques/T1195" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7" title="T1195">Supply Chain Compromise <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--191cc6af-1bb2-4344-ab5f-28e496638720"> <a href="/versions/v16/techniques/T1195/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--191cc6af-1bb2-4344-ab5f-28e496638720" title="T1195.001">Compromise Software Dependencies and Development Tools</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bd369cd9-abb8-41ce-b5bb-fff23ee86c00"> <a href="/versions/v16/techniques/T1195/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bd369cd9-abb8-41ce-b5bb-fff23ee86c00" title="T1195.002">Compromise Software Supply Chain</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--39131305-9282-45e4-ac3b-591d2d4fc3ef"> <a href="/versions/v16/techniques/T1195/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--39131305-9282-45e4-ac3b-591d2d4fc3ef" title="T1195.003">Compromise Hardware Supply Chain</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925"> <a href="/versions/v16/techniques/T1199" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925" title="T1199">Trusted Relationship</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d94b3ae9-8059-4989-8e9f-ea0f601f80a7"> <a href="/versions/v16/techniques/T1651" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d94b3ae9-8059-4989-8e9f-ea0f601f80a7" title="T1651">Cloud Administration Command</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d94b3ae9-8059-4989-8e9f-ea0f601f80a7"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <a href="/versions/v16/techniques/T1059" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" title="T1059">Command and Scripting Interpreter <sub>(11)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--970a3432-3237-47ad-bcca-7d8cbb217736"> <a href="/versions/v16/techniques/T1059/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--970a3432-3237-47ad-bcca-7d8cbb217736" title="T1059.001">PowerShell</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--37b11151-1776-4f8f-b328-30939fbf2ceb"> <a href="/versions/v16/techniques/T1059/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--37b11151-1776-4f8f-b328-30939fbf2ceb" title="T1059.002">AppleScript</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d1fcf083-a721-4223-aedf-bf8960798d62"> <a href="/versions/v16/techniques/T1059/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d1fcf083-a721-4223-aedf-bf8960798d62" title="T1059.003">Windows Command Shell</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a9d4b653-6915-42af-98b2-5758c4ceee56"> <a href="/versions/v16/techniques/T1059/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a9d4b653-6915-42af-98b2-5758c4ceee56" title="T1059.004">Unix Shell</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--dfd7cc1d-e1d8-4394-a198-97c4cab8aa67"> <a href="/versions/v16/techniques/T1059/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--dfd7cc1d-e1d8-4394-a198-97c4cab8aa67" title="T1059.005">Visual Basic</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--cc3502b5-30cc-4473-ad48-42d51a6ef6d1"> <a href="/versions/v16/techniques/T1059/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--cc3502b5-30cc-4473-ad48-42d51a6ef6d1" title="T1059.006">Python</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d"> <a href="/versions/v16/techniques/T1059/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d" title="T1059.007">JavaScript</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--818302b2-d640-477b-bf88-873120ce85c4"> <a href="/versions/v16/techniques/T1059/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--818302b2-d640-477b-bf88-873120ce85c4" title="T1059.008">Network Device CLI</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf"> <a href="/versions/v16/techniques/T1059/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf" title="T1059.009">Cloud API</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--3a32740a-11b0-4bcf-b0a9-3abd0f6d3cd5"> <a href="/versions/v16/techniques/T1059/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--3a32740a-11b0-4bcf-b0a9-3abd0f6d3cd5" title="T1059.010">AutoHotKey & AutoIT</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--afddee82-3385-4682-ad90-eeced33f2d07"> <a href="/versions/v16/techniques/T1059/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--afddee82-3385-4682-ad90-eeced33f2d07" title="T1059.011">Lua</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7b50a1d3-4ca7-45d1-989d-a6503f04bfe1"> <a href="/versions/v16/techniques/T1609" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7b50a1d3-4ca7-45d1-989d-a6503f04bfe1" title="T1609">Container Administration Command</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7b50a1d3-4ca7-45d1-989d-a6503f04bfe1"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92"> <a href="/versions/v16/techniques/T1610" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92" title="T1610">Deploy Container</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--be2dcee9-a7a7-4e38-afd6-21b31ecc3d63"> <a href="/versions/v16/techniques/T1203" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--be2dcee9-a7a7-4e38-afd6-21b31ecc3d63" title="T1203">Exploitation for Client Execution</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--be2dcee9-a7a7-4e38-afd6-21b31ecc3d63"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d"> <a href="/versions/v16/techniques/T1559" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d" title="T1559">Inter-Process Communication <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2f6b4ed7-fef1-44ba-bcb8-1b4beb610b64"> <a href="/versions/v16/techniques/T1559/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2f6b4ed7-fef1-44ba-bcb8-1b4beb610b64" title="T1559.001">Component Object Model</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232a7e42-cd6e-4902-8fe9-2960f529dd4d"> <a href="/versions/v16/techniques/T1559/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232a7e42-cd6e-4902-8fe9-2960f529dd4d" title="T1559.002">Dynamic Data Exchange</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8252f135-ed26-4ce1-ae61-f26e94429a19"> <a href="/versions/v16/techniques/T1559/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8252f135-ed26-4ce1-ae61-f26e94429a19" title="T1559.003">XPC Services</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--391d824f-0ef1-47a0-b0ee-c59a75e27670"> <a href="/versions/v16/techniques/T1106" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--391d824f-0ef1-47a0-b0ee-c59a75e27670" title="T1106">Native API</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--391d824f-0ef1-47a0-b0ee-c59a75e27670"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <a href="/versions/v16/techniques/T1053" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" title="T1053">Scheduled Task/Job <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0"> <a href="/versions/v16/techniques/T1053/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0" title="T1053.002">At</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c"> <a href="/versions/v16/techniques/T1053/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c" title="T1053.003">Cron</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9"> <a href="/versions/v16/techniques/T1053/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9" title="T1053.005">Scheduled Task</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21"> <a href="/versions/v16/techniques/T1053/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21" title="T1053.006">Systemd Timers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096"> <a href="/versions/v16/techniques/T1053/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096" title="T1053.007">Container Orchestration Job</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--e848506b-8484-4410-8017-3d235a52f5b3"> <a href="/versions/v16/techniques/T1648" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--e848506b-8484-4410-8017-3d235a52f5b3" title="T1648">Serverless Execution</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--e848506b-8484-4410-8017-3d235a52f5b3"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0a5231ec-41af-4a35-83d0-6bdf11f28c65"> <a href="/versions/v16/techniques/T1129" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0a5231ec-41af-4a35-83d0-6bdf11f28c65" title="T1129">Shared Modules</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0a5231ec-41af-4a35-83d0-6bdf11f28c65"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414"> <a href="/versions/v16/techniques/T1072" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414" title="T1072">Software Deployment Tools</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253"> <a href="/versions/v16/techniques/T1569" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253" title="T1569">System Services <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--810aa4ad-61c9-49cb-993f-daa06199421d"> <a href="/versions/v16/techniques/T1569/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--810aa4ad-61c9-49cb-993f-daa06199421d" title="T1569.001">Launchctl</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f1951e8a-500e-4a26-8803-76d95c4554b4"> <a href="/versions/v16/techniques/T1569/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f1951e8a-500e-4a26-8803-76d95c4554b4" title="T1569.002">Service Execution</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5"> <a href="/versions/v16/techniques/T1204" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5" title="T1204">User Execution <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--ef67e13e-5598-4adc-bdb2-998225874fa9"> <a href="/versions/v16/techniques/T1204/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--ef67e13e-5598-4adc-bdb2-998225874fa9" title="T1204.001">Malicious Link</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232b7f21-adf9-4b42-b936-b9d6f7df856e"> <a href="/versions/v16/techniques/T1204/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232b7f21-adf9-4b42-b936-b9d6f7df856e" title="T1204.002">Malicious File</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--b0c74ef9-c61e-4986-88cb-78da98a355ec"> <a href="/versions/v16/techniques/T1204/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--b0c74ef9-c61e-4986-88cb-78da98a355ec" title="T1204.003">Malicious Image</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--01a5a209-b94c-450b-b7f9-946497d91055"> <a href="/versions/v16/techniques/T1047" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--01a5a209-b94c-450b-b7f9-946497d91055" title="T1047">Windows Management Instrumentation</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--01a5a209-b94c-450b-b7f9-946497d91055"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/versions/v16/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(7)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/versions/v16/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306"> <a href="/versions/v16/techniques/T1098/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306" title="T1098.002">Additional Email Delegate Permissions</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/versions/v16/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4"> <a href="/versions/v16/techniques/T1098/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4" title="T1098.004">SSH Authorized Keys</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/versions/v16/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64"> <a href="/versions/v16/techniques/T1098/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64" title="T1098.006">Additional Container Cluster Roles</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291"> <a href="/versions/v16/techniques/T1098/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291" title="T1098.007">Additional Local or Domain Groups</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7"> <a href="/versions/v16/techniques/T1197" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7" title="T1197">BITS Jobs</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <a href="/versions/v16/techniques/T1547" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" title="T1547">Boot or Logon Autostart Execution <sub>(14)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279"> <a href="/versions/v16/techniques/T1547/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279" title="T1547.001">Registry Run Keys / Startup Folder</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec"> <a href="/versions/v16/techniques/T1547/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec" title="T1547.002">Authentication Package</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc"> <a href="/versions/v16/techniques/T1547/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc" title="T1547.003">Time Providers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35"> <a href="/versions/v16/techniques/T1547/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35" title="T1547.004">Winlogon Helper DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462"> <a href="/versions/v16/techniques/T1547/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462" title="T1547.005">Security Support Provider</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6"> <a href="/versions/v16/techniques/T1547/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6" title="T1547.006">Kernel Modules and Extensions</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e"> <a href="/versions/v16/techniques/T1547/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e" title="T1547.007">Re-opened Applications</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4"> <a href="/versions/v16/techniques/T1547/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4" title="T1547.008">LSASS Driver</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179"> <a href="/versions/v16/techniques/T1547/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179" title="T1547.009">Shortcut Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe"> <a href="/versions/v16/techniques/T1547/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe" title="T1547.010">Port Monitors</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad"> <a href="/versions/v16/techniques/T1547/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad" title="T1547.012">Print Processors</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11"> <a href="/versions/v16/techniques/T1547/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11" title="T1547.013">XDG Autostart Entries</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67"> <a href="/versions/v16/techniques/T1547/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67" title="T1547.014">Active Setup</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3"> <a href="/versions/v16/techniques/T1547/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3" title="T1547.015">Login Items</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <a href="/versions/v16/techniques/T1037" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" title="T1037">Boot or Logon Initialization Scripts <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3"> <a href="/versions/v16/techniques/T1037/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3" title="T1037.001">Logon Script (Windows)</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0"> <a href="/versions/v16/techniques/T1037/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0" title="T1037.002">Login Hook</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99"> <a href="/versions/v16/techniques/T1037/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99" title="T1037.003">Network Logon Script</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211"> <a href="/versions/v16/techniques/T1037/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211" title="T1037.004">RC Scripts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f"> <a href="/versions/v16/techniques/T1037/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f" title="T1037.005">Startup Items</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8"> <a href="/versions/v16/techniques/T1176" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8" title="T1176">Browser Extensions</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--960c3c86-1480-4d72-b4e0-8c242e84a5c5"> <a href="/versions/v16/techniques/T1554" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--960c3c86-1480-4d72-b4e0-8c242e84a5c5" title="T1554">Compromise Host Software Binary</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--960c3c86-1480-4d72-b4e0-8c242e84a5c5"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <a href="/versions/v16/techniques/T1136" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" title="T1136">Create Account <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--635cbe30-392d-4e27-978e-66774357c762"> <a href="/versions/v16/techniques/T1136/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--635cbe30-392d-4e27-978e-66774357c762" title="T1136.001">Local Account</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7610cada-1499-41a4-b3dd-46467b68d177"> <a href="/versions/v16/techniques/T1136/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7610cada-1499-41a4-b3dd-46467b68d177" title="T1136.002">Domain Account</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b"> <a href="/versions/v16/techniques/T1136/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b" title="T1136.003">Cloud Account</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <a href="/versions/v16/techniques/T1543" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" title="T1543">Create or Modify System Process <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584"> <a href="/versions/v16/techniques/T1543/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584" title="T1543.001">Launch Agent</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b"> <a href="/versions/v16/techniques/T1543/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b" title="T1543.002">Systemd Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32"> <a href="/versions/v16/techniques/T1543/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32" title="T1543.003">Windows Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba"> <a href="/versions/v16/techniques/T1543/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba" title="T1543.004">Launch Daemon</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a"> <a href="/versions/v16/techniques/T1543/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a" title="T1543.005">Container Service</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <a href="/versions/v16/techniques/T1546" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" title="T1546">Event Triggered Execution <sub>(17)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c"> <a href="/versions/v16/techniques/T1546/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c" title="T1546.001">Change Default File Association</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf"> <a href="/versions/v16/techniques/T1546/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf" title="T1546.002">Screensaver</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58"> <a href="/versions/v16/techniques/T1546/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58" title="T1546.003">Windows Management Instrumentation Event Subscription</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2"> <a href="/versions/v16/techniques/T1546/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2" title="T1546.004">Unix Shell Configuration Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--63220765-d418-44de-8fae-694b3912317d"> <a href="/versions/v16/techniques/T1546/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--63220765-d418-44de-8fae-694b3912317d" title="T1546.005">Trap</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847"> <a href="/versions/v16/techniques/T1546/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847" title="T1546.006">LC_LOAD_DYLIB Addition</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed"> <a href="/versions/v16/techniques/T1546/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed" title="T1546.007">Netsh Helper DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5"> <a href="/versions/v16/techniques/T1546/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5" title="T1546.008">Accessibility Features</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c"> <a href="/versions/v16/techniques/T1546/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c" title="T1546.009">AppCert DLLs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd"> <a href="/versions/v16/techniques/T1546/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd" title="T1546.010">AppInit DLLs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83"> <a href="/versions/v16/techniques/T1546/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83" title="T1546.011">Application Shimming</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6"> <a href="/versions/v16/techniques/T1546/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6" title="T1546.012">Image File Execution Options Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3"> <a href="/versions/v16/techniques/T1546/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3" title="T1546.013">PowerShell Profile</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd"> <a href="/versions/v16/techniques/T1546/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd" title="T1546.014">Emond</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae"> <a href="/versions/v16/techniques/T1546/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae" title="T1546.015">Component Object Model Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56"> <a href="/versions/v16/techniques/T1546/016" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56" title="T1546.016">Installer Packages</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792"> <a href="/versions/v16/techniques/T1546/017" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792" title="T1546.017">Udev Rules</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d"> <a href="/versions/v16/techniques/T1133" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d" title="T1133">External Remote Services</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <a href="/versions/v16/techniques/T1574" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" title="T1574">Hijack Execution Flow <sub>(13)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34"> <a href="/versions/v16/techniques/T1574/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34" title="T1574.001">DLL Search Order Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b"> <a href="/versions/v16/techniques/T1574/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b" title="T1574.002">DLL Side-Loading</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490"> <a href="/versions/v16/techniques/T1574/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490" title="T1574.004">Dylib Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979"> <a href="/versions/v16/techniques/T1574/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979" title="T1574.005">Executable Installer File Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825"> <a href="/versions/v16/techniques/T1574/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825" title="T1574.006">Dynamic Linker Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32"> <a href="/versions/v16/techniques/T1574/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32" title="T1574.007">Path Interception by PATH Environment Variable</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2"> <a href="/versions/v16/techniques/T1574/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2" title="T1574.008">Path Interception by Search Order Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b"> <a href="/versions/v16/techniques/T1574/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b" title="T1574.009">Path Interception by Unquoted Path</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd"> <a href="/versions/v16/techniques/T1574/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd" title="T1574.010">Services File Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c"> <a href="/versions/v16/techniques/T1574/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c" title="T1574.011">Services Registry Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335"> <a href="/versions/v16/techniques/T1574/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335" title="T1574.012">COR_PROFILER</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde"> <a href="/versions/v16/techniques/T1574/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde" title="T1574.013">KernelCallbackTable</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8"> <a href="/versions/v16/techniques/T1574/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8" title="T1574.014">AppDomainManager</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f"> <a href="/versions/v16/techniques/T1525" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f" title="T1525">Implant Internal Image</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/versions/v16/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(9)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605"> <a href="/versions/v16/techniques/T1556/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605" title="T1556.001">Domain Controller Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42"> <a href="/versions/v16/techniques/T1556/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42" title="T1556.002">Password Filter DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771"> <a href="/versions/v16/techniques/T1556/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771" title="T1556.003">Pluggable Authentication Modules</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd"> <a href="/versions/v16/techniques/T1556/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd" title="T1556.004">Network Device Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48"> <a href="/versions/v16/techniques/T1556/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48" title="T1556.005">Reversible Encryption</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/versions/v16/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/versions/v16/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04"> <a href="/versions/v16/techniques/T1556/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04" title="T1556.008">Network Provider DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/versions/v16/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53"> <a href="/versions/v16/techniques/T1137" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53" title="T1137">Office Application Startup <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--79a47ad0-fc3b-4821-9f01-a026b1ddba21"> <a href="/versions/v16/techniques/T1137/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--79a47ad0-fc3b-4821-9f01-a026b1ddba21" title="T1137.001">Office Template Macros</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ed7efd4d-ce28-4a19-a8e6-c58011eb2c7a"> <a href="/versions/v16/techniques/T1137/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ed7efd4d-ce28-4a19-a8e6-c58011eb2c7a" title="T1137.002">Office Test</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a9e2cea0-c805-4bf8-9e31-f5f0513a3634"> <a href="/versions/v16/techniques/T1137/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a9e2cea0-c805-4bf8-9e31-f5f0513a3634" title="T1137.003">Outlook Forms</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf147104-abf9-4221-95d1-e81585859441"> <a href="/versions/v16/techniques/T1137/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf147104-abf9-4221-95d1-e81585859441" title="T1137.004">Outlook Home Page</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3d1b9d7e-3921-4d25-845a-7d9f15c0da44"> <a href="/versions/v16/techniques/T1137/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3d1b9d7e-3921-4d25-845a-7d9f15c0da44" title="T1137.005">Outlook Rules</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--34f1d81d-fe88-4f97-bd3b-a3164536255d"> <a href="/versions/v16/techniques/T1137/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--34f1d81d-fe88-4f97-bd3b-a3164536255d" title="T1137.006">Add-ins</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ea071aa0-8f17-416f-ab0d-2bab7e79003d"> <a href="/versions/v16/techniques/T1653" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ea071aa0-8f17-416f-ab0d-2bab7e79003d" title="T1653">Power Settings</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ea071aa0-8f17-416f-ab0d-2bab7e79003d"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <a href="/versions/v16/techniques/T1542" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" title="T1542">Pre-OS Boot <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada"> <a href="/versions/v16/techniques/T1542/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada" title="T1542.001">System Firmware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--791481f8-e96a-41be-b089-a088763083d4"> <a href="/versions/v16/techniques/T1542/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--791481f8-e96a-41be-b089-a088763083d4" title="T1542.002">Component Firmware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba"> <a href="/versions/v16/techniques/T1542/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba" title="T1542.003">Bootkit</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc"> <a href="/versions/v16/techniques/T1542/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc" title="T1542.004">ROMMONkit</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4"> <a href="/versions/v16/techniques/T1542/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4" title="T1542.005">TFTP Boot</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <a href="/versions/v16/techniques/T1053" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" title="T1053">Scheduled Task/Job <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0"> <a href="/versions/v16/techniques/T1053/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0" title="T1053.002">At</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c"> <a href="/versions/v16/techniques/T1053/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c" title="T1053.003">Cron</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9"> <a href="/versions/v16/techniques/T1053/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9" title="T1053.005">Scheduled Task</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21"> <a href="/versions/v16/techniques/T1053/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21" title="T1053.006">Systemd Timers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096"> <a href="/versions/v16/techniques/T1053/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096" title="T1053.007">Container Orchestration Job</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb"> <a href="/versions/v16/techniques/T1505" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb" title="T1505">Server Software Component <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f9e9365a-9ca2-4d9c-8e7c-050d73d1101a"> <a href="/versions/v16/techniques/T1505/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f9e9365a-9ca2-4d9c-8e7c-050d73d1101a" title="T1505.001">SQL Stored Procedures</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35187df2-31ed-43b6-a1f5-2f1d3d58d3f1"> <a href="/versions/v16/techniques/T1505/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35187df2-31ed-43b6-a1f5-2f1d3d58d3f1" title="T1505.002">Transport Agent</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5d0d3609-d06d-49e1-b9c9-b544e0c618cb"> <a href="/versions/v16/techniques/T1505/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5d0d3609-d06d-49e1-b9c9-b544e0c618cb" title="T1505.003">Web Shell</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b46a801b-fd98-491c-a25a-bca25d6e3001"> <a href="/versions/v16/techniques/T1505/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b46a801b-fd98-491c-a25a-bca25d6e3001" title="T1505.004">IIS Components</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--379809f6-2fac-42c1-bd2e-e9dee70b27f8"> <a href="/versions/v16/techniques/T1505/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--379809f6-2fac-42c1-bd2e-e9dee70b27f8" title="T1505.005">Terminal Services DLL</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <a href="/versions/v16/techniques/T1205" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" title="T1205">Traffic Signaling <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--451a9977-d255-43c9-b431-66de80130c8c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd"> <a href="/versions/v16/techniques/T1205/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd" title="T1205.001">Port Knocking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520"> <a href="/versions/v16/techniques/T1205/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520" title="T1205.002">Socket Filters</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/versions/v16/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9"> <a href="/versions/v16/techniques/T1548/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9" title="T1548.001">Setuid and Setgid</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073"> <a href="/versions/v16/techniques/T1548/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073" title="T1548.002">Bypass User Account Control</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0"> <a href="/versions/v16/techniques/T1548/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0" title="T1548.003">Sudo and Sudo Caching</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0"> <a href="/versions/v16/techniques/T1548/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0" title="T1548.004">Elevated Execution with Prompt</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/versions/v16/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb"> <a href="/versions/v16/techniques/T1548/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb" title="T1548.006">TCC Manipulation</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <a href="/versions/v16/techniques/T1134" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" title="T1134">Access Token Manipulation <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d"> <a href="/versions/v16/techniques/T1134/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d" title="T1134.001">Token Impersonation/Theft</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf"> <a href="/versions/v16/techniques/T1134/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf" title="T1134.002">Create Process with Token</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819"> <a href="/versions/v16/techniques/T1134/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819" title="T1134.003">Make and Impersonate Token</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a"> <a href="/versions/v16/techniques/T1134/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a" title="T1134.004">Parent PID Spoofing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023"> <a href="/versions/v16/techniques/T1134/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023" title="T1134.005">SID-History Injection</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/versions/v16/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(7)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/versions/v16/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306"> <a href="/versions/v16/techniques/T1098/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306" title="T1098.002">Additional Email Delegate Permissions</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/versions/v16/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4"> <a href="/versions/v16/techniques/T1098/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4" title="T1098.004">SSH Authorized Keys</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/versions/v16/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64"> <a href="/versions/v16/techniques/T1098/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64" title="T1098.006">Additional Container Cluster Roles</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291"> <a href="/versions/v16/techniques/T1098/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291" title="T1098.007">Additional Local or Domain Groups</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <a href="/versions/v16/techniques/T1547" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" title="T1547">Boot or Logon Autostart Execution <sub>(14)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279"> <a href="/versions/v16/techniques/T1547/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279" title="T1547.001">Registry Run Keys / Startup Folder</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec"> <a href="/versions/v16/techniques/T1547/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec" title="T1547.002">Authentication Package</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc"> <a href="/versions/v16/techniques/T1547/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc" title="T1547.003">Time Providers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35"> <a href="/versions/v16/techniques/T1547/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35" title="T1547.004">Winlogon Helper DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462"> <a href="/versions/v16/techniques/T1547/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462" title="T1547.005">Security Support Provider</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6"> <a href="/versions/v16/techniques/T1547/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6" title="T1547.006">Kernel Modules and Extensions</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e"> <a href="/versions/v16/techniques/T1547/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e" title="T1547.007">Re-opened Applications</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4"> <a href="/versions/v16/techniques/T1547/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4" title="T1547.008">LSASS Driver</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179"> <a href="/versions/v16/techniques/T1547/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179" title="T1547.009">Shortcut Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe"> <a href="/versions/v16/techniques/T1547/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe" title="T1547.010">Port Monitors</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad"> <a href="/versions/v16/techniques/T1547/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad" title="T1547.012">Print Processors</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11"> <a href="/versions/v16/techniques/T1547/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11" title="T1547.013">XDG Autostart Entries</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67"> <a href="/versions/v16/techniques/T1547/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67" title="T1547.014">Active Setup</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3"> <a href="/versions/v16/techniques/T1547/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3" title="T1547.015">Login Items</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <a href="/versions/v16/techniques/T1037" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" title="T1037">Boot or Logon Initialization Scripts <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3"> <a href="/versions/v16/techniques/T1037/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3" title="T1037.001">Logon Script (Windows)</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0"> <a href="/versions/v16/techniques/T1037/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0" title="T1037.002">Login Hook</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99"> <a href="/versions/v16/techniques/T1037/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99" title="T1037.003">Network Logon Script</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211"> <a href="/versions/v16/techniques/T1037/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211" title="T1037.004">RC Scripts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f"> <a href="/versions/v16/techniques/T1037/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f" title="T1037.005">Startup Items</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <a href="/versions/v16/techniques/T1543" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" title="T1543">Create or Modify System Process <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584"> <a href="/versions/v16/techniques/T1543/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584" title="T1543.001">Launch Agent</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b"> <a href="/versions/v16/techniques/T1543/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b" title="T1543.002">Systemd Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32"> <a href="/versions/v16/techniques/T1543/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32" title="T1543.003">Windows Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba"> <a href="/versions/v16/techniques/T1543/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba" title="T1543.004">Launch Daemon</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a"> <a href="/versions/v16/techniques/T1543/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a" title="T1543.005">Container Service</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/versions/v16/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163"> <a href="/versions/v16/techniques/T1484/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163" title="T1484.001">Group Policy Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/versions/v16/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4a5b7ade-8bb5-4853-84ed-23f262002665"> <a href="/versions/v16/techniques/T1611" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4a5b7ade-8bb5-4853-84ed-23f262002665" title="T1611">Escape to Host</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4a5b7ade-8bb5-4853-84ed-23f262002665"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <a href="/versions/v16/techniques/T1546" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" title="T1546">Event Triggered Execution <sub>(17)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c"> <a href="/versions/v16/techniques/T1546/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c" title="T1546.001">Change Default File Association</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf"> <a href="/versions/v16/techniques/T1546/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf" title="T1546.002">Screensaver</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58"> <a href="/versions/v16/techniques/T1546/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58" title="T1546.003">Windows Management Instrumentation Event Subscription</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2"> <a href="/versions/v16/techniques/T1546/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2" title="T1546.004">Unix Shell Configuration Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--63220765-d418-44de-8fae-694b3912317d"> <a href="/versions/v16/techniques/T1546/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--63220765-d418-44de-8fae-694b3912317d" title="T1546.005">Trap</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847"> <a href="/versions/v16/techniques/T1546/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847" title="T1546.006">LC_LOAD_DYLIB Addition</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed"> <a href="/versions/v16/techniques/T1546/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed" title="T1546.007">Netsh Helper DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5"> <a href="/versions/v16/techniques/T1546/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5" title="T1546.008">Accessibility Features</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c"> <a href="/versions/v16/techniques/T1546/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c" title="T1546.009">AppCert DLLs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd"> <a href="/versions/v16/techniques/T1546/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd" title="T1546.010">AppInit DLLs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83"> <a href="/versions/v16/techniques/T1546/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83" title="T1546.011">Application Shimming</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6"> <a href="/versions/v16/techniques/T1546/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6" title="T1546.012">Image File Execution Options Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3"> <a href="/versions/v16/techniques/T1546/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3" title="T1546.013">PowerShell Profile</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd"> <a href="/versions/v16/techniques/T1546/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd" title="T1546.014">Emond</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae"> <a href="/versions/v16/techniques/T1546/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae" title="T1546.015">Component Object Model Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56"> <a href="/versions/v16/techniques/T1546/016" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56" title="T1546.016">Installer Packages</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792"> <a href="/versions/v16/techniques/T1546/017" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792" title="T1546.017">Udev Rules</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b21c3b2d-02e6-45b1-980b-e69051040839"> <a href="/versions/v16/techniques/T1068" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b21c3b2d-02e6-45b1-980b-e69051040839" title="T1068">Exploitation for Privilege Escalation</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b21c3b2d-02e6-45b1-980b-e69051040839"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <a href="/versions/v16/techniques/T1574" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" title="T1574">Hijack Execution Flow <sub>(13)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34"> <a href="/versions/v16/techniques/T1574/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34" title="T1574.001">DLL Search Order Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b"> <a href="/versions/v16/techniques/T1574/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b" title="T1574.002">DLL Side-Loading</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490"> <a href="/versions/v16/techniques/T1574/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490" title="T1574.004">Dylib Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979"> <a href="/versions/v16/techniques/T1574/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979" title="T1574.005">Executable Installer File Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825"> <a href="/versions/v16/techniques/T1574/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825" title="T1574.006">Dynamic Linker Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32"> <a href="/versions/v16/techniques/T1574/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32" title="T1574.007">Path Interception by PATH Environment Variable</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2"> <a href="/versions/v16/techniques/T1574/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2" title="T1574.008">Path Interception by Search Order Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b"> <a href="/versions/v16/techniques/T1574/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b" title="T1574.009">Path Interception by Unquoted Path</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd"> <a href="/versions/v16/techniques/T1574/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd" title="T1574.010">Services File Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c"> <a href="/versions/v16/techniques/T1574/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c" title="T1574.011">Services Registry Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335"> <a href="/versions/v16/techniques/T1574/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335" title="T1574.012">COR_PROFILER</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde"> <a href="/versions/v16/techniques/T1574/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde" title="T1574.013">KernelCallbackTable</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8"> <a href="/versions/v16/techniques/T1574/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8" title="T1574.014">AppDomainManager</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <a href="/versions/v16/techniques/T1055" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" title="T1055">Process Injection <sub>(12)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945"> <a href="/versions/v16/techniques/T1055/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945" title="T1055.001">Dynamic-link Library Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662"> <a href="/versions/v16/techniques/T1055/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662" title="T1055.002">Portable Executable Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6"> <a href="/versions/v16/techniques/T1055/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6" title="T1055.003">Thread Execution Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605"> <a href="/versions/v16/techniques/T1055/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605" title="T1055.004">Asynchronous Procedure Call</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744"> <a href="/versions/v16/techniques/T1055/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744" title="T1055.005">Thread Local Storage</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f"> <a href="/versions/v16/techniques/T1055/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f" title="T1055.008">Ptrace System Calls</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591"> <a href="/versions/v16/techniques/T1055/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591" title="T1055.009">Proc Memory</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298"> <a href="/versions/v16/techniques/T1055/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298" title="T1055.011">Extra Window Memory Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4"> <a href="/versions/v16/techniques/T1055/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4" title="T1055.012">Process Hollowing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197"> <a href="/versions/v16/techniques/T1055/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197" title="T1055.013">Process Doppelg盲nging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5"> <a href="/versions/v16/techniques/T1055/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5" title="T1055.014">VDSO Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99"> <a href="/versions/v16/techniques/T1055/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99" title="T1055.015">ListPlanting</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <a href="/versions/v16/techniques/T1053" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" title="T1053">Scheduled Task/Job <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0"> <a href="/versions/v16/techniques/T1053/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0" title="T1053.002">At</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c"> <a href="/versions/v16/techniques/T1053/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c" title="T1053.003">Cron</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9"> <a href="/versions/v16/techniques/T1053/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9" title="T1053.005">Scheduled Task</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21"> <a href="/versions/v16/techniques/T1053/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21" title="T1053.006">Systemd Timers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096"> <a href="/versions/v16/techniques/T1053/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096" title="T1053.007">Container Orchestration Job</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/versions/v16/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9"> <a href="/versions/v16/techniques/T1548/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9" title="T1548.001">Setuid and Setgid</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073"> <a href="/versions/v16/techniques/T1548/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073" title="T1548.002">Bypass User Account Control</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0"> <a href="/versions/v16/techniques/T1548/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0" title="T1548.003">Sudo and Sudo Caching</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0"> <a href="/versions/v16/techniques/T1548/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0" title="T1548.004">Elevated Execution with Prompt</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/versions/v16/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb"> <a href="/versions/v16/techniques/T1548/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb" title="T1548.006">TCC Manipulation</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <a href="/versions/v16/techniques/T1134" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" title="T1134">Access Token Manipulation <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d"> <a href="/versions/v16/techniques/T1134/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d" title="T1134.001">Token Impersonation/Theft</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf"> <a href="/versions/v16/techniques/T1134/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf" title="T1134.002">Create Process with Token</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819"> <a href="/versions/v16/techniques/T1134/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819" title="T1134.003">Make and Impersonate Token</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a"> <a href="/versions/v16/techniques/T1134/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a" title="T1134.004">Parent PID Spoofing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023"> <a href="/versions/v16/techniques/T1134/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023" title="T1134.005">SID-History Injection</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7"> <a href="/versions/v16/techniques/T1197" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7" title="T1197">BITS Jobs</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--800f9819-7007-4540-a520-40e655876800"> <a href="/versions/v16/techniques/T1612" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--800f9819-7007-4540-a520-40e655876800" title="T1612">Build Image on Host</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--800f9819-7007-4540-a520-40e655876800"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391"> <a href="/versions/v16/techniques/T1622" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391" title="T1622">Debugger Evasion</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3ccef7ae-cb5e-48f6-8302-897105fbf55c"> <a href="/versions/v16/techniques/T1140" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3ccef7ae-cb5e-48f6-8302-897105fbf55c" title="T1140">Deobfuscate/Decode Files or Information</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3ccef7ae-cb5e-48f6-8302-897105fbf55c"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92"> <a href="/versions/v16/techniques/T1610" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92" title="T1610">Deploy Container</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c8ab3eb-df48-4b9c-ace7-beacaac81cc5"> <a href="/versions/v16/techniques/T1006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c8ab3eb-df48-4b9c-ace7-beacaac81cc5" title="T1006">Direct Volume Access</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c8ab3eb-df48-4b9c-ace7-beacaac81cc5"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/versions/v16/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163"> <a href="/versions/v16/techniques/T1484/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163" title="T1484.001">Group Policy Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/versions/v16/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852"> <a href="/versions/v16/techniques/T1480" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852" title="T1480">Execution Guardrails <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f244b8dd-af6c-4391-a497-fc03627ce995"> <a href="/versions/v16/techniques/T1480/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f244b8dd-af6c-4391-a497-fc03627ce995" title="T1480.001">Environmental Keying</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--49fca0d2-685d-41eb-8bd4-05451cc3a742"> <a href="/versions/v16/techniques/T1480/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--49fca0d2-685d-41eb-8bd4-05451cc3a742" title="T1480.002">Mutual Exclusion</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b"> <a href="/versions/v16/techniques/T1211" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b" title="T1211">Exploitation for Defense Evasion</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196"> <a href="/versions/v16/techniques/T1222" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196" title="T1222">File and Directory Permissions Modification <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34e793de-0274-4982-9c1a-246ed1c19dee"> <a href="/versions/v16/techniques/T1222/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34e793de-0274-4982-9c1a-246ed1c19dee" title="T1222.001">Windows File and Directory Permissions Modification</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b130a2-a77e-4af0-a361-f46f9aad1345"> <a href="/versions/v16/techniques/T1222/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b130a2-a77e-4af0-a361-f46f9aad1345" title="T1222.002">Linux and Mac File and Directory Permissions Modification</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8"> <a href="/versions/v16/techniques/T1564" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8" title="T1564">Hide Artifacts <sub>(12)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ec8fc7e2-b356-455c-8db5-2e37be158e7d"> <a href="/versions/v16/techniques/T1564/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ec8fc7e2-b356-455c-8db5-2e37be158e7d" title="T1564.001">Hidden Files and Directories</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8c4aef43-48d5-49aa-b2af-c0cd58d30c3d"> <a href="/versions/v16/techniques/T1564/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8c4aef43-48d5-49aa-b2af-c0cd58d30c3d" title="T1564.002">Hidden Users</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cbb66055-0325-4111-aca0-40547b6ad5b0"> <a href="/versions/v16/techniques/T1564/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cbb66055-0325-4111-aca0-40547b6ad5b0" title="T1564.003">Hidden Window</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f2857333-11d4-45bf-b064-2c28d8525be5"> <a href="/versions/v16/techniques/T1564/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f2857333-11d4-45bf-b064-2c28d8525be5" title="T1564.004">NTFS File Attributes</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dfebc3b7-d19d-450b-81c7-6dafe4184c04"> <a href="/versions/v16/techniques/T1564/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dfebc3b7-d19d-450b-81c7-6dafe4184c04" title="T1564.005">Hidden File System</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b5327dd1-6bf9-4785-a199-25bcbd1f4a9d"> <a href="/versions/v16/techniques/T1564/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b5327dd1-6bf9-4785-a199-25bcbd1f4a9d" title="T1564.006">Run Virtual Instance</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c898c4b5-bf36-4e6e-a4ad-5b8c4c13e35b"> <a href="/versions/v16/techniques/T1564/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c898c4b5-bf36-4e6e-a4ad-5b8c4c13e35b" title="T1564.007">VBA Stomping</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0cf55441-b176-4332-89e7-2c4c7799d0ff"> <a href="/versions/v16/techniques/T1564/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0cf55441-b176-4332-89e7-2c4c7799d0ff" title="T1564.008">Email Hiding Rules</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b22e5153-ac28-4cc6-865c-2054e36285cb"> <a href="/versions/v16/techniques/T1564/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b22e5153-ac28-4cc6-865c-2054e36285cb" title="T1564.009">Resource Forking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffe59ad3-ad9b-4b9f-b74f-5beb3c309dc1"> <a href="/versions/v16/techniques/T1564/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffe59ad3-ad9b-4b9f-b74f-5beb3c309dc1" title="T1564.010">Process Argument Spoofing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4a2975db-414e-4c0c-bd92-775987514b4b"> <a href="/versions/v16/techniques/T1564/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4a2975db-414e-4c0c-bd92-775987514b4b" title="T1564.011">Ignore Process Interrupts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b008a9-b4eb-462a-a751-a0eb58050cd9"> <a href="/versions/v16/techniques/T1564/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b008a9-b4eb-462a-a751-a0eb58050cd9" title="T1564.012">File/Path Exclusions</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <a href="/versions/v16/techniques/T1574" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" title="T1574">Hijack Execution Flow <sub>(13)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34"> <a href="/versions/v16/techniques/T1574/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34" title="T1574.001">DLL Search Order Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b"> <a href="/versions/v16/techniques/T1574/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b" title="T1574.002">DLL Side-Loading</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490"> <a href="/versions/v16/techniques/T1574/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490" title="T1574.004">Dylib Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979"> <a href="/versions/v16/techniques/T1574/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979" title="T1574.005">Executable Installer File Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825"> <a href="/versions/v16/techniques/T1574/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825" title="T1574.006">Dynamic Linker Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32"> <a href="/versions/v16/techniques/T1574/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32" title="T1574.007">Path Interception by PATH Environment Variable</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2"> <a href="/versions/v16/techniques/T1574/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2" title="T1574.008">Path Interception by Search Order Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b"> <a href="/versions/v16/techniques/T1574/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b" title="T1574.009">Path Interception by Unquoted Path</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd"> <a href="/versions/v16/techniques/T1574/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd" title="T1574.010">Services File Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c"> <a href="/versions/v16/techniques/T1574/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c" title="T1574.011">Services Registry Permissions Weakness</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335"> <a href="/versions/v16/techniques/T1574/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335" title="T1574.012">COR_PROFILER</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde"> <a href="/versions/v16/techniques/T1574/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde" title="T1574.013">KernelCallbackTable</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8"> <a href="/versions/v16/techniques/T1574/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8" title="T1574.014">AppDomainManager</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <a href="/versions/v16/techniques/T1562" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" title="T1562">Impair Defenses <sub>(11)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ac08589e-ee59-4935-8667-d845e38fe579"> <a href="/versions/v16/techniques/T1562/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ac08589e-ee59-4935-8667-d845e38fe579" title="T1562.001">Disable or Modify Tools</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4eb28bed-d11a-4641-9863-c2ac017d910a"> <a href="/versions/v16/techniques/T1562/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4eb28bed-d11a-4641-9863-c2ac017d910a" title="T1562.002">Disable Windows Event Logging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8f504411-cb96-4dac-a537-8d2bb7679c59"> <a href="/versions/v16/techniques/T1562/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8f504411-cb96-4dac-a537-8d2bb7679c59" title="T1562.003">Impair Command History Logging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5372c5fe-f424-4def-bcd5-d3a8e770f07b"> <a href="/versions/v16/techniques/T1562/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5372c5fe-f424-4def-bcd5-d3a8e770f07b" title="T1562.004">Disable or Modify System Firewall</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--74d2a63f-3c7b-4852-92da-02d8fbab16da"> <a href="/versions/v16/techniques/T1562/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--74d2a63f-3c7b-4852-92da-02d8fbab16da" title="T1562.006">Indicator Blocking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77532a55-c283-4cd2-bc5d-2d0b65e9d88c"> <a href="/versions/v16/techniques/T1562/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77532a55-c283-4cd2-bc5d-2d0b65e9d88c" title="T1562.007">Disable or Modify Cloud Firewall</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d"> <a href="/versions/v16/techniques/T1562/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d" title="T1562.008">Disable or Modify Cloud Logs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28170e17-8384-415c-8486-2e6b294cb803"> <a href="/versions/v16/techniques/T1562/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28170e17-8384-415c-8486-2e6b294cb803" title="T1562.009">Safe Mode Boot</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--824add00-99a1-4b15-9a2d-6c5683b7b497"> <a href="/versions/v16/techniques/T1562/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--824add00-99a1-4b15-9a2d-6c5683b7b497" title="T1562.010">Downgrade Attack</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bef8aaee-961d-4359-a308-4c2182bcedff"> <a href="/versions/v16/techniques/T1562/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bef8aaee-961d-4359-a308-4c2182bcedff" title="T1562.011">Spoof Security Alerting</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--562e9b64-7239-493d-80f4-2bff900d9054"> <a href="/versions/v16/techniques/T1562/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--562e9b64-7239-493d-80f4-2bff900d9054" title="T1562.012">Disable or Modify Linux Audit System</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c9e0c59e-162e-40a4-b8b1-78fab4329ada"> <a href="/versions/v16/techniques/T1656" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c9e0c59e-162e-40a4-b8b1-78fab4329ada" title="T1656">Impersonation</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c9e0c59e-162e-40a4-b8b1-78fab4329ada"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69"> <a href="/versions/v16/techniques/T1070" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69" title="T1070">Indicator Removal <sub>(10)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6495ae23-3ab4-43c5-a94f-5638a2c31fd2"> <a href="/versions/v16/techniques/T1070/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6495ae23-3ab4-43c5-a94f-5638a2c31fd2" title="T1070.001">Clear Windows Event Logs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2bce5b30-7014-4a5d-ade7-12913fe6ac36"> <a href="/versions/v16/techniques/T1070/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2bce5b30-7014-4a5d-ade7-12913fe6ac36" title="T1070.002">Clear Linux or Mac System Logs</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3aef9463-9a7a-43ba-8957-a867e07c1e6a"> <a href="/versions/v16/techniques/T1070/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3aef9463-9a7a-43ba-8957-a867e07c1e6a" title="T1070.003">Clear Command History</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d63a3fb8-9452-4e9d-a60a-54be68d5998c"> <a href="/versions/v16/techniques/T1070/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d63a3fb8-9452-4e9d-a60a-54be68d5998c" title="T1070.004">File Deletion</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a750a9f6-0bde-4bb3-9aae-1e2786e9780c"> <a href="/versions/v16/techniques/T1070/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a750a9f6-0bde-4bb3-9aae-1e2786e9780c" title="T1070.005">Network Share Connection Removal</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--47f2d673-ca62-47e9-929b-1b0be9657611"> <a href="/versions/v16/techniques/T1070/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--47f2d673-ca62-47e9-929b-1b0be9657611" title="T1070.006">Timestomp</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3975dbb5-0e1e-4f5b-bae1-cf2ab84b46dc"> <a href="/versions/v16/techniques/T1070/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3975dbb5-0e1e-4f5b-bae1-cf2ab84b46dc" title="T1070.007">Clear Network Connection History and Configurations</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--438c967d-3996-4870-bfc2-3954752a1927"> <a href="/versions/v16/techniques/T1070/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--438c967d-3996-4870-bfc2-3954752a1927" title="T1070.008">Clear Mailbox Data</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d2c4e5ea-dbdf-4113-805a-b1e2a337fb33"> <a href="/versions/v16/techniques/T1070/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d2c4e5ea-dbdf-4113-805a-b1e2a337fb33" title="T1070.009">Clear Persistence</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc36eeae-2209-4e63-89d3-c97e19edf280"> <a href="/versions/v16/techniques/T1070/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc36eeae-2209-4e63-89d3-c97e19edf280" title="T1070.010">Relocate Malware</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3b0e52ce-517a-4614-a523-1bd5deef6c5e"> <a href="/versions/v16/techniques/T1202" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3b0e52ce-517a-4614-a523-1bd5deef6c5e" title="T1202">Indirect Command Execution</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3b0e52ce-517a-4614-a523-1bd5deef6c5e"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0"> <a href="/versions/v16/techniques/T1036" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0" title="T1036">Masquerading <sub>(10)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4b7458f-81f2-4d38-84be-1c5ba0167a52"> <a href="/versions/v16/techniques/T1036/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4b7458f-81f2-4d38-84be-1c5ba0167a52" title="T1036.001">Invalid Code Signature</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77eae145-55db-4519-8ae5-77b0c7215d69"> <a href="/versions/v16/techniques/T1036/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77eae145-55db-4519-8ae5-77b0c7215d69" title="T1036.002">Right-to-Left Override</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bd5b58a4-a52d-4a29-bc0d-3f1d3968eb6b"> <a href="/versions/v16/techniques/T1036/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bd5b58a4-a52d-4a29-bc0d-3f1d3968eb6b" title="T1036.003">Rename System Utilities</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c"> <a href="/versions/v16/techniques/T1036/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c" title="T1036.004">Masquerade Task or Service</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2"> <a href="/versions/v16/techniques/T1036/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2" title="T1036.005">Match Legitimate Name or Location</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e51137a5-1cdc-499e-911a-abaedaa5ac86"> <a href="/versions/v16/techniques/T1036/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e51137a5-1cdc-499e-911a-abaedaa5ac86" title="T1036.006">Space after Filename</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--11f29a39-0942-4d62-92b6-fe236cf3066e"> <a href="/versions/v16/techniques/T1036/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--11f29a39-0942-4d62-92b6-fe236cf3066e" title="T1036.007">Double File Extension</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--208884f1-7b83-4473-ac22-4e1cf6c41471"> <a href="/versions/v16/techniques/T1036/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--208884f1-7b83-4473-ac22-4e1cf6c41471" title="T1036.008">Masquerade File Type</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34a80bc4-80f2-46e6-94ff-f3265a4b657c"> <a href="/versions/v16/techniques/T1036/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34a80bc4-80f2-46e6-94ff-f3265a4b657c" title="T1036.009">Break Process Trees</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d349c66e-18e1-4d8b-a2d7-65af7cbd2ba0"> <a href="/versions/v16/techniques/T1036/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d349c66e-18e1-4d8b-a2d7-65af7cbd2ba0" title="T1036.010">Masquerade Account Name</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/versions/v16/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(9)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605"> <a href="/versions/v16/techniques/T1556/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605" title="T1556.001">Domain Controller Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42"> <a href="/versions/v16/techniques/T1556/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42" title="T1556.002">Password Filter DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771"> <a href="/versions/v16/techniques/T1556/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771" title="T1556.003">Pluggable Authentication Modules</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd"> <a href="/versions/v16/techniques/T1556/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd" title="T1556.004">Network Device Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48"> <a href="/versions/v16/techniques/T1556/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48" title="T1556.005">Reversible Encryption</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/versions/v16/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/versions/v16/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04"> <a href="/versions/v16/techniques/T1556/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04" title="T1556.008">Network Provider DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/versions/v16/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90"> <a href="/versions/v16/techniques/T1578" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90" title="T1578">Modify Cloud Compute Infrastructure <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--144e007b-e638-431d-a894-45d90c54ab90');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1"> <a href="/versions/v16/techniques/T1578/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1" title="T1578.001">Create Snapshot</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cf1c2504-433f-4c4e-a1f8-91de45a0318c"> <a href="/versions/v16/techniques/T1578/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cf1c2504-433f-4c4e-a1f8-91de45a0318c" title="T1578.002">Create Cloud Instance</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70857657-bd0b-4695-ad3e-b13f92cac1b4"> <a href="/versions/v16/techniques/T1578/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70857657-bd0b-4695-ad3e-b13f92cac1b4" title="T1578.003">Delete Cloud Instance</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0708ae90-d0eb-4938-9a76-d0fc94f6eec1"> <a href="/versions/v16/techniques/T1578/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0708ae90-d0eb-4938-9a76-d0fc94f6eec1" title="T1578.004">Revert Cloud Instance</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ca00366b-83a1-4c7b-a0ce-8ff950a7c87f"> <a href="/versions/v16/techniques/T1578/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ca00366b-83a1-4c7b-a0ce-8ff950a7c87f" title="T1578.005">Modify Cloud Compute Configurations</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0ce73446-8722-4086-9d43-514f1d0f669e"> <a href="/versions/v16/techniques/T1666" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0ce73446-8722-4086-9d43-514f1d0f669e" title="T1666">Modify Cloud Resource Hierarchy</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0ce73446-8722-4086-9d43-514f1d0f669e"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--57340c81-c025-4189-8fa0-fc7ede51bae4"> <a href="/versions/v16/techniques/T1112" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--57340c81-c025-4189-8fa0-fc7ede51bae4" title="T1112">Modify Registry</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--57340c81-c025-4189-8fa0-fc7ede51bae4"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754"> <a href="/versions/v16/techniques/T1601" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754" title="T1601">Modify System Image <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d245808a-7086-4310-984a-a84aaaa43f8f"> <a href="/versions/v16/techniques/T1601/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d245808a-7086-4310-984a-a84aaaa43f8f" title="T1601.001">Patch System Image</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc74ba38-dc98-461f-8611-b3dbf9978e3d"> <a href="/versions/v16/techniques/T1601/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc74ba38-dc98-461f-8611-b3dbf9978e3d" title="T1601.002">Downgrade System Image</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166"> <a href="/versions/v16/techniques/T1599" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166" title="T1599">Network Boundary Bridging <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ffc1794-ec3b-45be-9e52-42dbcb2af2de"> <a href="/versions/v16/techniques/T1599/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ffc1794-ec3b-45be-9e52-42dbcb2af2de" title="T1599.001">Network Address Translation Traversal</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a"> <a href="/versions/v16/techniques/T1027" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a" title="T1027">Obfuscated Files or Information <sub>(14)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5bfccc3f-2326-4112-86cc-c1ece9d8a2b5"> <a href="/versions/v16/techniques/T1027/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5bfccc3f-2326-4112-86cc-c1ece9d8a2b5" title="T1027.001">Binary Padding</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--deb98323-e13f-4b0c-8d94-175379069062"> <a href="/versions/v16/techniques/T1027/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--deb98323-e13f-4b0c-8d94-175379069062" title="T1027.002">Software Packing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c2e147a9-d1a8-4074-811a-d8789202d916"> <a href="/versions/v16/techniques/T1027/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c2e147a9-d1a8-4074-811a-d8789202d916" title="T1027.003">Steganography</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c726e0a2-a57a-4b7b-a973-d0f013246617"> <a href="/versions/v16/techniques/T1027/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c726e0a2-a57a-4b7b-a973-d0f013246617" title="T1027.004">Compile After Delivery</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b0533c6e-8fea-4788-874f-b799cacc4b92"> <a href="/versions/v16/techniques/T1027/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b0533c6e-8fea-4788-874f-b799cacc4b92" title="T1027.005">Indicator Removal from Tools</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4dc46e3-5ba5-45b9-8204-010867cacfcb"> <a href="/versions/v16/techniques/T1027/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4dc46e3-5ba5-45b9-8204-010867cacfcb" title="T1027.006">HTML Smuggling</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea4c2f9c-9df1-477c-8c42-6da1118f2ac4"> <a href="/versions/v16/techniques/T1027/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea4c2f9c-9df1-477c-8c42-6da1118f2ac4" title="T1027.007">Dynamic API Resolution</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2f41939b-54c3-41d6-8f8b-35f1ec18ed97"> <a href="/versions/v16/techniques/T1027/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2f41939b-54c3-41d6-8f8b-35f1ec18ed97" title="T1027.008">Stripped Payloads</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0533ab23-3f7d-463f-9bd8-634d27e4dee1"> <a href="/versions/v16/techniques/T1027/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0533ab23-3f7d-463f-9bd8-634d27e4dee1" title="T1027.009">Embedded Payloads</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d511a6f6-4a33-41d5-bc95-c343875d1377"> <a href="/versions/v16/techniques/T1027/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d511a6f6-4a33-41d5-bc95-c343875d1377" title="T1027.010">Command Obfuscation</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--02c5abff-30bf-4703-ab92-1f6072fae939"> <a href="/versions/v16/techniques/T1027/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--02c5abff-30bf-4703-ab92-1f6072fae939" title="T1027.011">Fileless Storage</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--887274fc-2d63-4bdc-82f3-fae56d1d5fdc"> <a href="/versions/v16/techniques/T1027/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--887274fc-2d63-4bdc-82f3-fae56d1d5fdc" title="T1027.012">LNK Icon Smuggling</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0d91b3c0-5e50-47c3-949a-2a796f04d144"> <a href="/versions/v16/techniques/T1027/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0d91b3c0-5e50-47c3-949a-2a796f04d144" title="T1027.013">Encrypted/Encoded File</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b577dfc1-0177-4522-8d5a-782127c8592b"> <a href="/versions/v16/techniques/T1027/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b577dfc1-0177-4522-8d5a-782127c8592b" title="T1027.014">Polymorphic Code</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7d20fff9-8751-404e-badd-ccd71bda0236"> <a href="/versions/v16/techniques/T1647" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7d20fff9-8751-404e-badd-ccd71bda0236" title="T1647">Plist File Modification</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7d20fff9-8751-404e-badd-ccd71bda0236"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <a href="/versions/v16/techniques/T1542" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" title="T1542">Pre-OS Boot <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada"> <a href="/versions/v16/techniques/T1542/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada" title="T1542.001">System Firmware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--791481f8-e96a-41be-b089-a088763083d4"> <a href="/versions/v16/techniques/T1542/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--791481f8-e96a-41be-b089-a088763083d4" title="T1542.002">Component Firmware</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba"> <a href="/versions/v16/techniques/T1542/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba" title="T1542.003">Bootkit</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc"> <a href="/versions/v16/techniques/T1542/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc" title="T1542.004">ROMMONkit</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4"> <a href="/versions/v16/techniques/T1542/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4" title="T1542.005">TFTP Boot</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <a href="/versions/v16/techniques/T1055" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" title="T1055">Process Injection <sub>(12)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945"> <a href="/versions/v16/techniques/T1055/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945" title="T1055.001">Dynamic-link Library Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662"> <a href="/versions/v16/techniques/T1055/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662" title="T1055.002">Portable Executable Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6"> <a href="/versions/v16/techniques/T1055/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6" title="T1055.003">Thread Execution Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605"> <a href="/versions/v16/techniques/T1055/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605" title="T1055.004">Asynchronous Procedure Call</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744"> <a href="/versions/v16/techniques/T1055/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744" title="T1055.005">Thread Local Storage</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f"> <a href="/versions/v16/techniques/T1055/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f" title="T1055.008">Ptrace System Calls</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591"> <a href="/versions/v16/techniques/T1055/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591" title="T1055.009">Proc Memory</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298"> <a href="/versions/v16/techniques/T1055/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298" title="T1055.011">Extra Window Memory Injection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4"> <a href="/versions/v16/techniques/T1055/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4" title="T1055.012">Process Hollowing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197"> <a href="/versions/v16/techniques/T1055/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197" title="T1055.013">Process Doppelg盲nging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5"> <a href="/versions/v16/techniques/T1055/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5" title="T1055.014">VDSO Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99"> <a href="/versions/v16/techniques/T1055/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99" title="T1055.015">ListPlanting</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4933e63b-9b77-476e-ab29-761bc5b7d15a"> <a href="/versions/v16/techniques/T1620" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4933e63b-9b77-476e-ab29-761bc5b7d15a" title="T1620">Reflective Code Loading</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4933e63b-9b77-476e-ab29-761bc5b7d15a"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--564998d8-ab3e-4123-93fb-eccaa6b9714a"> <a href="/versions/v16/techniques/T1207" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--564998d8-ab3e-4123-93fb-eccaa6b9714a" title="T1207">Rogue Domain Controller</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--564998d8-ab3e-4123-93fb-eccaa6b9714a"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0f20e3cb-245b-4a61-8a91-2d93f7cb0e9b"> <a href="/versions/v16/techniques/T1014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0f20e3cb-245b-4a61-8a91-2d93f7cb0e9b" title="T1014">Rootkit</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0f20e3cb-245b-4a61-8a91-2d93f7cb0e9b"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7"> <a href="/versions/v16/techniques/T1553" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7" title="T1553">Subvert Trust Controls <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--31a0a2ac-c67c-4a7e-b9ed-6a96477d4e8e"> <a href="/versions/v16/techniques/T1553/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--31a0a2ac-c67c-4a7e-b9ed-6a96477d4e8e" title="T1553.001">Gatekeeper Bypass</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--32901740-b42c-4fdd-bc02-345b5dc57082"> <a href="/versions/v16/techniques/T1553/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--32901740-b42c-4fdd-bc02-345b5dc57082" title="T1553.002">Code Signing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--543fceb5-cb92-40cb-aacf-6913d4db58bc"> <a href="/versions/v16/techniques/T1553/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--543fceb5-cb92-40cb-aacf-6913d4db58bc" title="T1553.003">SIP and Trust Provider Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c615231b-f253-4f58-9d47-d5b4cbdb6839"> <a href="/versions/v16/techniques/T1553/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c615231b-f253-4f58-9d47-d5b4cbdb6839" title="T1553.004">Install Root Certificate</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7e7c2fba-7cca-486c-9582-4c1bb2851961"> <a href="/versions/v16/techniques/T1553/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7e7c2fba-7cca-486c-9582-4c1bb2851961" title="T1553.005">Mark-of-the-Web Bypass</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--565275d5-fcc3-4b66-b4e7-928e4cac6b8c"> <a href="/versions/v16/techniques/T1553/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--565275d5-fcc3-4b66-b4e7-928e4cac6b8c" title="T1553.006">Code Signing Policy Modification</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4"> <a href="/versions/v16/techniques/T1218" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4" title="T1218">System Binary Proxy Execution <sub>(14)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--457c7820-d331-465a-915e-42f85500ccc4');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6937325-9321-4e2e-bb2b-3ed2d40b2a9d"> <a href="/versions/v16/techniques/T1218/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6937325-9321-4e2e-bb2b-3ed2d40b2a9d" title="T1218.001">Compiled HTML File</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ff5d6a8-c062-4c68-a778-36fc5edd564f"> <a href="/versions/v16/techniques/T1218/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ff5d6a8-c062-4c68-a778-36fc5edd564f" title="T1218.002">Control Panel</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4cbc6a62-9e34-4f94-8a19-5c1a11392a49"> <a href="/versions/v16/techniques/T1218/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4cbc6a62-9e34-4f94-8a19-5c1a11392a49" title="T1218.003">CMSTP</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2cd950a6-16c4-404a-aa01-044322395107"> <a href="/versions/v16/techniques/T1218/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2cd950a6-16c4-404a-aa01-044322395107" title="T1218.004">InstallUtil</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--840a987a-99bd-4a80-a5c9-0cb2baa6cade"> <a href="/versions/v16/techniques/T1218/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--840a987a-99bd-4a80-a5c9-0cb2baa6cade" title="T1218.005">Mshta</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--365be77f-fc0e-42ee-bac8-4faf806d9336"> <a href="/versions/v16/techniques/T1218/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--365be77f-fc0e-42ee-bac8-4faf806d9336" title="T1218.007">Msiexec</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6e3bd510-6b33-41a4-af80-2d80f3ee0071"> <a href="/versions/v16/techniques/T1218/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6e3bd510-6b33-41a4-af80-2d80f3ee0071" title="T1218.008">Odbcconf</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c48a67ee-b657-45c1-91bf-6cdbe27205f8"> <a href="/versions/v16/techniques/T1218/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c48a67ee-b657-45c1-91bf-6cdbe27205f8" title="T1218.009">Regsvcs/Regasm</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b97f1d35-4249-4486-a6b5-ee60ccf24fab"> <a href="/versions/v16/techniques/T1218/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b97f1d35-4249-4486-a6b5-ee60ccf24fab" title="T1218.010">Regsvr32</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--045d0922-2310-4e60-b5e4-3302302cb3c5"> <a href="/versions/v16/techniques/T1218/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--045d0922-2310-4e60-b5e4-3302302cb3c5" title="T1218.011">Rundll32</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--808e6329-ca91-4b87-ac2d-8eadc5f8f327"> <a href="/versions/v16/techniques/T1218/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--808e6329-ca91-4b87-ac2d-8eadc5f8f327" title="T1218.012">Verclsid</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1bae753e-8e52-4055-a66d-2ead90303ca9"> <a href="/versions/v16/techniques/T1218/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1bae753e-8e52-4055-a66d-2ead90303ca9" title="T1218.013">Mavinject</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffbcfdb0-de22-4106-9ed3-fc23c8a01407"> <a href="/versions/v16/techniques/T1218/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffbcfdb0-de22-4106-9ed3-fc23c8a01407" title="T1218.014">MMC</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--561ae9aa-c28a-4144-9eec-e7027a14c8c3"> <a href="/versions/v16/techniques/T1218/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--561ae9aa-c28a-4144-9eec-e7027a14c8c3" title="T1218.015">Electron Applications</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe"> <a href="/versions/v16/techniques/T1216" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe" title="T1216">System Script Proxy Execution <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09cd431f-eaf4-4d2a-acaf-2a7acfe7ed58"> <a href="/versions/v16/techniques/T1216/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09cd431f-eaf4-4d2a-acaf-2a7acfe7ed58" title="T1216.001">PubPrn</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e6f19759-dde3-47fc-99cc-d9f5fa4ade60"> <a href="/versions/v16/techniques/T1216/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e6f19759-dde3-47fc-99cc-d9f5fa4ade60" title="T1216.002">SyncAppvPublishingServer</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dc31fe1e-d722-49da-8f5f-92c7b5aff534"> <a href="/versions/v16/techniques/T1221" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dc31fe1e-d722-49da-8f5f-92c7b5aff534" title="T1221">Template Injection</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dc31fe1e-d722-49da-8f5f-92c7b5aff534"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <a href="/versions/v16/techniques/T1205" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" title="T1205">Traffic Signaling <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--451a9977-d255-43c9-b431-66de80130c8c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd"> <a href="/versions/v16/techniques/T1205/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd" title="T1205.001">Port Knocking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520"> <a href="/versions/v16/techniques/T1205/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520" title="T1205.002">Socket Filters</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b"> <a href="/versions/v16/techniques/T1127" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b" title="T1127">Trusted Developer Utilities Proxy Execution <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c92e3d68-2349-49e4-a341-7edca2deff96"> <a href="/versions/v16/techniques/T1127/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c92e3d68-2349-49e4-a341-7edca2deff96" title="T1127.001">MSBuild</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc279e50-df85-4c8e-be80-6dc2eda8849c"> <a href="/versions/v16/techniques/T1127/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc279e50-df85-4c8e-be80-6dc2eda8849c" title="T1127.002">ClickOnce</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--59bd0dec-f8b2-4b9a-9141-37a1e6899761"> <a href="/versions/v16/techniques/T1535" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--59bd0dec-f8b2-4b9a-9141-37a1e6899761" title="T1535">Unused/Unsupported Cloud Regions</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--59bd0dec-f8b2-4b9a-9141-37a1e6899761"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/versions/v16/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/versions/v16/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e"> <a href="/versions/v16/techniques/T1550/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e" title="T1550.002">Pass the Hash</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926"> <a href="/versions/v16/techniques/T1550/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926" title="T1550.003">Pass the Ticket</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0"> <a href="/versions/v16/techniques/T1550/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0" title="T1550.004">Web Session Cookie</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <a href="/versions/v16/techniques/T1497" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" title="T1497">Virtualization/Sandbox Evasion <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6"> <a href="/versions/v16/techniques/T1497/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6" title="T1497.001">System Checks</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938"> <a href="/versions/v16/techniques/T1497/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938" title="T1497.002">User Activity Based Checks</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0"> <a href="/versions/v16/techniques/T1497/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0" title="T1497.003">Time Based Evasion</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8"> <a href="/versions/v16/techniques/T1600" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8" title="T1600">Weaken Encryption <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3a40f208-a9c1-4efa-a598-4003c3681fb8"> <a href="/versions/v16/techniques/T1600/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3a40f208-a9c1-4efa-a598-4003c3681fb8" title="T1600.001">Reduce Key Space</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7efba77e-3bc4-4ca5-8292-d8201dcd64b5"> <a href="/versions/v16/techniques/T1600/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7efba77e-3bc4-4ca5-8292-d8201dcd64b5" title="T1600.002">Disable Crypto Hardware</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebbe170d-aa74-4946-8511-9921243415a3"> <a href="/versions/v16/techniques/T1220" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebbe170d-aa74-4946-8511-9921243415a3" title="T1220">XSL Script Processing</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebbe170d-aa74-4946-8511-9921243415a3"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <a href="/versions/v16/techniques/T1557" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" title="T1557">Adversary-in-the-Middle <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e"> <a href="/versions/v16/techniques/T1557/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e" title="T1557.001">LLMNR/NBT-NS Poisoning and SMB Relay</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213"> <a href="/versions/v16/techniques/T1557/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213" title="T1557.002">ARP Cache Poisoning</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5"> <a href="/versions/v16/techniques/T1557/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5" title="T1557.003">DHCP Spoofing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e"> <a href="/versions/v16/techniques/T1557/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e" title="T1557.004">Evil Twin</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd"> <a href="/versions/v16/techniques/T1110" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd" title="T1110">Brute Force <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119"> <a href="/versions/v16/techniques/T1110/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119" title="T1110.001">Password Guessing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d"> <a href="/versions/v16/techniques/T1110/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d" title="T1110.002">Password Cracking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c"> <a href="/versions/v16/techniques/T1110/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c" title="T1110.003">Password Spraying</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc"> <a href="/versions/v16/techniques/T1110/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc" title="T1110.004">Credential Stuffing</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0"> <a href="/versions/v16/techniques/T1555" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0" title="T1555">Credentials from Password Stores <sub>(6)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1eaebf46-e361-4437-bc23-d5d65a3b92e3"> <a href="/versions/v16/techniques/T1555/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1eaebf46-e361-4437-bc23-d5d65a3b92e3" title="T1555.001">Keychain</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1a80d097-54df-41d8-9d33-34e755ec5e72"> <a href="/versions/v16/techniques/T1555/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1a80d097-54df-41d8-9d33-34e755ec5e72" title="T1555.002">Securityd Memory</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--58a3e6aa-4453-4cc8-a51f-4befe80b31a8"> <a href="/versions/v16/techniques/T1555/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--58a3e6aa-4453-4cc8-a51f-4befe80b31a8" title="T1555.003">Credentials from Web Browsers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d336b553-5da9-46ca-98a8-0b23f49fb447"> <a href="/versions/v16/techniques/T1555/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d336b553-5da9-46ca-98a8-0b23f49fb447" title="T1555.004">Windows Credential Manager</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--315f51f0-6b03-4c1e-bfb2-84740afb8e21"> <a href="/versions/v16/techniques/T1555/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--315f51f0-6b03-4c1e-bfb2-84740afb8e21" title="T1555.005">Password Managers</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cfb525cc-5494-401d-a82b-2539ca46a561"> <a href="/versions/v16/techniques/T1555/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cfb525cc-5494-401d-a82b-2539ca46a561" title="T1555.006">Cloud Secrets Management Stores</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36"> <a href="/versions/v16/techniques/T1212" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36" title="T1212">Exploitation for Credential Access</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2"> <a href="/versions/v16/techniques/T1187" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2" title="T1187">Forced Authentication</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <a href="/versions/v16/techniques/T1606" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" title="T1606">Forge Web Credentials <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--861b8fd2-57f3-4ee1-ab5d-c19c3b8c7a4a"> <a href="/versions/v16/techniques/T1606/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--861b8fd2-57f3-4ee1-ab5d-c19c3b8c7a4a" title="T1606.001">Web Cookies</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2"> <a href="/versions/v16/techniques/T1606/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2" title="T1606.002">SAML Tokens</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <a href="/versions/v16/techniques/T1056" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" title="T1056">Input Capture <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4"> <a href="/versions/v16/techniques/T1056/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4" title="T1056.001">Keylogging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d"> <a href="/versions/v16/techniques/T1056/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d" title="T1056.002">GUI Input Capture</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e"> <a href="/versions/v16/techniques/T1056/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e" title="T1056.003">Web Portal Capture</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6"> <a href="/versions/v16/techniques/T1056/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6" title="T1056.004">Credential API Hooking</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/versions/v16/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(9)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605"> <a href="/versions/v16/techniques/T1556/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605" title="T1556.001">Domain Controller Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42"> <a href="/versions/v16/techniques/T1556/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42" title="T1556.002">Password Filter DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771"> <a href="/versions/v16/techniques/T1556/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771" title="T1556.003">Pluggable Authentication Modules</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd"> <a href="/versions/v16/techniques/T1556/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd" title="T1556.004">Network Device Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48"> <a href="/versions/v16/techniques/T1556/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48" title="T1556.005">Reversible Encryption</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/versions/v16/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/versions/v16/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04"> <a href="/versions/v16/techniques/T1556/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04" title="T1556.008">Network Provider DLL</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/versions/v16/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--dd43c543-bb85-4a6f-aa6e-160d90d06a49"> <a href="/versions/v16/techniques/T1111" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--dd43c543-bb85-4a6f-aa6e-160d90d06a49" title="T1111">Multi-Factor Authentication Interception</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--dd43c543-bb85-4a6f-aa6e-160d90d06a49"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493"> <a href="/versions/v16/techniques/T1621" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493" title="T1621">Multi-Factor Authentication Request Generation</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529"> <a href="/versions/v16/techniques/T1040" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529" title="T1040">Network Sniffing</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22"> <a href="/versions/v16/techniques/T1003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22" title="T1003">OS Credential Dumping <sub>(8)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--65f2d882-3f41-4d48-8a06-29af77ec9f90"> <a href="/versions/v16/techniques/T1003/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--65f2d882-3f41-4d48-8a06-29af77ec9f90" title="T1003.001">LSASS Memory</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1644e709-12d2-41e5-a60f-3470991f5011"> <a href="/versions/v16/techniques/T1003/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1644e709-12d2-41e5-a60f-3470991f5011" title="T1003.002">Security Account Manager</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--edf91964-b26e-4b4a-9600-ccacd7d7df24"> <a href="/versions/v16/techniques/T1003/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--edf91964-b26e-4b4a-9600-ccacd7d7df24" title="T1003.003">NTDS</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1ecfdab8-7d59-4c98-95d4-dc41970f57fc"> <a href="/versions/v16/techniques/T1003/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1ecfdab8-7d59-4c98-95d4-dc41970f57fc" title="T1003.004">LSA Secrets</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--6add2ab5-2711-4e9d-87c8-7a0be8531530"> <a href="/versions/v16/techniques/T1003/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--6add2ab5-2711-4e9d-87c8-7a0be8531530" title="T1003.005">Cached Domain Credentials</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f303a39a-6255-4b89-aecc-18c4d8ca7163"> <a href="/versions/v16/techniques/T1003/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f303a39a-6255-4b89-aecc-18c4d8ca7163" title="T1003.006">DCSync</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3120b9fa-23b8-4500-ae73-09494f607b7d"> <a href="/versions/v16/techniques/T1003/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3120b9fa-23b8-4500-ae73-09494f607b7d" title="T1003.007">Proc Filesystem</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d0b4fcdb-d67d-4ed2-99ce-788b12f8c0f4"> <a href="/versions/v16/techniques/T1003/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d0b4fcdb-d67d-4ed2-99ce-788b12f8c0f4" title="T1003.008">/etc/passwd and /etc/shadow</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a"> <a href="/versions/v16/techniques/T1528" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a" title="T1528">Steal Application Access Token</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331"> <a href="/versions/v16/techniques/T1649" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331" title="T1649">Steal or Forge Authentication Certificates</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a"> <a href="/versions/v16/techniques/T1558" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a" title="T1558">Steal or Forge Kerberos Tickets <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--768dce68-8d0d-477a-b01d-0eea98b963a1"> <a href="/versions/v16/techniques/T1558/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--768dce68-8d0d-477a-b01d-0eea98b963a1" title="T1558.001">Golden Ticket</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d273434a-448e-4598-8e14-607f4a0d5e27"> <a href="/versions/v16/techniques/T1558/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d273434a-448e-4598-8e14-607f4a0d5e27" title="T1558.002">Silver Ticket</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f2877f7f-9a4c-4251-879f-1224e3006bee"> <a href="/versions/v16/techniques/T1558/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f2877f7f-9a4c-4251-879f-1224e3006bee" title="T1558.003">Kerberoasting</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3986e7fd-a8e9-4ecb-bfc6-55920855912b"> <a href="/versions/v16/techniques/T1558/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3986e7fd-a8e9-4ecb-bfc6-55920855912b" title="T1558.004">AS-REP Roasting</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--394220d9-8efc-4252-9040-664f7b115be6"> <a href="/versions/v16/techniques/T1558/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--394220d9-8efc-4252-9040-664f7b115be6" title="T1558.005">Ccache Files</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--10ffac09-e42d-4f56-ab20-db94c67d76ff"> <a href="/versions/v16/techniques/T1539" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--10ffac09-e42d-4f56-ab20-db94c67d76ff" title="T1539">Steal Web Session Cookie</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--10ffac09-e42d-4f56-ab20-db94c67d76ff"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> <a href="/versions/v16/techniques/T1552" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517" title="T1552">Unsecured Credentials <sub>(8)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--837f9164-50af-4ac0-8219-379d8a74cefc"> <a href="/versions/v16/techniques/T1552/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--837f9164-50af-4ac0-8219-379d8a74cefc" title="T1552.001">Credentials In Files</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--341e222a-a6e3-4f6f-b69c-831d792b1580"> <a href="/versions/v16/techniques/T1552/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--341e222a-a6e3-4f6f-b69c-831d792b1580" title="T1552.002">Credentials in Registry</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8187bd2a-866f-4457-9009-86b0ddedffa3"> <a href="/versions/v16/techniques/T1552/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8187bd2a-866f-4457-9009-86b0ddedffa3" title="T1552.003">Bash History</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--60b508a1-6a5e-46b1-821a-9f7b78752abf"> <a href="/versions/v16/techniques/T1552/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--60b508a1-6a5e-46b1-821a-9f7b78752abf" title="T1552.004">Private Keys</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--19bf235b-8620-4997-b5b4-94e0659ed7c3"> <a href="/versions/v16/techniques/T1552/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--19bf235b-8620-4997-b5b4-94e0659ed7c3" title="T1552.005">Cloud Instance Metadata API</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8d7bd4f5-3a89-4453-9c82-2c8894d5655e"> <a href="/versions/v16/techniques/T1552/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8d7bd4f5-3a89-4453-9c82-2c8894d5655e" title="T1552.006">Group Policy Preferences</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f8ef3a62-3f44-40a4-abca-761ab235c436"> <a href="/versions/v16/techniques/T1552/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f8ef3a62-3f44-40a4-abca-761ab235c436" title="T1552.007">Container API</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9664ad0e-789e-40ac-82e2-d7b17fbe8fb3"> <a href="/versions/v16/techniques/T1552/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9664ad0e-789e-40ac-82e2-d7b17fbe8fb3" title="T1552.008">Chat Messages</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <a href="/versions/v16/techniques/T1087" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" title="T1087">Account Discovery <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--25659dd6-ea12-45c4-97e6-381e3e4b593e"> <a href="/versions/v16/techniques/T1087/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--25659dd6-ea12-45c4-97e6-381e3e4b593e" title="T1087.001">Local Account</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--21875073-b0ee-49e3-9077-1e2a885359af"> <a href="/versions/v16/techniques/T1087/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--21875073-b0ee-49e3-9077-1e2a885359af" title="T1087.002">Domain Account</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bc31b94-045b-4752-8920-aebaebdb6470"> <a href="/versions/v16/techniques/T1087/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bc31b94-045b-4752-8920-aebaebdb6470" title="T1087.003">Email Account</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe"> <a href="/versions/v16/techniques/T1087/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe" title="T1087.004">Cloud Account</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4ae4f953-fe58-4cc8-a327-33257e30a830"> <a href="/versions/v16/techniques/T1010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4ae4f953-fe58-4cc8-a327-33257e30a830" title="T1010">Application Window Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4ae4f953-fe58-4cc8-a327-33257e30a830"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--5e4a2073-9643-44cb-a0b5-e7f4048446c7"> <a href="/versions/v16/techniques/T1217" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--5e4a2073-9643-44cb-a0b5-e7f4048446c7" title="T1217">Browser Information Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--5e4a2073-9643-44cb-a0b5-e7f4048446c7"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--57a3d31a-d04f-4663-b2da-7df8ec3f8c9d"> <a href="/versions/v16/techniques/T1580" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--57a3d31a-d04f-4663-b2da-7df8ec3f8c9d" title="T1580">Cloud Infrastructure Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--57a3d31a-d04f-4663-b2da-7df8ec3f8c9d"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f"> <a href="/versions/v16/techniques/T1538" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f" title="T1538">Cloud Service Dashboard</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db"> <a href="/versions/v16/techniques/T1526" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db" title="T1526">Cloud Service Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8565825b-21c8-4518-b75e-cbc4c717a156"> <a href="/versions/v16/techniques/T1619" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8565825b-21c8-4518-b75e-cbc4c717a156" title="T1619">Cloud Storage Object Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8565825b-21c8-4518-b75e-cbc4c717a156"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--0470e792-32f8-46b0-a351-652bc35e9336"> <a href="/versions/v16/techniques/T1613" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--0470e792-32f8-46b0-a351-652bc35e9336" title="T1613">Container and Resource Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--0470e792-32f8-46b0-a351-652bc35e9336"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391"> <a href="/versions/v16/techniques/T1622" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391" title="T1622">Debugger Evasion</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--215d9700-5881-48b8-8265-6449dbb7195d"> <a href="/versions/v16/techniques/T1652" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--215d9700-5881-48b8-8265-6449dbb7195d" title="T1652">Device Driver Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--215d9700-5881-48b8-8265-6449dbb7195d"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--767dbf9e-df3f-45cb-8998-4903ab5f80c0"> <a href="/versions/v16/techniques/T1482" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--767dbf9e-df3f-45cb-8998-4903ab5f80c0" title="T1482">Domain Trust Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--767dbf9e-df3f-45cb-8998-4903ab5f80c0"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18"> <a href="/versions/v16/techniques/T1083" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18" title="T1083">File and Directory Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--1b20efbf-8063-4fc3-a07d-b575318a301b"> <a href="/versions/v16/techniques/T1615" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--1b20efbf-8063-4fc3-a07d-b575318a301b" title="T1615">Group Policy Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--1b20efbf-8063-4fc3-a07d-b575318a301b"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--866d0d6d-02c6-42bd-aa2f-02907fdc0969"> <a href="/versions/v16/techniques/T1654" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--866d0d6d-02c6-42bd-aa2f-02907fdc0969" title="T1654">Log Enumeration</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--866d0d6d-02c6-42bd-aa2f-02907fdc0969"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3a12395-188d-4051-9a16-ea8e14d07b88"> <a href="/versions/v16/techniques/T1046" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3a12395-188d-4051-9a16-ea8e14d07b88" title="T1046">Network Service Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3a12395-188d-4051-9a16-ea8e14d07b88"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3489cfc5-640f-4bb3-a103-9137b97de79f"> <a href="/versions/v16/techniques/T1135" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3489cfc5-640f-4bb3-a103-9137b97de79f" title="T1135">Network Share Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3489cfc5-640f-4bb3-a103-9137b97de79f"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529"> <a href="/versions/v16/techniques/T1040" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529" title="T1040">Network Sniffing</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5"> <a href="/versions/v16/techniques/T1201" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5" title="T1201">Password Policy Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--348f1eef-964b-4eb6-bb53-69b3dcb0c643"> <a href="/versions/v16/techniques/T1120" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--348f1eef-964b-4eb6-bb53-69b3dcb0c643" title="T1120">Peripheral Device Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--348f1eef-964b-4eb6-bb53-69b3dcb0c643"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <a href="/versions/v16/techniques/T1069" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" title="T1069">Permission Groups Discovery <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--a01bf75f-00b2-4568-a58f-565ff9bf202b"> <a href="/versions/v16/techniques/T1069/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--a01bf75f-00b2-4568-a58f-565ff9bf202b" title="T1069.001">Local Groups</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--2aed01ad-3df3-4410-a8cb-11ea4ded587c"> <a href="/versions/v16/techniques/T1069/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--2aed01ad-3df3-4410-a8cb-11ea4ded587c" title="T1069.002">Domain Groups</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2"> <a href="/versions/v16/techniques/T1069/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2" title="T1069.003">Cloud Groups</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f4a33ec-8b1f-4b80-a2f6-642b2e479580"> <a href="/versions/v16/techniques/T1057" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f4a33ec-8b1f-4b80-a2f6-642b2e479580" title="T1057">Process Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f4a33ec-8b1f-4b80-a2f6-642b2e479580"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c32f7008-9fea-41f7-8366-5eb9b74bd896"> <a href="/versions/v16/techniques/T1012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c32f7008-9fea-41f7-8366-5eb9b74bd896" title="T1012">Query Registry</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c32f7008-9fea-41f7-8366-5eb9b74bd896"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e358d692-23c0-4a31-9eb6-ecc13a8d7735"> <a href="/versions/v16/techniques/T1018" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e358d692-23c0-4a31-9eb6-ecc13a8d7735" title="T1018">Remote System Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e358d692-23c0-4a31-9eb6-ecc13a8d7735"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58"> <a href="/versions/v16/techniques/T1518" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58" title="T1518">Software Discovery <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--cba37adb-d6fb-4610-b069-dd04c0643384"> <a href="/versions/v16/techniques/T1518/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--cba37adb-d6fb-4610-b069-dd04c0643384" title="T1518.001">Security Software Discovery</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--354a7f88-63fb-41b5-a801-ce3b377b36f1"> <a href="/versions/v16/techniques/T1082" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--354a7f88-63fb-41b5-a801-ce3b377b36f1" title="T1082">System Information Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--354a7f88-63fb-41b5-a801-ce3b377b36f1"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979"> <a href="/versions/v16/techniques/T1614" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979" title="T1614">System Location Discovery <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c1b68a96-3c48-49ea-a6c0-9b27359f9c19"> <a href="/versions/v16/techniques/T1614/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c1b68a96-3c48-49ea-a6c0-9b27359f9c19" title="T1614.001">System Language Discovery</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0"> <a href="/versions/v16/techniques/T1016" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0" title="T1016">System Network Configuration Discovery <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--132d5b37-aac5-4378-a8dc-3127b18a73dc"> <a href="/versions/v16/techniques/T1016/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--132d5b37-aac5-4378-a8dc-3127b18a73dc" title="T1016.001">Internet Connection Discovery</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--494ab9f0-36e0-4b06-b10d-57285b040a06"> <a href="/versions/v16/techniques/T1016/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--494ab9f0-36e0-4b06-b10d-57285b040a06" title="T1016.002">Wi-Fi Discovery</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7e150503-88e7-4861-866b-ff1ac82c4475"> <a href="/versions/v16/techniques/T1049" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7e150503-88e7-4861-866b-ff1ac82c4475" title="T1049">System Network Connections Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7e150503-88e7-4861-866b-ff1ac82c4475"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--03d7999c-1f4c-42cc-8373-e7690d318104"> <a href="/versions/v16/techniques/T1033" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--03d7999c-1f4c-42cc-8373-e7690d318104" title="T1033">System Owner/User Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--03d7999c-1f4c-42cc-8373-e7690d318104"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--322bad5a-1c49-4d23-ab79-76d641794afa"> <a href="/versions/v16/techniques/T1007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--322bad5a-1c49-4d23-ab79-76d641794afa" title="T1007">System Service Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--322bad5a-1c49-4d23-ab79-76d641794afa"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--f3c544dc-673c-4ef3-accb-53229f1ae077"> <a href="/versions/v16/techniques/T1124" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--f3c544dc-673c-4ef3-accb-53229f1ae077" title="T1124">System Time Discovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--f3c544dc-673c-4ef3-accb-53229f1ae077"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <a href="/versions/v16/techniques/T1497" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" title="T1497">Virtualization/Sandbox Evasion <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6"> <a href="/versions/v16/techniques/T1497/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6" title="T1497.001">System Checks</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938"> <a href="/versions/v16/techniques/T1497/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938" title="T1497.002">User Activity Based Checks</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0"> <a href="/versions/v16/techniques/T1497/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0" title="T1497.003">Time Based Evasion</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9db0cf3a-a3c9-4012-8268-123b9db6fd82"> <a href="/versions/v16/techniques/T1210" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9db0cf3a-a3c9-4012-8268-123b9db6fd82" title="T1210">Exploitation of Remote Services</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9db0cf3a-a3c9-4012-8268-123b9db6fd82"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9e7452df-5144-4b6e-b04a-b66dd4016747"> <a href="/versions/v16/techniques/T1534" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9e7452df-5144-4b6e-b04a-b66dd4016747" title="T1534">Internal Spearphishing</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9e7452df-5144-4b6e-b04a-b66dd4016747"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--bf90d72c-c00b-45e3-b3aa-68560560d4c5"> <a href="/versions/v16/techniques/T1570" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--bf90d72c-c00b-45e3-b3aa-68560560d4c5" title="T1570">Lateral Tool Transfer</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--bf90d72c-c00b-45e3-b3aa-68560560d4c5"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5"> <a href="/versions/v16/techniques/T1563" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5" title="T1563">Remote Service Session Hijacking <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4d2a5b3e-340d-4600-9123-309dd63c9bf8"> <a href="/versions/v16/techniques/T1563/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4d2a5b3e-340d-4600-9123-309dd63c9bf8" title="T1563.001">SSH Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e0033c16-a07e-48aa-8204-7c3ca669998c"> <a href="/versions/v16/techniques/T1563/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e0033c16-a07e-48aa-8204-7c3ca669998c" title="T1563.002">RDP Hijacking</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba"> <a href="/versions/v16/techniques/T1021" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba" title="T1021">Remote Services <sub>(8)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--eb062747-2193-45de-8fa2-e62549c37ddf"> <a href="/versions/v16/techniques/T1021/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--eb062747-2193-45de-8fa2-e62549c37ddf" title="T1021.001">Remote Desktop Protocol</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4f9ca633-15c5-463c-9724-bdcd54fde541"> <a href="/versions/v16/techniques/T1021/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4f9ca633-15c5-463c-9724-bdcd54fde541" title="T1021.002">SMB/Windows Admin Shares</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--68a0c5ed-bee2-4513-830d-5b0d650139bd"> <a href="/versions/v16/techniques/T1021/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--68a0c5ed-bee2-4513-830d-5b0d650139bd" title="T1021.003">Distributed Component Object Model</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--2db31dcd-54da-405d-acef-b9129b816ed6"> <a href="/versions/v16/techniques/T1021/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--2db31dcd-54da-405d-acef-b9129b816ed6" title="T1021.004">SSH</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--01327cde-66c4-4123-bf34-5f258d59457b"> <a href="/versions/v16/techniques/T1021/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--01327cde-66c4-4123-bf34-5f258d59457b" title="T1021.005">VNC</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--60d0c01d-e2bf-49dd-a453-f8a9c9fa6f65"> <a href="/versions/v16/techniques/T1021/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--60d0c01d-e2bf-49dd-a453-f8a9c9fa6f65" title="T1021.006">Windows Remote Management</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--8861073d-d1b8-4941-82ce-dce621d398f0"> <a href="/versions/v16/techniques/T1021/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--8861073d-d1b8-4941-82ce-dce621d398f0" title="T1021.007">Cloud Services</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--45241b9e-9bbc-4826-a2cc-78855e51ca09"> <a href="/versions/v16/techniques/T1021/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--45241b9e-9bbc-4826-a2cc-78855e51ca09" title="T1021.008">Direct Cloud VM Connections</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4"> <a href="/versions/v16/techniques/T1091" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4" title="T1091">Replication Through Removable Media</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414"> <a href="/versions/v16/techniques/T1072" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414" title="T1072">Software Deployment Tools</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--246fd3c7-f5e3-466d-8787-4c13d9e3b61c"> <a href="/versions/v16/techniques/T1080" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--246fd3c7-f5e3-466d-8787-4c13d9e3b61c" title="T1080">Taint Shared Content</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--246fd3c7-f5e3-466d-8787-4c13d9e3b61c"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/versions/v16/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/versions/v16/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e"> <a href="/versions/v16/techniques/T1550/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e" title="T1550.002">Pass the Hash</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926"> <a href="/versions/v16/techniques/T1550/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926" title="T1550.003">Pass the Ticket</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0"> <a href="/versions/v16/techniques/T1550/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0" title="T1550.004">Web Session Cookie</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <a href="/versions/v16/techniques/T1557" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" title="T1557">Adversary-in-the-Middle <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e"> <a href="/versions/v16/techniques/T1557/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e" title="T1557.001">LLMNR/NBT-NS Poisoning and SMB Relay</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213"> <a href="/versions/v16/techniques/T1557/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213" title="T1557.002">ARP Cache Poisoning</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5"> <a href="/versions/v16/techniques/T1557/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5" title="T1557.003">DHCP Spoofing</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e"> <a href="/versions/v16/techniques/T1557/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e" title="T1557.004">Evil Twin</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a"> <a href="/versions/v16/techniques/T1560" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a" title="T1560">Archive Collected Data <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--00f90846-cbd1-4fc5-9233-df5c2bf2a662"> <a href="/versions/v16/techniques/T1560/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--00f90846-cbd1-4fc5-9233-df5c2bf2a662" title="T1560.001">Archive via Utility</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--41868330-6ee2-4d0f-b743-9f2294c3c9b6"> <a href="/versions/v16/techniques/T1560/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--41868330-6ee2-4d0f-b743-9f2294c3c9b6" title="T1560.002">Archive via Library</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--143c0cbb-a297-4142-9624-87ffc778980b"> <a href="/versions/v16/techniques/T1560/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--143c0cbb-a297-4142-9624-87ffc778980b" title="T1560.003">Archive via Custom Method</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1035cdf2-3e5f-446f-a7a7-e8f6d7925967"> <a href="/versions/v16/techniques/T1123" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1035cdf2-3e5f-446f-a7a7-e8f6d7925967" title="T1123">Audio Capture</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1035cdf2-3e5f-446f-a7a7-e8f6d7925967"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30208d3e-0d6b-43c8-883e-44462a514619"> <a href="/versions/v16/techniques/T1119" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30208d3e-0d6b-43c8-883e-44462a514619" title="T1119">Automated Collection</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30208d3e-0d6b-43c8-883e-44462a514619"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--544b0346-29ad-41e1-a808-501bb4193f47"> <a href="/versions/v16/techniques/T1185" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--544b0346-29ad-41e1-a808-501bb4193f47" title="T1185">Browser Session Hijacking</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--544b0346-29ad-41e1-a808-501bb4193f47"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30973a08-aed9-4edf-8604-9084ce1b5c4f"> <a href="/versions/v16/techniques/T1115" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30973a08-aed9-4edf-8604-9084ce1b5c4f" title="T1115">Clipboard Data</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30973a08-aed9-4edf-8604-9084ce1b5c4f"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3298ce88-1628-43b1-87d9-0b5336b193d7"> <a href="/versions/v16/techniques/T1530" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3298ce88-1628-43b1-87d9-0b5336b193d7" title="T1530">Data from Cloud Storage</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3298ce88-1628-43b1-87d9-0b5336b193d7"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74"> <a href="/versions/v16/techniques/T1602" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74" title="T1602">Data from Configuration Repository <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ee7ff928-801c-4f34-8a99-3df965e581a5"> <a href="/versions/v16/techniques/T1602/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ee7ff928-801c-4f34-8a99-3df965e581a5" title="T1602.001">SNMP (MIB Dump)</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--52759bf1-fe12-4052-ace6-c5b0cf7dd7fd"> <a href="/versions/v16/techniques/T1602/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--52759bf1-fe12-4052-ace6-c5b0cf7dd7fd" title="T1602.002">Network Device Configuration Dump</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416"> <a href="/versions/v16/techniques/T1213" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416" title="T1213">Data from Information Repositories <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7ad38ef1-381a-406d-872a-38b136eb5ecc"> <a href="/versions/v16/techniques/T1213/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7ad38ef1-381a-406d-872a-38b136eb5ecc" title="T1213.001">Confluence</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0c4b4fda-9062-47da-98b9-ceae2dcf052a"> <a href="/versions/v16/techniques/T1213/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0c4b4fda-9062-47da-98b9-ceae2dcf052a" title="T1213.002">Sharepoint</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cff94884-3b1c-4987-a70b-6d5643c621c3"> <a href="/versions/v16/techniques/T1213/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cff94884-3b1c-4987-a70b-6d5643c621c3" title="T1213.003">Code Repositories</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bbfbb096-6561-4d7d-aa2c-a5ee8e44c696"> <a href="/versions/v16/techniques/T1213/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bbfbb096-6561-4d7d-aa2c-a5ee8e44c696" title="T1213.004">Customer Relationship Management Software</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--fb75213f-cfb0-40bf-a02f-3bad93d6601e"> <a href="/versions/v16/techniques/T1213/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--fb75213f-cfb0-40bf-a02f-3bad93d6601e" title="T1213.005">Messaging Applications</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3c4a2599-71ee-4405-ba1e-0e28414b4bc5"> <a href="/versions/v16/techniques/T1005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3c4a2599-71ee-4405-ba1e-0e28414b4bc5" title="T1005">Data from Local System</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3c4a2599-71ee-4405-ba1e-0e28414b4bc5"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ae676644-d2d2-41b7-af7e-9bed1b55898c"> <a href="/versions/v16/techniques/T1039" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ae676644-d2d2-41b7-af7e-9bed1b55898c" title="T1039">Data from Network Shared Drive</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ae676644-d2d2-41b7-af7e-9bed1b55898c"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1b7ba276-eedc-4951-a762-0ceea2c030ec"> <a href="/versions/v16/techniques/T1025" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1b7ba276-eedc-4951-a762-0ceea2c030ec" title="T1025">Data from Removable Media</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1b7ba276-eedc-4951-a762-0ceea2c030ec"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e"> <a href="/versions/v16/techniques/T1074" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e" title="T1074">Data Staged <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1c34f7aa-9341-4a48-bfab-af22e51aca6c"> <a href="/versions/v16/techniques/T1074/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1c34f7aa-9341-4a48-bfab-af22e51aca6c" title="T1074.001">Local Data Staging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--359b00ad-9425-420b-bba5-6de8d600cbc0"> <a href="/versions/v16/techniques/T1074/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--359b00ad-9425-420b-bba5-6de8d600cbc0" title="T1074.002">Remote Data Staging</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f"> <a href="/versions/v16/techniques/T1114" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f" title="T1114">Email Collection <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1e9eb839-294b-48cc-b0d3-c45555a2a004"> <a href="/versions/v16/techniques/T1114/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1e9eb839-294b-48cc-b0d3-c45555a2a004" title="T1114.001">Local Email Collection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--b4694861-542c-48ea-9eb1-10d356e7140a"> <a href="/versions/v16/techniques/T1114/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--b4694861-542c-48ea-9eb1-10d356e7140a" title="T1114.002">Remote Email Collection</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7d77a07d-02fe-4e88-8bd9-e9c008c01bf0"> <a href="/versions/v16/techniques/T1114/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7d77a07d-02fe-4e88-8bd9-e9c008c01bf0" title="T1114.003">Email Forwarding Rule</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <a href="/versions/v16/techniques/T1056" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" title="T1056">Input Capture <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4"> <a href="/versions/v16/techniques/T1056/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4" title="T1056.001">Keylogging</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d"> <a href="/versions/v16/techniques/T1056/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d" title="T1056.002">GUI Input Capture</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e"> <a href="/versions/v16/techniques/T1056/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e" title="T1056.003">Web Portal Capture</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6"> <a href="/versions/v16/techniques/T1056/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6" title="T1056.004">Credential API Hooking</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0259baeb-9f63-4c69-bf10-eb038c390688"> <a href="/versions/v16/techniques/T1113" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0259baeb-9f63-4c69-bf10-eb038c390688" title="T1113">Screen Capture</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0259baeb-9f63-4c69-bf10-eb038c390688"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--6faf650d-bf31-4eb4-802d-1000cf38efaf"> <a href="/versions/v16/techniques/T1125" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--6faf650d-bf31-4eb4-802d-1000cf38efaf" title="T1125">Video Capture</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--6faf650d-bf31-4eb4-802d-1000cf38efaf"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6"> <a href="/versions/v16/techniques/T1071" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6" title="T1071">Application Layer Protocol <sub>(5)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161"> <a href="/versions/v16/techniques/T1071/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161" title="T1071.001">Web Protocols</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9a60a291-8960-4387-8a4a-2ab5c18bb50b"> <a href="/versions/v16/techniques/T1071/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9a60a291-8960-4387-8a4a-2ab5c18bb50b" title="T1071.002">File Transfer Protocols</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--54b4c251-1f0e-4eba-ba6b-dbc7a6f6f06b"> <a href="/versions/v16/techniques/T1071/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--54b4c251-1f0e-4eba-ba6b-dbc7a6f6f06b" title="T1071.003">Mail Protocols</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--1996eef1-ced3-4d7f-bf94-33298cabbf72"> <a href="/versions/v16/techniques/T1071/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--1996eef1-ced3-4d7f-bf94-33298cabbf72" title="T1071.004">DNS</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--241f9ea8-f6ae-4f38-92f5-cef5b7e539dd"> <a href="/versions/v16/techniques/T1071/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--241f9ea8-f6ae-4f38-92f5-cef5b7e539dd" title="T1071.005">Publish/Subscribe Protocols</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--64196062-5210-42c3-9a02-563a0d1797ef"> <a href="/versions/v16/techniques/T1092" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--64196062-5210-42c3-9a02-563a0d1797ef" title="T1092">Communication Through Removable Media</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--64196062-5210-42c3-9a02-563a0d1797ef"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c"> <a href="/versions/v16/techniques/T1659" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c" title="T1659">Content Injection</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f"> <a href="/versions/v16/techniques/T1132" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f" title="T1132">Data Encoding <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--04fd5427-79c7-44ea-ae13-11b24778ff1c"> <a href="/versions/v16/techniques/T1132/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--04fd5427-79c7-44ea-ae13-11b24778ff1c" title="T1132.001">Standard Encoding</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--d467bc38-284b-4a00-96ac-125f447799fc"> <a href="/versions/v16/techniques/T1132/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--d467bc38-284b-4a00-96ac-125f447799fc" title="T1132.002">Non-Standard Encoding</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842"> <a href="/versions/v16/techniques/T1001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842" title="T1001">Data Obfuscation <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7c0689c-4dbd-489b-81be-7cb7c7079ade"> <a href="/versions/v16/techniques/T1001/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7c0689c-4dbd-489b-81be-7cb7c7079ade" title="T1001.001">Junk Data</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eec23884-3fa1-4d8a-ac50-6f104d51e235"> <a href="/versions/v16/techniques/T1001/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eec23884-3fa1-4d8a-ac50-6f104d51e235" title="T1001.002">Steganography</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c325b232-d5bc-4dde-a3ec-71f3db9e8adc"> <a href="/versions/v16/techniques/T1001/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c325b232-d5bc-4dde-a3ec-71f3db9e8adc" title="T1001.003">Protocol or Service Impersonation</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b"> <a href="/versions/v16/techniques/T1568" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b" title="T1568">Dynamic Resolution <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--29ba5a15-3b7b-4732-b817-65ea8f6468e6"> <a href="/versions/v16/techniques/T1568/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--29ba5a15-3b7b-4732-b817-65ea8f6468e6" title="T1568.001">Fast Flux DNS</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--118f61a5-eb3e-4fb6-931f-2096647f4ecd"> <a href="/versions/v16/techniques/T1568/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--118f61a5-eb3e-4fb6-931f-2096647f4ecd" title="T1568.002">Domain Generation Algorithms</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--83a766f8-1501-4b3a-a2de-2e2849e8dfc1"> <a href="/versions/v16/techniques/T1568/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--83a766f8-1501-4b3a-a2de-2e2849e8dfc1" title="T1568.003">DNS Calculation</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118"> <a href="/versions/v16/techniques/T1573" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118" title="T1573">Encrypted Channel <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--24bfaeba-cb0d-4525-b3dc-507c77ecec41"> <a href="/versions/v16/techniques/T1573/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--24bfaeba-cb0d-4525-b3dc-507c77ecec41" title="T1573.001">Symmetric Cryptography</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--bf176076-b789-408e-8cba-7275e81c0ada"> <a href="/versions/v16/techniques/T1573/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--bf176076-b789-408e-8cba-7275e81c0ada" title="T1573.002">Asymmetric Cryptography</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f24faf46-3b26-4dbb-98f2-63460498e433"> <a href="/versions/v16/techniques/T1008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f24faf46-3b26-4dbb-98f2-63460498e433" title="T1008">Fallback Channels</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f24faf46-3b26-4dbb-98f2-63460498e433"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eb897572-8979-4242-a089-56f294f4c91d"> <a href="/versions/v16/techniques/T1665" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eb897572-8979-4242-a089-56f294f4c91d" title="T1665">Hide Infrastructure</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eb897572-8979-4242-a089-56f294f4c91d"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--e6919abc-99f9-4c6c-95a5-14761e7b2add"> <a href="/versions/v16/techniques/T1105" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--e6919abc-99f9-4c6c-95a5-14761e7b2add" title="T1105">Ingress Tool Transfer</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--e6919abc-99f9-4c6c-95a5-14761e7b2add"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--84e02621-8fdf-470f-bd58-993bb6a89d91"> <a href="/versions/v16/techniques/T1104" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--84e02621-8fdf-470f-bd58-993bb6a89d91" title="T1104">Multi-Stage Channels</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--84e02621-8fdf-470f-bd58-993bb6a89d91"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c21d5a77-d422-4a69-acd7-2c53c1faa34b"> <a href="/versions/v16/techniques/T1095" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c21d5a77-d422-4a69-acd7-2c53c1faa34b" title="T1095">Non-Application Layer Protocol</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c21d5a77-d422-4a69-acd7-2c53c1faa34b"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b18eae87-b469-4e14-b454-b171b416bc18"> <a href="/versions/v16/techniques/T1571" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b18eae87-b469-4e14-b454-b171b416bc18" title="T1571">Non-Standard Port</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b18eae87-b469-4e14-b454-b171b416bc18"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4fe28b27-b13c-453e-a386-c2ef362a573b"> <a href="/versions/v16/techniques/T1572" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4fe28b27-b13c-453e-a386-c2ef362a573b" title="T1572">Protocol Tunneling</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4fe28b27-b13c-453e-a386-c2ef362a573b"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea"> <a href="/versions/v16/techniques/T1090" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea" title="T1090">Proxy <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f6dacc85-b37d-458e-b58d-74fc4bbf5755"> <a href="/versions/v16/techniques/T1090/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f6dacc85-b37d-458e-b58d-74fc4bbf5755" title="T1090.001">Internal Proxy</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--69b8fd78-40e8-4600-ae4d-662c9d7afdb3"> <a href="/versions/v16/techniques/T1090/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--69b8fd78-40e8-4600-ae4d-662c9d7afdb3" title="T1090.002">External Proxy</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--a782ebe2-daba-42c7-bc82-e8e9d923162d"> <a href="/versions/v16/techniques/T1090/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--a782ebe2-daba-42c7-bc82-e8e9d923162d" title="T1090.003">Multi-hop Proxy</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ca9d3402-ada3-484d-876a-d717bd6e05f2"> <a href="/versions/v16/techniques/T1090/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ca9d3402-ada3-484d-876a-d717bd6e05f2" title="T1090.004">Domain Fronting</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4061e78c-1284-44b4-9116-73e4ac3912f7"> <a href="/versions/v16/techniques/T1219" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4061e78c-1284-44b4-9116-73e4ac3912f7" title="T1219">Remote Access Software</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4061e78c-1284-44b4-9116-73e4ac3912f7"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <a href="/versions/v16/techniques/T1205" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" title="T1205">Traffic Signaling <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--451a9977-d255-43c9-b431-66de80130c8c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd"> <a href="/versions/v16/techniques/T1205/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd" title="T1205.001">Port Knocking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520"> <a href="/versions/v16/techniques/T1205/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520" title="T1205.002">Socket Filters</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665"> <a href="/versions/v16/techniques/T1102" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665" title="T1102">Web Service <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--830c9528-df21-472c-8c14-a036bf17d665');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7827069-0bf2-4764-af4f-23fae0d181b7"> <a href="/versions/v16/techniques/T1102/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7827069-0bf2-4764-af4f-23fae0d181b7" title="T1102.001">Dead Drop Resolver</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--be055942-6e63-49d7-9fa1-9cb7d8a8f3f4"> <a href="/versions/v16/techniques/T1102/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--be055942-6e63-49d7-9fa1-9cb7d8a8f3f4" title="T1102.002">Bidirectional Communication</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9c99724c-a483-4d60-ad9d-7f004e42e8e8"> <a href="/versions/v16/techniques/T1102/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9c99724c-a483-4d60-ad9d-7f004e42e8e8" title="T1102.003">One-Way Communication</a> </div> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9"> <a href="/versions/v16/techniques/T1020" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9" title="T1020">Automated Exfiltration <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--7c46b364-8496-4234-8a56-f7e6727e21e1"> <a href="/versions/v16/techniques/T1020/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--7c46b364-8496-4234-8a56-f7e6727e21e1" title="T1020.001">Traffic Duplication</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--c3888c54-775d-4b2f-b759-75a2ececcbfd"> <a href="/versions/v16/techniques/T1030" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--c3888c54-775d-4b2f-b759-75a2ececcbfd" title="T1030">Data Transfer Size Limits</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--c3888c54-775d-4b2f-b759-75a2ececcbfd"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776"> <a href="/versions/v16/techniques/T1048" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776" title="T1048">Exfiltration Over Alternative Protocol <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--79a4052e-1a89-4b09-aea6-51f1d11fe19c"> <a href="/versions/v16/techniques/T1048/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--79a4052e-1a89-4b09-aea6-51f1d11fe19c" title="T1048.001">Exfiltration Over Symmetric Encrypted Non-C2 Protocol</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--8e350c1d-ac79-4b5c-bd4e-7476d7e84ec5"> <a href="/versions/v16/techniques/T1048/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--8e350c1d-ac79-4b5c-bd4e-7476d7e84ec5" title="T1048.002">Exfiltration Over Asymmetric Encrypted Non-C2 Protocol</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--fb8d023d-45be-47e9-bc51-f56bcae6435b"> <a href="/versions/v16/techniques/T1048/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--fb8d023d-45be-47e9-bc51-f56bcae6435b" title="T1048.003">Exfiltration Over Unencrypted Non-C2 Protocol</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--92d7da27-2d91-488e-a00c-059dc162766d"> <a href="/versions/v16/techniques/T1041" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--92d7da27-2d91-488e-a00c-059dc162766d" title="T1041">Exfiltration Over C2 Channel</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--92d7da27-2d91-488e-a00c-059dc162766d"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87"> <a href="/versions/v16/techniques/T1011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87" title="T1011">Exfiltration Over Other Network Medium <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--613d08bc-e8f4-4791-80b0-c8b974340dfd"> <a href="/versions/v16/techniques/T1011/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--613d08bc-e8f4-4791-80b0-c8b974340dfd" title="T1011.001">Exfiltration Over Bluetooth</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549"> <a href="/versions/v16/techniques/T1052" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549" title="T1052">Exfiltration Over Physical Medium <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a3e1e6c5-9c74-4fc0-a16c-a9d228c17829"> <a href="/versions/v16/techniques/T1052/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a3e1e6c5-9c74-4fc0-a16c-a9d228c17829" title="T1052.001">Exfiltration over USB</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807"> <a href="/versions/v16/techniques/T1567" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807" title="T1567">Exfiltration Over Web Service <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--86a96bf6-cf8b-411c-aaeb-8959944d64f7"> <a href="/versions/v16/techniques/T1567/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--86a96bf6-cf8b-411c-aaeb-8959944d64f7" title="T1567.001">Exfiltration to Code Repository</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--bf1b6176-597c-4600-bfcd-ac989670f96b"> <a href="/versions/v16/techniques/T1567/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--bf1b6176-597c-4600-bfcd-ac989670f96b" title="T1567.002">Exfiltration to Cloud Storage</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--ba04e672-da86-4e69-aa15-0eca5db25f43"> <a href="/versions/v16/techniques/T1567/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--ba04e672-da86-4e69-aa15-0eca5db25f43" title="T1567.003">Exfiltration to Text Storage Sites</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--43f2776f-b4bd-4118-94b8-fee47e69676d"> <a href="/versions/v16/techniques/T1567/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--43f2776f-b4bd-4118-94b8-fee47e69676d" title="T1567.004">Exfiltration Over Webhook</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--4eeaf8a9-c86b-4954-a663-9555fb406466"> <a href="/versions/v16/techniques/T1029" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--4eeaf8a9-c86b-4954-a663-9555fb406466" title="T1029">Scheduled Transfer</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--4eeaf8a9-c86b-4954-a663-9555fb406466"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--d4bdbdea-eaec-4071-b4f9-5105e12ea4b6"> <a href="/versions/v16/techniques/T1537" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--d4bdbdea-eaec-4071-b4f9-5105e12ea4b6" title="T1537">Transfer Data to Cloud Account</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--d4bdbdea-eaec-4071-b4f9-5105e12ea4b6"> </div> </td> </tr> </table> </td> <td class="tactic"> <table class="techniques-table">  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b24e2a20-3b3d-4bf0-823b-1ed765398fb0"> <a href="/versions/v16/techniques/T1531" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b24e2a20-3b3d-4bf0-823b-1ed765398fb0" title="T1531">Account Access Removal</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b24e2a20-3b3d-4bf0-823b-1ed765398fb0"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c"> <a href="/versions/v16/techniques/T1485" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c" title="T1485">Data Destruction <sub>(1)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1001e0d6-ee09-4dfc-aa90-e9320ffc8fe4"> <a href="/versions/v16/techniques/T1485/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1001e0d6-ee09-4dfc-aa90-e9320ffc8fe4" title="T1485.001">Lifecycle-Triggered Deletion</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b80d107d-fa0d-4b60-9684-b0433e8bdba0"> <a href="/versions/v16/techniques/T1486" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b80d107d-fa0d-4b60-9684-b0433e8bdba0" title="T1486">Data Encrypted for Impact</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b80d107d-fa0d-4b60-9684-b0433e8bdba0"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931"> <a href="/versions/v16/techniques/T1565" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931" title="T1565">Data Manipulation <sub>(3)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1cfcb312-b8d7-47a4-b560-4b16cc677292"> <a href="/versions/v16/techniques/T1565/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1cfcb312-b8d7-47a4-b560-4b16cc677292" title="T1565.001">Stored Data Manipulation</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d0613359-5781-4fd2-b5be-c269270be1f6"> <a href="/versions/v16/techniques/T1565/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d0613359-5781-4fd2-b5be-c269270be1f6" title="T1565.002">Transmitted Data Manipulation</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--32ad5c86-2bcf-47d8-8fdc-d7f3d79a7490"> <a href="/versions/v16/techniques/T1565/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--32ad5c86-2bcf-47d8-8fdc-d7f3d79a7490" title="T1565.003">Runtime Data Manipulation</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b"> <a href="/versions/v16/techniques/T1491" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b" title="T1491">Defacement <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--8c41090b-aa47-4331-986b-8c9a51a91103"> <a href="/versions/v16/techniques/T1491/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--8c41090b-aa47-4331-986b-8c9a51a91103" title="T1491.001">Internal Defacement</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0cfe31a7-81fc-472c-bc45-e2808d1066a3"> <a href="/versions/v16/techniques/T1491/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0cfe31a7-81fc-472c-bc45-e2808d1066a3" title="T1491.002">External Defacement</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967"> <a href="/versions/v16/techniques/T1561" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967" title="T1561">Disk Wipe <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--fb640c43-aa6b-431e-a961-a279010424ac"> <a href="/versions/v16/techniques/T1561/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--fb640c43-aa6b-431e-a961-a279010424ac" title="T1561.001">Disk Content Wipe</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0af0ca99-357d-4ba1-805f-674fdfb7bef9"> <a href="/versions/v16/techniques/T1561/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0af0ca99-357d-4ba1-805f-674fdfb7bef9" title="T1561.002">Disk Structure Wipe</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4"> <a href="/versions/v16/techniques/T1499" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4" title="T1499">Endpoint Denial of Service <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0df05477-c572-4ed6-88a9-47c581f548f7"> <a href="/versions/v16/techniques/T1499/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0df05477-c572-4ed6-88a9-47c581f548f7" title="T1499.001">OS Exhaustion Flood</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--38eb0c22-6caf-46ce-8869-5964bd735858"> <a href="/versions/v16/techniques/T1499/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--38eb0c22-6caf-46ce-8869-5964bd735858" title="T1499.002">Service Exhaustion Flood</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--18cffc21-3260-437e-80e4-4ab8bf2ba5e9"> <a href="/versions/v16/techniques/T1499/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--18cffc21-3260-437e-80e4-4ab8bf2ba5e9" title="T1499.003">Application Exhaustion Flood</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--2bee5ffb-7a7a-4119-b1f2-158151b19ac0"> <a href="/versions/v16/techniques/T1499/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--2bee5ffb-7a7a-4119-b1f2-158151b19ac0" title="T1499.004">Application or System Exploitation</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--851e071f-208d-4c79-adc6-5974c85c78f3"> <a href="/versions/v16/techniques/T1657" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--851e071f-208d-4c79-adc6-5974c85c78f3" title="T1657">Financial Theft</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--851e071f-208d-4c79-adc6-5974c85c78f3"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5bb433e-bdf6-4781-84bc-35e97e43be89"> <a href="/versions/v16/techniques/T1495" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5bb433e-bdf6-4781-84bc-35e97e43be89" title="T1495">Firmware Corruption</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5bb433e-bdf6-4781-84bc-35e97e43be89"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a"> <a href="/versions/v16/techniques/T1490" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a" title="T1490">Inhibit System Recovery</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a"> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab"> <a href="/versions/v16/techniques/T1498" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab" title="T1498">Network Denial of Service <sub>(2)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0bda01d5-4c1d-4062-8ee2-6872334383c3"> <a href="/versions/v16/techniques/T1498/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0bda01d5-4c1d-4062-8ee2-6872334383c3" title="T1498.001">Direct Network Flood</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--36b2a1d7-e09e-49bf-b45e-477076c2ec01"> <a href="/versions/v16/techniques/T1498/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--36b2a1d7-e09e-49bf-b45e-477076c2ec01" title="T1498.002">Reflection Amplification</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <table class="supertechnique"> <tr> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783"> <a href="/versions/v16/techniques/T1496" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783" title="T1496">Resource Hijacking <sub>(4)</sub></a> </div> </td> </tr> </table> </td> <td class="sidebar sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783');"> <div class="angle top"> <svg width="12px" height="12px"> <path d="M0 12H12V0Z"/> </svg> </div> <div class="handle"> = </div> <div class="angle bottom"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783"> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--a718a0c8-5768-41a1-9958-a1cc3f995e99"> <a href="/versions/v16/techniques/T1496/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--a718a0c8-5768-41a1-9958-a1cc3f995e99" title="T1496.001">Compute Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--718cb208-6446-4572-a2f0-9c799c60091e"> <a href="/versions/v16/techniques/T1496/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--718cb208-6446-4572-a2f0-9c799c60091e" title="T1496.002">Bandwidth Hijacking</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--130d4494-b2d6-4040-bcea-6e59f05222fe"> <a href="/versions/v16/techniques/T1496/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--130d4494-b2d6-4040-bcea-6e59f05222fe" title="T1496.003">SMS Pumping</a> </div> </div> <div class="subtechnique"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--924d273c-be0d-4d8d-af58-2dddb15ef1e2"> <a href="/versions/v16/techniques/T1496/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--924d273c-be0d-4d8d-af58-2dddb15ef1e2" title="T1496.004">Cloud Service Hijacking</a> </div> </div> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--20fb2507-d71c-455d-9b6d-6104461cf26b"> <a href="/versions/v16/techniques/T1489" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--20fb2507-d71c-455d-9b6d-6104461cf26b" title="T1489">Service Stop</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--20fb2507-d71c-455d-9b6d-6104461cf26b"> </div> </td> </tr>  <tr class="technique-row" > <td> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ff73aa03-0090-4464-83ac-f89e233c02bc"> <a href="/versions/v16/techniques/T1529" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ff73aa03-0090-4464-83ac-f89e233c02bc" title="T1529">System Shutdown/Reboot</a> </div> </td> <td class="subtechniques-td"> <div class="subtechniques hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ff73aa03-0090-4464-83ac-f89e233c02bc"> </div> </td> </tr> </table> </td> </tr> </tbody> </table> </div> <div class="scroll-indicator right"> <div class="cover"></div> </div> </div>  </div> </div> <div class="matrix-type flat d-none"> <div class="matrix-container p-3"> <div class="scroll-indicator-group"> <div class="scroll-indicator left"> <div class="cover"></div> </div> <div class="overflow-x-auto matrix-scroll-box pb-3"> <table class="matrix flat"> <thead> <tr> <td class="tactic name"><a href="/versions/v16/tactics/TA0043" data-toggle="tooltip" data-placement="top" title="TA0043">Reconnaissance</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0042" data-toggle="tooltip" data-placement="top" title="TA0042">Resource Development</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0001" data-toggle="tooltip" data-placement="top" title="TA0001">Initial Access</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0002" data-toggle="tooltip" data-placement="top" title="TA0002">Execution</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0003" data-toggle="tooltip" data-placement="top" title="TA0003">Persistence</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0004" data-toggle="tooltip" data-placement="top" title="TA0004">Privilege Escalation</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0005" data-toggle="tooltip" data-placement="top" title="TA0005">Defense Evasion</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0006" data-toggle="tooltip" data-placement="top" title="TA0006">Credential Access</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0007" data-toggle="tooltip" data-placement="top" title="TA0007">Discovery</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0008" data-toggle="tooltip" data-placement="top" title="TA0008">Lateral Movement</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0009" data-toggle="tooltip" data-placement="top" title="TA0009">Collection</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0011" data-toggle="tooltip" data-placement="top" title="TA0011">Command and Control</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0010" data-toggle="tooltip" data-placement="top" title="TA0010">Exfiltration</a></td> <td class="tactic name"><a href="/versions/v16/tactics/TA0040" data-toggle="tooltip" data-placement="top" title="TA0040">Impact</a></td> </tr> <tr> <td class="tactic count"> 10 techniques </td> <td class="tactic count"> 8 techniques </td> <td class="tactic count"> 10 techniques </td> <td class="tactic count"> 14 techniques </td> <td class="tactic count"> 20 techniques </td> <td class="tactic count"> 14 techniques </td> <td class="tactic count"> 44 techniques </td> <td class="tactic count"> 17 techniques </td> <td class="tactic count"> 32 techniques </td> <td class="tactic count"> 9 techniques </td> <td class="tactic count"> 17 techniques </td> <td class="tactic count"> 18 techniques </td> <td class="tactic count"> 9 techniques </td> <td class="tactic count"> 14 techniques </td> </tr> </thead> <tbody> <tr> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b"> <a href="/versions/v16/techniques/T1595" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b" title="T1595">Active Scanning <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--67073dde-d720-45ae-83da-b12d5e73ca3b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--db8f5003-3b20-48f0-9b76-123e44208120"> <a href="/versions/v16/techniques/T1595/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--db8f5003-3b20-48f0-9b76-123e44208120" title="T1595.001">Scanning IP Blocks</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5502c4e9-24ef-4d5f-8ee9-9e906c2f82c4"> <a href="/versions/v16/techniques/T1595/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5502c4e9-24ef-4d5f-8ee9-9e906c2f82c4" title="T1595.002">Vulnerability Scanning</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bed04f7d-e48a-4e76-bd0f-4c57fe31fc46"> <a href="/versions/v16/techniques/T1595/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bed04f7d-e48a-4e76-bd0f-4c57fe31fc46" title="T1595.003">Wordlist Scanning</a> </div> </div> </td> </tr> </table>  <table class="supertechnique" id="tour-flat-technique" > <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f sidebar--tour" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f'); tour_technique_clicked();"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f"> <a href="/versions/v16/techniques/T1592" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f" title="T1592">Gather Victim Host Information <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--09312b1a-c3c6-4b45-9844-3ccc78e5d82f subtechniques--tour"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques" id="tour-flat-subtechniques" > <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--24286c33-d4a4-4419-85c2-1d094a896c26"> <a href="/versions/v16/techniques/T1592/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--24286c33-d4a4-4419-85c2-1d094a896c26" title="T1592.001">Hardware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--baf60e1a-afe5-4d31-830f-1b1ba2351884"> <a href="/versions/v16/techniques/T1592/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--baf60e1a-afe5-4d31-830f-1b1ba2351884" title="T1592.002">Software</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--b85f6ce5-81e8-4f36-aff2-3df9d02a9c9d"> <a href="/versions/v16/techniques/T1592/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--b85f6ce5-81e8-4f36-aff2-3df9d02a9c9d" title="T1592.003">Firmware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--774ad5bb-2366-4c13-a8a9-65e50b292e7c"> <a href="/versions/v16/techniques/T1592/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--774ad5bb-2366-4c13-a8a9-65e50b292e7c" title="T1592.004">Client Configurations</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4"> <a href="/versions/v16/techniques/T1589" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4" title="T1589">Gather Victim Identity Information <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--5282dd9a-d26d-4e16-88b7-7c0f4553daf4"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bc76d0a4-db11-4551-9ac4-01a469cfb161"> <a href="/versions/v16/techniques/T1589/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bc76d0a4-db11-4551-9ac4-01a469cfb161" title="T1589.001">Credentials</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--69f897fd-12a9-4c89-ad6a-46d2f3c38262"> <a href="/versions/v16/techniques/T1589/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--69f897fd-12a9-4c89-ad6a-46d2f3c38262" title="T1589.002">Email Addresses</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--76551c52-b111-4884-bc47-ff3e728f0156"> <a href="/versions/v16/techniques/T1589/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--76551c52-b111-4884-bc47-ff3e728f0156" title="T1589.003">Employee Names</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109"> <a href="/versions/v16/techniques/T1590" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109" title="T1590">Gather Victim Network Information <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--9d48cab2-7929-4812-ad22-f536665f0109"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--e3b168bd-fcd7-439e-9382-2e6c2f63514d"> <a href="/versions/v16/techniques/T1590/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--e3b168bd-fcd7-439e-9382-2e6c2f63514d" title="T1590.001">Domain Properties</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0ff59227-8aa8-4c09-bf1f-925605bd07ea"> <a href="/versions/v16/techniques/T1590/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0ff59227-8aa8-4c09-bf1f-925605bd07ea" title="T1590.002">DNS</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--36aa137f-5166-41f8-b2f0-a4cfa1b4133e"> <a href="/versions/v16/techniques/T1590/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--36aa137f-5166-41f8-b2f0-a4cfa1b4133e" title="T1590.003">Network Trust Dependencies</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--34ab90a3-05f6-4259-8f21-621081fdaba5"> <a href="/versions/v16/techniques/T1590/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--34ab90a3-05f6-4259-8f21-621081fdaba5" title="T1590.004">Network Topology</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0dda99f0-4701-48ca-9774-8504922e92d3"> <a href="/versions/v16/techniques/T1590/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0dda99f0-4701-48ca-9774-8504922e92d3" title="T1590.005">IP Addresses</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6c2957f9-502a-478c-b1dd-d626c0659413"> <a href="/versions/v16/techniques/T1590/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6c2957f9-502a-478c-b1dd-d626c0659413" title="T1590.006">Network Security Appliances</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23"> <a href="/versions/v16/techniques/T1591" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23" title="T1591">Gather Victim Org Information <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--937e4772-8441-4e4a-8bf0-8d447d667e23"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ed730f20-0e44-48b9-85f8-0e2adeb76867"> <a href="/versions/v16/techniques/T1591/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ed730f20-0e44-48b9-85f8-0e2adeb76867" title="T1591.001">Determine Physical Locations</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6ee2dc99-91ad-4534-a7d8-a649358c331f"> <a href="/versions/v16/techniques/T1591/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6ee2dc99-91ad-4534-a7d8-a649358c331f" title="T1591.002">Business Relationships</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2339cf19-8f1e-48f7-8a91-0262ba547b6f"> <a href="/versions/v16/techniques/T1591/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2339cf19-8f1e-48f7-8a91-0262ba547b6f" title="T1591.003">Identify Business Tempo</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cc723aff-ec88-40e3-a224-5af9fd983cc4"> <a href="/versions/v16/techniques/T1591/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cc723aff-ec88-40e3-a224-5af9fd983cc4" title="T1591.004">Identify Roles</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a"> <a href="/versions/v16/techniques/T1598" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a" title="T1598">Phishing for Information <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--cca0ccb6-a068-4574-a722-b1556f86833a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--f870408c-b1cd-49c7-a5c7-0ef0fc496cc6"> <a href="/versions/v16/techniques/T1598/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--f870408c-b1cd-49c7-a5c7-0ef0fc496cc6" title="T1598.001">Spearphishing Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--8982a661-d84c-48c0-b4ec-1db29c6cf3bc"> <a href="/versions/v16/techniques/T1598/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--8982a661-d84c-48c0-b4ec-1db29c6cf3bc" title="T1598.002">Spearphishing Attachment</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2d3f5b3c-54ca-4f4d-bb1f-849346d31230"> <a href="/versions/v16/techniques/T1598/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--2d3f5b3c-54ca-4f4d-bb1f-849346d31230" title="T1598.003">Spearphishing Link</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6a5d222a-a7e0-4656-b110-782c33098289"> <a href="/versions/v16/techniques/T1598/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6a5d222a-a7e0-4656-b110-782c33098289" title="T1598.004">Spearphishing Voice</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4"> <a href="/versions/v16/techniques/T1597" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4" title="T1597">Search Closed Sources <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a51eb150-93b1-484b-a503-e51453b127a4"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--51e54974-a541-4fb6-a61b-0518e4c6de41"> <a href="/versions/v16/techniques/T1597/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--51e54974-a541-4fb6-a61b-0518e4c6de41" title="T1597.001">Threat Intel Vendors</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0a241b6c-7bb2-48f9-98f7-128145b4d27f"> <a href="/versions/v16/techniques/T1597/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0a241b6c-7bb2-48f9-98f7-128145b4d27f" title="T1597.002">Purchase Technical Data</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0"> <a href="/versions/v16/techniques/T1596" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0" title="T1596">Search Open Technical Databases <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--17fd695c-b88c-455a-a3d1-43b6cb728532"> <a href="/versions/v16/techniques/T1596/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--17fd695c-b88c-455a-a3d1-43b6cb728532" title="T1596.001">DNS/Passive DNS</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--166de1c6-2814-4fe5-8438-4e80f76b169f"> <a href="/versions/v16/techniques/T1596/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--166de1c6-2814-4fe5-8438-4e80f76b169f" title="T1596.002">WHOIS</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0979abf9-4e26-43ec-9b6e-54efc4e70fca"> <a href="/versions/v16/techniques/T1596/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--0979abf9-4e26-43ec-9b6e-54efc4e70fca" title="T1596.003">Digital Certificates</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--91177e6d-b616-4a03-ba4b-f3b32f7dda75"> <a href="/versions/v16/techniques/T1596/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--91177e6d-b616-4a03-ba4b-f3b32f7dda75" title="T1596.004">CDNs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ec4be82f-940c-4dcb-87fe-2bbdd17c692f"> <a href="/versions/v16/techniques/T1596/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--ec4be82f-940c-4dcb-87fe-2bbdd17c692f" title="T1596.005">Scan Databases</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365" onclick="toggleMatrixSubTechniques('x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592', 'attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365"> <a href="/versions/v16/techniques/T1593" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365" title="T1593">Search Open Websites/Domains <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3"> <a href="/versions/v16/techniques/T1593/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--bbe5b322-e2af-4a5e-9625-a4e62bf84ed3" title="T1593.001">Social Media</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6e561441-8431-4773-a9b8-ccf28ef6a968"> <a href="/versions/v16/techniques/T1593/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--6e561441-8431-4773-a9b8-ccf28ef6a968" title="T1593.002">Search Engines</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--70910fbd-58dc-4c1c-8c48-814d11fcd022"> <a href="/versions/v16/techniques/T1593/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--70910fbd-58dc-4c1c-8c48-814d11fcd022" title="T1593.003">Code Repositories</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--16cdd21f-da65-4e4f-bc04-dd7d198c7b26"> <a href="/versions/v16/techniques/T1594" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--daa4cbb1-b4f4-4723-a824-7f1efd6e0592--attack-pattern--16cdd21f-da65-4e4f-bc04-dd7d198c7b26" title="T1594">Search Victim-Owned Websites</a> </div> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--d21bb61f-08ad-4dc1-b001-81ca6cb79954"> <a href="/versions/v16/techniques/T1650" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--d21bb61f-08ad-4dc1-b001-81ca6cb79954" title="T1650">Acquire Access</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2"> <a href="/versions/v16/techniques/T1583" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2" title="T1583">Acquire Infrastructure <sub>(8)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0458aab9-ad42-4eac-9e22-706a95bafee2"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--40f5caa0-4cb7-4117-89fc-d421bb493df3"> <a href="/versions/v16/techniques/T1583/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--40f5caa0-4cb7-4117-89fc-d421bb493df3" title="T1583.001">Domains</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--197ef1b9-e764-46c3-b96c-23f77985dc81"> <a href="/versions/v16/techniques/T1583/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--197ef1b9-e764-46c3-b96c-23f77985dc81" title="T1583.002">DNS Server</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--79da0971-3147-4af6-a4f5-e8cd447cd795"> <a href="/versions/v16/techniques/T1583/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--79da0971-3147-4af6-a4f5-e8cd447cd795" title="T1583.003">Virtual Private Server</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--60c4b628-4807-4b0b-bbf5-fdac8643c337"> <a href="/versions/v16/techniques/T1583/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--60c4b628-4807-4b0b-bbf5-fdac8643c337" title="T1583.004">Server</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31225cd3-cd46-4575-b287-c2c14011c074"> <a href="/versions/v16/techniques/T1583/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31225cd3-cd46-4575-b287-c2c14011c074" title="T1583.005">Botnet</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--88d31120-5bc7-4ce3-a9c0-7cf147be8e54"> <a href="/versions/v16/techniques/T1583/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--88d31120-5bc7-4ce3-a9c0-7cf147be8e54" title="T1583.006">Web Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--04a5a8ab-3bc8-4c83-95c9-55274a89786d"> <a href="/versions/v16/techniques/T1583/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--04a5a8ab-3bc8-4c83-95c9-55274a89786d" title="T1583.007">Serverless</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--155207c0-7f53-4f13-a06b-0a9907ef5096"> <a href="/versions/v16/techniques/T1583/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--155207c0-7f53-4f13-a06b-0a9907ef5096" title="T1583.008">Malvertising</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a"> <a href="/versions/v16/techniques/T1586" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a" title="T1586">Compromise Accounts <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--81033c3b-16a4-46e4-8fed-9b030dd03c4a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--274770e0-2612-4ccf-a678-ef8e7bad365d"> <a href="/versions/v16/techniques/T1586/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--274770e0-2612-4ccf-a678-ef8e7bad365d" title="T1586.001">Social Media Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3dc8c101-d4db-4f4d-8150-1b5a76ca5f1b"> <a href="/versions/v16/techniques/T1586/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3dc8c101-d4db-4f4d-8150-1b5a76ca5f1b" title="T1586.002">Email Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3d52e51e-f6db-4719-813c-48002a99f43a"> <a href="/versions/v16/techniques/T1586/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3d52e51e-f6db-4719-813c-48002a99f43a" title="T1586.003">Cloud Accounts</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9"> <a href="/versions/v16/techniques/T1584" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9" title="T1584">Compromise Infrastructure <sub>(8)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7e3beebd-8bfe-4e7b-a892-e44ab06a75f9"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f9cc4d06-775f-4ee1-b401-4e2cc0da30ba"> <a href="/versions/v16/techniques/T1584/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f9cc4d06-775f-4ee1-b401-4e2cc0da30ba" title="T1584.001">Domains</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c2f59d25-87fe-44aa-8f83-e8e59d077bf5"> <a href="/versions/v16/techniques/T1584/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c2f59d25-87fe-44aa-8f83-e8e59d077bf5" title="T1584.002">DNS Server</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--39cc9f64-cf74-4a48-a4d8-fe98c54a02e0"> <a href="/versions/v16/techniques/T1584/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--39cc9f64-cf74-4a48-a4d8-fe98c54a02e0" title="T1584.003">Virtual Private Server</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e196b5c5-8118-4a1c-ab8a-936586ce3db5"> <a href="/versions/v16/techniques/T1584/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e196b5c5-8118-4a1c-ab8a-936586ce3db5" title="T1584.004">Server</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--810d8072-afb6-4a56-9ee7-86379ac4a6f3"> <a href="/versions/v16/techniques/T1584/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--810d8072-afb6-4a56-9ee7-86379ac4a6f3" title="T1584.005">Botnet</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ae797531-3219-49a4-bccf-324ad7a4c7b2"> <a href="/versions/v16/techniques/T1584/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ae797531-3219-49a4-bccf-324ad7a4c7b2" title="T1584.006">Web Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--df1bc34d-1634-4c93-b89e-8120994fce77"> <a href="/versions/v16/techniques/T1584/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--df1bc34d-1634-4c93-b89e-8120994fce77" title="T1584.007">Serverless</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--149b477f-f364-4824-b1b5-aa1d56115869"> <a href="/versions/v16/techniques/T1584/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--149b477f-f364-4824-b1b5-aa1d56115869" title="T1584.008">Network Devices</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf"> <a href="/versions/v16/techniques/T1587" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf" title="T1587">Develop Capabilities <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--edadea33-549c-4ed1-9783-8f5a5853cbdf"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--212306d8-efa4-44c9-8c2d-ed3d2e224aa0"> <a href="/versions/v16/techniques/T1587/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--212306d8-efa4-44c9-8c2d-ed3d2e224aa0" title="T1587.001">Malware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--34b3f738-bd64-40e5-a112-29b0542bc8bf"> <a href="/versions/v16/techniques/T1587/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--34b3f738-bd64-40e5-a112-29b0542bc8bf" title="T1587.002">Code Signing Certificates</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--1cec9319-743b-4840-bb65-431547bce82a"> <a href="/versions/v16/techniques/T1587/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--1cec9319-743b-4840-bb65-431547bce82a" title="T1587.003">Digital Certificates</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--bbc3cba7-84ae-410d-b18b-16750731dfa2"> <a href="/versions/v16/techniques/T1587/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--bbc3cba7-84ae-410d-b18b-16750731dfa2" title="T1587.004">Exploits</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8"> <a href="/versions/v16/techniques/T1585" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8" title="T1585">Establish Accounts <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--cdfc5f0a-9bb9-4352-b896-553cfa2d8fd8"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--b1ccd744-3f78-4a0e-9bb2-2002057f7928"> <a href="/versions/v16/techniques/T1585/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--b1ccd744-3f78-4a0e-9bb2-2002057f7928" title="T1585.001">Social Media Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--65013dd2-bc61-43e3-afb5-a14c4fa7437a"> <a href="/versions/v16/techniques/T1585/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--65013dd2-bc61-43e3-afb5-a14c4fa7437a" title="T1585.002">Email Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--926d8cfd-1d0d-4da2-ab49-3ca10ec3f3b5"> <a href="/versions/v16/techniques/T1585/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--926d8cfd-1d0d-4da2-ab49-3ca10ec3f3b5" title="T1585.003">Cloud Accounts</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1"> <a href="/versions/v16/techniques/T1588" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1" title="T1588">Obtain Capabilities <sub>(7)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--ce0687a0-e692-4b77-964a-0784a8e54ff1"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7807d3a4-a885-4639-a786-c1ed41484970"> <a href="/versions/v16/techniques/T1588/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--7807d3a4-a885-4639-a786-c1ed41484970" title="T1588.001">Malware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--a2fdce72-04b2-409a-ac10-cc1695f4fce0"> <a href="/versions/v16/techniques/T1588/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--a2fdce72-04b2-409a-ac10-cc1695f4fce0" title="T1588.002">Tool</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e7cbc1de-1f79-48ee-abfd-da1241c65a15"> <a href="/versions/v16/techniques/T1588/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e7cbc1de-1f79-48ee-abfd-da1241c65a15" title="T1588.003">Code Signing Certificates</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--19401639-28d0-4c3c-adcc-bc2ba22f6421"> <a href="/versions/v16/techniques/T1588/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--19401639-28d0-4c3c-adcc-bc2ba22f6421" title="T1588.004">Digital Certificates</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f4b843c1-7e92-4701-8fed-ce82f8be2636"> <a href="/versions/v16/techniques/T1588/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--f4b843c1-7e92-4701-8fed-ce82f8be2636" title="T1588.005">Exploits</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--2b5aa86b-a0df-4382-848d-30abea443327"> <a href="/versions/v16/techniques/T1588/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--2b5aa86b-a0df-4382-848d-30abea443327" title="T1588.006">Vulnerabilities</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0cc222f5-c3ff-48e6-9f52-3314baf9d37e"> <a href="/versions/v16/techniques/T1588/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--0cc222f5-c3ff-48e6-9f52-3314baf9d37e" title="T1588.007">Artificial Intelligence</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400', 'attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0"> <a href="/versions/v16/techniques/T1608" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0" title="T1608">Stage Capabilities <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84771bc3-f6a0-403e-b144-01af70e5fda0"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3ee16395-03f0-4690-a32e-69ce9ada0f9e"> <a href="/versions/v16/techniques/T1608/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--3ee16395-03f0-4690-a32e-69ce9ada0f9e" title="T1608.001">Upload Malware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--506f6f49-7045-4156-9007-7474cb44ad6d"> <a href="/versions/v16/techniques/T1608/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--506f6f49-7045-4156-9007-7474cb44ad6d" title="T1608.002">Upload Tool</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c071d8c1-3b3a-4f22-9407-ca4e96921069"> <a href="/versions/v16/techniques/T1608/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--c071d8c1-3b3a-4f22-9407-ca4e96921069" title="T1608.003">Install Digital Certificate</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31fe0ba2-62fd-4fd9-9293-4043d84f7fe9"> <a href="/versions/v16/techniques/T1608/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--31fe0ba2-62fd-4fd9-9293-4043d84f7fe9" title="T1608.004">Drive-by Target</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84ae8255-b4f4-4237-b5c5-e717405a9701"> <a href="/versions/v16/techniques/T1608/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--84ae8255-b4f4-4237-b5c5-e717405a9701" title="T1608.005">Link Target</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e5d550f3-2202-4634-85f2-4a200a1d49b3"> <a href="/versions/v16/techniques/T1608/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d679bca2-e57d-4935-8650-8031c87a4400--attack-pattern--e5d550f3-2202-4634-85f2-4a200a1d49b3" title="T1608.006">SEO Poisoning</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c"> <a href="/versions/v16/techniques/T1659" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c" title="T1659">Content Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6"> <a href="/versions/v16/techniques/T1189" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d742a578-d70e-4d0e-96a6-02a9c30204e6" title="T1189">Drive-by Compromise</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f886f2a-874f-4333-b794-aa6075009b1c"> <a href="/versions/v16/techniques/T1190" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f886f2a-874f-4333-b794-aa6075009b1c" title="T1190">Exploit Public-Facing Application</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d"> <a href="/versions/v16/techniques/T1133" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d" title="T1133">External Remote Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d40239b3-05ff-46d8-9bdd-b46d13463ef9"> <a href="/versions/v16/techniques/T1200" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--d40239b3-05ff-46d8-9bdd-b46d13463ef9" title="T1200">Hardware Additions</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <a href="/versions/v16/techniques/T1566" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b" title="T1566">Phishing <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--a62a8db3-f23a-4d8f-afd6-9dbc77e7813b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2e34237d-8574-43f6-aace-ae2915de8597"> <a href="/versions/v16/techniques/T1566/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2e34237d-8574-43f6-aace-ae2915de8597" title="T1566.001">Spearphishing Attachment</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7"> <a href="/versions/v16/techniques/T1566/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--2b742742-28c3-4e1b-bab7-8350d6300fa7" title="T1566.002">Spearphishing Link</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f6ad61ee-65f3-4bd0-a3f5-2f0accb36317"> <a href="/versions/v16/techniques/T1566/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f6ad61ee-65f3-4bd0-a3f5-2f0accb36317" title="T1566.003">Spearphishing via Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974"> <a href="/versions/v16/techniques/T1566/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bb5e59c4-abe7-40c7-8196-e373cb1e5974" title="T1566.004">Spearphishing Voice</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4"> <a href="/versions/v16/techniques/T1091" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4" title="T1091">Replication Through Removable Media</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7"> <a href="/versions/v16/techniques/T1195" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7" title="T1195">Supply Chain Compromise <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--3f18edba-28f4-4bb9-82c3-8aa60dcac5f7"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--191cc6af-1bb2-4344-ab5f-28e496638720"> <a href="/versions/v16/techniques/T1195/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--191cc6af-1bb2-4344-ab5f-28e496638720" title="T1195.001">Compromise Software Dependencies and Development Tools</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bd369cd9-abb8-41ce-b5bb-fff23ee86c00"> <a href="/versions/v16/techniques/T1195/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--bd369cd9-abb8-41ce-b5bb-fff23ee86c00" title="T1195.002">Compromise Software Supply Chain</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--39131305-9282-45e4-ac3b-591d2d4fc3ef"> <a href="/versions/v16/techniques/T1195/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--39131305-9282-45e4-ac3b-591d2d4fc3ef" title="T1195.003">Compromise Hardware Supply Chain</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925"> <a href="/versions/v16/techniques/T1199" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--9fa07bef-9c81-421e-a8e5-ad4366c5a925" title="T1199">Trusted Relationship</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--ffd5bcee-6e16-4dd2-8eca-7b3beedf33ca--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d94b3ae9-8059-4989-8e9f-ea0f601f80a7"> <a href="/versions/v16/techniques/T1651" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d94b3ae9-8059-4989-8e9f-ea0f601f80a7" title="T1651">Cloud Administration Command</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <a href="/versions/v16/techniques/T1059" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830" title="T1059">Command and Scripting Interpreter <sub>(11)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--970a3432-3237-47ad-bcca-7d8cbb217736"> <a href="/versions/v16/techniques/T1059/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--970a3432-3237-47ad-bcca-7d8cbb217736" title="T1059.001">PowerShell</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--37b11151-1776-4f8f-b328-30939fbf2ceb"> <a href="/versions/v16/techniques/T1059/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--37b11151-1776-4f8f-b328-30939fbf2ceb" title="T1059.002">AppleScript</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d1fcf083-a721-4223-aedf-bf8960798d62"> <a href="/versions/v16/techniques/T1059/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d1fcf083-a721-4223-aedf-bf8960798d62" title="T1059.003">Windows Command Shell</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a9d4b653-6915-42af-98b2-5758c4ceee56"> <a href="/versions/v16/techniques/T1059/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a9d4b653-6915-42af-98b2-5758c4ceee56" title="T1059.004">Unix Shell</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--dfd7cc1d-e1d8-4394-a198-97c4cab8aa67"> <a href="/versions/v16/techniques/T1059/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--dfd7cc1d-e1d8-4394-a198-97c4cab8aa67" title="T1059.005">Visual Basic</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--cc3502b5-30cc-4473-ad48-42d51a6ef6d1"> <a href="/versions/v16/techniques/T1059/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--cc3502b5-30cc-4473-ad48-42d51a6ef6d1" title="T1059.006">Python</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d"> <a href="/versions/v16/techniques/T1059/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0f4a0c76-ab2d-4cb0-85d3-3f0efb8cba0d" title="T1059.007">JavaScript</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--818302b2-d640-477b-bf88-873120ce85c4"> <a href="/versions/v16/techniques/T1059/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--818302b2-d640-477b-bf88-873120ce85c4" title="T1059.008">Network Device CLI</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf"> <a href="/versions/v16/techniques/T1059/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--55bb4471-ff1f-43b4-88c1-c9384ec47abf" title="T1059.009">Cloud API</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--3a32740a-11b0-4bcf-b0a9-3abd0f6d3cd5"> <a href="/versions/v16/techniques/T1059/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--3a32740a-11b0-4bcf-b0a9-3abd0f6d3cd5" title="T1059.010">AutoHotKey & AutoIT</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--afddee82-3385-4682-ad90-eeced33f2d07"> <a href="/versions/v16/techniques/T1059/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--afddee82-3385-4682-ad90-eeced33f2d07" title="T1059.011">Lua</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7b50a1d3-4ca7-45d1-989d-a6503f04bfe1"> <a href="/versions/v16/techniques/T1609" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--7b50a1d3-4ca7-45d1-989d-a6503f04bfe1" title="T1609">Container Administration Command</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92"> <a href="/versions/v16/techniques/T1610" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92" title="T1610">Deploy Container</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--be2dcee9-a7a7-4e38-afd6-21b31ecc3d63"> <a href="/versions/v16/techniques/T1203" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--be2dcee9-a7a7-4e38-afd6-21b31ecc3d63" title="T1203">Exploitation for Client Execution</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d"> <a href="/versions/v16/techniques/T1559" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d" title="T1559">Inter-Process Communication <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--acd0ba37-7ba9-4cc5-ac61-796586cd856d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2f6b4ed7-fef1-44ba-bcb8-1b4beb610b64"> <a href="/versions/v16/techniques/T1559/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2f6b4ed7-fef1-44ba-bcb8-1b4beb610b64" title="T1559.001">Component Object Model</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232a7e42-cd6e-4902-8fe9-2960f529dd4d"> <a href="/versions/v16/techniques/T1559/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232a7e42-cd6e-4902-8fe9-2960f529dd4d" title="T1559.002">Dynamic Data Exchange</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8252f135-ed26-4ce1-ae61-f26e94429a19"> <a href="/versions/v16/techniques/T1559/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8252f135-ed26-4ce1-ae61-f26e94429a19" title="T1559.003">XPC Services</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--391d824f-0ef1-47a0-b0ee-c59a75e27670"> <a href="/versions/v16/techniques/T1106" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--391d824f-0ef1-47a0-b0ee-c59a75e27670" title="T1106">Native API</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <a href="/versions/v16/techniques/T1053" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" title="T1053">Scheduled Task/Job <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0"> <a href="/versions/v16/techniques/T1053/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0" title="T1053.002">At</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c"> <a href="/versions/v16/techniques/T1053/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c" title="T1053.003">Cron</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9"> <a href="/versions/v16/techniques/T1053/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9" title="T1053.005">Scheduled Task</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21"> <a href="/versions/v16/techniques/T1053/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21" title="T1053.006">Systemd Timers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096"> <a href="/versions/v16/techniques/T1053/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096" title="T1053.007">Container Orchestration Job</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--e848506b-8484-4410-8017-3d235a52f5b3"> <a href="/versions/v16/techniques/T1648" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--e848506b-8484-4410-8017-3d235a52f5b3" title="T1648">Serverless Execution</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0a5231ec-41af-4a35-83d0-6bdf11f28c65"> <a href="/versions/v16/techniques/T1129" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--0a5231ec-41af-4a35-83d0-6bdf11f28c65" title="T1129">Shared Modules</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414"> <a href="/versions/v16/techniques/T1072" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414" title="T1072">Software Deployment Tools</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253"> <a href="/versions/v16/techniques/T1569" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253" title="T1569">System Services <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--d157f9d2-d09a-4efa-bb2a-64963f94e253"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--810aa4ad-61c9-49cb-993f-daa06199421d"> <a href="/versions/v16/techniques/T1569/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--810aa4ad-61c9-49cb-993f-daa06199421d" title="T1569.001">Launchctl</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f1951e8a-500e-4a26-8803-76d95c4554b4"> <a href="/versions/v16/techniques/T1569/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--f1951e8a-500e-4a26-8803-76d95c4554b4" title="T1569.002">Service Execution</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5', 'attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5"> <a href="/versions/v16/techniques/T1204" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5" title="T1204">User Execution <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--ef67e13e-5598-4adc-bdb2-998225874fa9"> <a href="/versions/v16/techniques/T1204/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--ef67e13e-5598-4adc-bdb2-998225874fa9" title="T1204.001">Malicious Link</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232b7f21-adf9-4b42-b936-b9d6f7df856e"> <a href="/versions/v16/techniques/T1204/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--232b7f21-adf9-4b42-b936-b9d6f7df856e" title="T1204.002">Malicious File</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--b0c74ef9-c61e-4986-88cb-78da98a355ec"> <a href="/versions/v16/techniques/T1204/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--b0c74ef9-c61e-4986-88cb-78da98a355ec" title="T1204.003">Malicious Image</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--01a5a209-b94c-450b-b7f9-946497d91055"> <a href="/versions/v16/techniques/T1047" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--4ca45d45-df4d-4613-8980-bac22d278fa5--attack-pattern--01a5a209-b94c-450b-b7f9-946497d91055" title="T1047">Windows Management Instrumentation</a> </div> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/versions/v16/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(7)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/versions/v16/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306"> <a href="/versions/v16/techniques/T1098/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306" title="T1098.002">Additional Email Delegate Permissions</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/versions/v16/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4"> <a href="/versions/v16/techniques/T1098/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4" title="T1098.004">SSH Authorized Keys</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/versions/v16/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64"> <a href="/versions/v16/techniques/T1098/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64" title="T1098.006">Additional Container Cluster Roles</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291"> <a href="/versions/v16/techniques/T1098/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291" title="T1098.007">Additional Local or Domain Groups</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7"> <a href="/versions/v16/techniques/T1197" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7" title="T1197">BITS Jobs</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <a href="/versions/v16/techniques/T1547" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" title="T1547">Boot or Logon Autostart Execution <sub>(14)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279"> <a href="/versions/v16/techniques/T1547/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279" title="T1547.001">Registry Run Keys / Startup Folder</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec"> <a href="/versions/v16/techniques/T1547/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec" title="T1547.002">Authentication Package</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc"> <a href="/versions/v16/techniques/T1547/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc" title="T1547.003">Time Providers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35"> <a href="/versions/v16/techniques/T1547/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35" title="T1547.004">Winlogon Helper DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462"> <a href="/versions/v16/techniques/T1547/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462" title="T1547.005">Security Support Provider</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6"> <a href="/versions/v16/techniques/T1547/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6" title="T1547.006">Kernel Modules and Extensions</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e"> <a href="/versions/v16/techniques/T1547/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e" title="T1547.007">Re-opened Applications</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4"> <a href="/versions/v16/techniques/T1547/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4" title="T1547.008">LSASS Driver</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179"> <a href="/versions/v16/techniques/T1547/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179" title="T1547.009">Shortcut Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe"> <a href="/versions/v16/techniques/T1547/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe" title="T1547.010">Port Monitors</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad"> <a href="/versions/v16/techniques/T1547/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad" title="T1547.012">Print Processors</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11"> <a href="/versions/v16/techniques/T1547/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11" title="T1547.013">XDG Autostart Entries</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67"> <a href="/versions/v16/techniques/T1547/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67" title="T1547.014">Active Setup</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3"> <a href="/versions/v16/techniques/T1547/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3" title="T1547.015">Login Items</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <a href="/versions/v16/techniques/T1037" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" title="T1037">Boot or Logon Initialization Scripts <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3"> <a href="/versions/v16/techniques/T1037/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3" title="T1037.001">Logon Script (Windows)</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0"> <a href="/versions/v16/techniques/T1037/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0" title="T1037.002">Login Hook</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99"> <a href="/versions/v16/techniques/T1037/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99" title="T1037.003">Network Logon Script</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211"> <a href="/versions/v16/techniques/T1037/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211" title="T1037.004">RC Scripts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f"> <a href="/versions/v16/techniques/T1037/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f" title="T1037.005">Startup Items</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8"> <a href="/versions/v16/techniques/T1176" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--389735f1-f21c-4208-b8f0-f8031e7169b8" title="T1176">Browser Extensions</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--960c3c86-1480-4d72-b4e0-8c242e84a5c5"> <a href="/versions/v16/techniques/T1554" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--960c3c86-1480-4d72-b4e0-8c242e84a5c5" title="T1554">Compromise Host Software Binary</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <a href="/versions/v16/techniques/T1136" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67" title="T1136">Create Account <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e01be9c5-e763-4caf-aeb7-000b416aef67"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--635cbe30-392d-4e27-978e-66774357c762"> <a href="/versions/v16/techniques/T1136/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--635cbe30-392d-4e27-978e-66774357c762" title="T1136.001">Local Account</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7610cada-1499-41a4-b3dd-46467b68d177"> <a href="/versions/v16/techniques/T1136/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7610cada-1499-41a4-b3dd-46467b68d177" title="T1136.002">Domain Account</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b"> <a href="/versions/v16/techniques/T1136/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a009cb25-4801-4116-9105-80a91cf15c1b" title="T1136.003">Cloud Account</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <a href="/versions/v16/techniques/T1543" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" title="T1543">Create or Modify System Process <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584"> <a href="/versions/v16/techniques/T1543/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584" title="T1543.001">Launch Agent</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b"> <a href="/versions/v16/techniques/T1543/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b" title="T1543.002">Systemd Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32"> <a href="/versions/v16/techniques/T1543/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32" title="T1543.003">Windows Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba"> <a href="/versions/v16/techniques/T1543/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba" title="T1543.004">Launch Daemon</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a"> <a href="/versions/v16/techniques/T1543/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a" title="T1543.005">Container Service</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <a href="/versions/v16/techniques/T1546" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" title="T1546">Event Triggered Execution <sub>(17)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c"> <a href="/versions/v16/techniques/T1546/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c" title="T1546.001">Change Default File Association</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf"> <a href="/versions/v16/techniques/T1546/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf" title="T1546.002">Screensaver</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58"> <a href="/versions/v16/techniques/T1546/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58" title="T1546.003">Windows Management Instrumentation Event Subscription</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2"> <a href="/versions/v16/techniques/T1546/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2" title="T1546.004">Unix Shell Configuration Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--63220765-d418-44de-8fae-694b3912317d"> <a href="/versions/v16/techniques/T1546/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--63220765-d418-44de-8fae-694b3912317d" title="T1546.005">Trap</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847"> <a href="/versions/v16/techniques/T1546/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847" title="T1546.006">LC_LOAD_DYLIB Addition</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed"> <a href="/versions/v16/techniques/T1546/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed" title="T1546.007">Netsh Helper DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5"> <a href="/versions/v16/techniques/T1546/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5" title="T1546.008">Accessibility Features</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c"> <a href="/versions/v16/techniques/T1546/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c" title="T1546.009">AppCert DLLs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd"> <a href="/versions/v16/techniques/T1546/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd" title="T1546.010">AppInit DLLs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83"> <a href="/versions/v16/techniques/T1546/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83" title="T1546.011">Application Shimming</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6"> <a href="/versions/v16/techniques/T1546/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6" title="T1546.012">Image File Execution Options Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3"> <a href="/versions/v16/techniques/T1546/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3" title="T1546.013">PowerShell Profile</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd"> <a href="/versions/v16/techniques/T1546/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd" title="T1546.014">Emond</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae"> <a href="/versions/v16/techniques/T1546/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae" title="T1546.015">Component Object Model Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56"> <a href="/versions/v16/techniques/T1546/016" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56" title="T1546.016">Installer Packages</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792"> <a href="/versions/v16/techniques/T1546/017" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792" title="T1546.017">Udev Rules</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d"> <a href="/versions/v16/techniques/T1133" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--10d51417-ee35-4589-b1ff-b6df1c334e8d" title="T1133">External Remote Services</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <a href="/versions/v16/techniques/T1574" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" title="T1574">Hijack Execution Flow <sub>(13)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34"> <a href="/versions/v16/techniques/T1574/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34" title="T1574.001">DLL Search Order Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b"> <a href="/versions/v16/techniques/T1574/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b" title="T1574.002">DLL Side-Loading</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490"> <a href="/versions/v16/techniques/T1574/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490" title="T1574.004">Dylib Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979"> <a href="/versions/v16/techniques/T1574/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979" title="T1574.005">Executable Installer File Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825"> <a href="/versions/v16/techniques/T1574/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825" title="T1574.006">Dynamic Linker Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32"> <a href="/versions/v16/techniques/T1574/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32" title="T1574.007">Path Interception by PATH Environment Variable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2"> <a href="/versions/v16/techniques/T1574/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2" title="T1574.008">Path Interception by Search Order Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b"> <a href="/versions/v16/techniques/T1574/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b" title="T1574.009">Path Interception by Unquoted Path</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd"> <a href="/versions/v16/techniques/T1574/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd" title="T1574.010">Services File Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c"> <a href="/versions/v16/techniques/T1574/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c" title="T1574.011">Services Registry Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335"> <a href="/versions/v16/techniques/T1574/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335" title="T1574.012">COR_PROFILER</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde"> <a href="/versions/v16/techniques/T1574/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde" title="T1574.013">KernelCallbackTable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8"> <a href="/versions/v16/techniques/T1574/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8" title="T1574.014">AppDomainManager</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f"> <a href="/versions/v16/techniques/T1525" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--4fd8a28b-4b3a-4cd6-a8cf-85ba5f824a7f" title="T1525">Implant Internal Image</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/versions/v16/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(9)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605"> <a href="/versions/v16/techniques/T1556/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605" title="T1556.001">Domain Controller Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42"> <a href="/versions/v16/techniques/T1556/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42" title="T1556.002">Password Filter DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771"> <a href="/versions/v16/techniques/T1556/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771" title="T1556.003">Pluggable Authentication Modules</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd"> <a href="/versions/v16/techniques/T1556/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd" title="T1556.004">Network Device Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48"> <a href="/versions/v16/techniques/T1556/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48" title="T1556.005">Reversible Encryption</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/versions/v16/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/versions/v16/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04"> <a href="/versions/v16/techniques/T1556/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04" title="T1556.008">Network Provider DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/versions/v16/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53"> <a href="/versions/v16/techniques/T1137" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53" title="T1137">Office Application Startup <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2c4d4e92-0ccf-4a97-b54c-86d662988a53"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--79a47ad0-fc3b-4821-9f01-a026b1ddba21"> <a href="/versions/v16/techniques/T1137/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--79a47ad0-fc3b-4821-9f01-a026b1ddba21" title="T1137.001">Office Template Macros</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ed7efd4d-ce28-4a19-a8e6-c58011eb2c7a"> <a href="/versions/v16/techniques/T1137/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ed7efd4d-ce28-4a19-a8e6-c58011eb2c7a" title="T1137.002">Office Test</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a9e2cea0-c805-4bf8-9e31-f5f0513a3634"> <a href="/versions/v16/techniques/T1137/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a9e2cea0-c805-4bf8-9e31-f5f0513a3634" title="T1137.003">Outlook Forms</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf147104-abf9-4221-95d1-e81585859441"> <a href="/versions/v16/techniques/T1137/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--bf147104-abf9-4221-95d1-e81585859441" title="T1137.004">Outlook Home Page</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3d1b9d7e-3921-4d25-845a-7d9f15c0da44"> <a href="/versions/v16/techniques/T1137/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--3d1b9d7e-3921-4d25-845a-7d9f15c0da44" title="T1137.005">Outlook Rules</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--34f1d81d-fe88-4f97-bd3b-a3164536255d"> <a href="/versions/v16/techniques/T1137/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--34f1d81d-fe88-4f97-bd3b-a3164536255d" title="T1137.006">Add-ins</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ea071aa0-8f17-416f-ab0d-2bab7e79003d"> <a href="/versions/v16/techniques/T1653" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--ea071aa0-8f17-416f-ab0d-2bab7e79003d" title="T1653">Power Settings</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <a href="/versions/v16/techniques/T1542" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" title="T1542">Pre-OS Boot <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada"> <a href="/versions/v16/techniques/T1542/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada" title="T1542.001">System Firmware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--791481f8-e96a-41be-b089-a088763083d4"> <a href="/versions/v16/techniques/T1542/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--791481f8-e96a-41be-b089-a088763083d4" title="T1542.002">Component Firmware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba"> <a href="/versions/v16/techniques/T1542/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba" title="T1542.003">Bootkit</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc"> <a href="/versions/v16/techniques/T1542/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc" title="T1542.004">ROMMONkit</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4"> <a href="/versions/v16/techniques/T1542/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4" title="T1542.005">TFTP Boot</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <a href="/versions/v16/techniques/T1053" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" title="T1053">Scheduled Task/Job <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0"> <a href="/versions/v16/techniques/T1053/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0" title="T1053.002">At</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c"> <a href="/versions/v16/techniques/T1053/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c" title="T1053.003">Cron</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9"> <a href="/versions/v16/techniques/T1053/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9" title="T1053.005">Scheduled Task</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21"> <a href="/versions/v16/techniques/T1053/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21" title="T1053.006">Systemd Timers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096"> <a href="/versions/v16/techniques/T1053/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096" title="T1053.007">Container Orchestration Job</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb"> <a href="/versions/v16/techniques/T1505" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb" title="T1505">Server Software Component <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--d456de47-a16f-4e46-8980-e67478a12dcb"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f9e9365a-9ca2-4d9c-8e7c-050d73d1101a"> <a href="/versions/v16/techniques/T1505/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f9e9365a-9ca2-4d9c-8e7c-050d73d1101a" title="T1505.001">SQL Stored Procedures</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35187df2-31ed-43b6-a1f5-2f1d3d58d3f1"> <a href="/versions/v16/techniques/T1505/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--35187df2-31ed-43b6-a1f5-2f1d3d58d3f1" title="T1505.002">Transport Agent</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5d0d3609-d06d-49e1-b9c9-b544e0c618cb"> <a href="/versions/v16/techniques/T1505/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--5d0d3609-d06d-49e1-b9c9-b544e0c618cb" title="T1505.003">Web Shell</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b46a801b-fd98-491c-a25a-bca25d6e3001"> <a href="/versions/v16/techniques/T1505/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b46a801b-fd98-491c-a25a-bca25d6e3001" title="T1505.004">IIS Components</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--379809f6-2fac-42c1-bd2e-e9dee70b27f8"> <a href="/versions/v16/techniques/T1505/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--379809f6-2fac-42c1-bd2e-e9dee70b27f8" title="T1505.005">Terminal Services DLL</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--451a9977-d255-43c9-b431-66de80130c8c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <a href="/versions/v16/techniques/T1205" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" title="T1205">Traffic Signaling <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd"> <a href="/versions/v16/techniques/T1205/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd" title="T1205.001">Port Knocking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520"> <a href="/versions/v16/techniques/T1205/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520" title="T1205.002">Socket Filters</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5bc1d813-693e-4823-9961-abf9af4b0e92--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/versions/v16/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9"> <a href="/versions/v16/techniques/T1548/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9" title="T1548.001">Setuid and Setgid</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073"> <a href="/versions/v16/techniques/T1548/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073" title="T1548.002">Bypass User Account Control</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0"> <a href="/versions/v16/techniques/T1548/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0" title="T1548.003">Sudo and Sudo Caching</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0"> <a href="/versions/v16/techniques/T1548/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0" title="T1548.004">Elevated Execution with Prompt</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/versions/v16/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb"> <a href="/versions/v16/techniques/T1548/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb" title="T1548.006">TCC Manipulation</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <a href="/versions/v16/techniques/T1134" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" title="T1134">Access Token Manipulation <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d"> <a href="/versions/v16/techniques/T1134/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d" title="T1134.001">Token Impersonation/Theft</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf"> <a href="/versions/v16/techniques/T1134/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf" title="T1134.002">Create Process with Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819"> <a href="/versions/v16/techniques/T1134/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819" title="T1134.003">Make and Impersonate Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a"> <a href="/versions/v16/techniques/T1134/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a" title="T1134.004">Parent PID Spoofing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023"> <a href="/versions/v16/techniques/T1134/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023" title="T1134.005">SID-History Injection</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <a href="/versions/v16/techniques/T1098" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27" title="T1098">Account Manipulation <sub>(7)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a10641f4-87b4-45a3-a906-92a149cb2c27"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd"> <a href="/versions/v16/techniques/T1098/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--8a2f40cf-8325-47f9-96e4-b1ca4c7389bd" title="T1098.001">Additional Cloud Credentials</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306"> <a href="/versions/v16/techniques/T1098/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e74de37c-a829-446c-937d-56a44f0e9306" title="T1098.002">Additional Email Delegate Permissions</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3"> <a href="/versions/v16/techniques/T1098/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2dbbdcd5-92cf-44c0-aea2-fe24783a6bc3" title="T1098.003">Additional Cloud Roles</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4"> <a href="/versions/v16/techniques/T1098/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6b57dc31-b814-4a03-8706-28bc20d739c4" title="T1098.004">SSH Authorized Keys</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215"> <a href="/versions/v16/techniques/T1098/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7decb26c-715c-40cf-b7e0-026f7d7cc215" title="T1098.005">Device Registration</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64"> <a href="/versions/v16/techniques/T1098/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35d30338-5bfa-41b0-a170-ec06dfd75f64" title="T1098.006">Additional Container Cluster Roles</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291"> <a href="/versions/v16/techniques/T1098/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--3e6831b2-bf4c-4ae6-b328-2e7c6633b291" title="T1098.007">Additional Local or Domain Groups</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <a href="/versions/v16/techniques/T1547" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf" title="T1547">Boot or Logon Autostart Execution <sub>(14)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279"> <a href="/versions/v16/techniques/T1547/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9efb1ea7-c37b-4595-9640-b7680cd84279" title="T1547.001">Registry Run Keys / Startup Folder</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec"> <a href="/versions/v16/techniques/T1547/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b8cfed42-6a8a-4989-ad72-541af74475ec" title="T1547.002">Authentication Package</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc"> <a href="/versions/v16/techniques/T1547/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--61afc315-860c-4364-825d-0d62b2e91edc" title="T1547.003">Time Providers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35"> <a href="/versions/v16/techniques/T1547/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6836813e-8ec8-4375-b459-abb388cb1a35" title="T1547.004">Winlogon Helper DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462"> <a href="/versions/v16/techniques/T1547/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5095a853-299c-4876-abd7-ac0050fb5462" title="T1547.005">Security Support Provider</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6"> <a href="/versions/v16/techniques/T1547/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a1b52199-c8c5-438a-9ded-656f1d0888c6" title="T1547.006">Kernel Modules and Extensions</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e"> <a href="/versions/v16/techniques/T1547/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e5cc9e7a-e61a-46a1-b869-55fb6eab058e" title="T1547.007">Re-opened Applications</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4"> <a href="/versions/v16/techniques/T1547/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f0589bc3-a6ae-425a-a3d5-5659bfee07f4" title="T1547.008">LSASS Driver</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179"> <a href="/versions/v16/techniques/T1547/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4ab929c6-ee2d-4fb5-aab4-b14be2ed7179" title="T1547.009">Shortcut Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe"> <a href="/versions/v16/techniques/T1547/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43881e51-ac74-445b-b4c6-f9f9e9bf23fe" title="T1547.010">Port Monitors</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad"> <a href="/versions/v16/techniques/T1547/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2de47683-f398-448f-b947-9abcc3e32fad" title="T1547.012">Print Processors</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11"> <a href="/versions/v16/techniques/T1547/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e0232cb0-ded5-4c2e-9dc7-2893142a5c11" title="T1547.013">XDG Autostart Entries</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67"> <a href="/versions/v16/techniques/T1547/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--22522668-ddf6-470b-a027-9d6866679f67" title="T1547.014">Active Setup</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3"> <a href="/versions/v16/techniques/T1547/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--84601337-6a55-4ad7-9c35-79e0d1ea2ab3" title="T1547.015">Login Items</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <a href="/versions/v16/techniques/T1037" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334" title="T1037">Boot or Logon Initialization Scripts <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--03259939-0b57-482f-8eb5-87c0e0d54334"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3"> <a href="/versions/v16/techniques/T1037/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb125d40-0b2d-41ac-a71a-3229241c2cd3" title="T1037.001">Logon Script (Windows)</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0"> <a href="/versions/v16/techniques/T1037/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43ba2b05-cf72-4b6c-8243-03a4aba41ee0" title="T1037.002">Login Hook</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99"> <a href="/versions/v16/techniques/T1037/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c63a348e-ffc2-486a-b9d9-d7f11ec54d99" title="T1037.003">Network Logon Script</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211"> <a href="/versions/v16/techniques/T1037/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dca670cf-eeec-438f-8185-fd959d9ef211" title="T1037.004">RC Scripts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f"> <a href="/versions/v16/techniques/T1037/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c0dfe7b0-b873-4618-9ff8-53e31f70907f" title="T1037.005">Startup Items</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <a href="/versions/v16/techniques/T1543" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5" title="T1543">Create or Modify System Process <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--106c0cf6-bf73-4601-9aa8-0945c2715ec5"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584"> <a href="/versions/v16/techniques/T1543/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d10cbd34-42e3-45c0-84d2-535a09849584" title="T1543.001">Launch Agent</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b"> <a href="/versions/v16/techniques/T1543/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--dfefe2ed-4389-4318-8762-f0272b350a1b" title="T1543.002">Systemd Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32"> <a href="/versions/v16/techniques/T1543/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2959d63f-73fd-46a1-abd2-109d7dcede32" title="T1543.003">Windows Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba"> <a href="/versions/v16/techniques/T1543/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--573ad264-1371-4ae0-8482-d2673b719dba" title="T1543.004">Launch Daemon</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a"> <a href="/versions/v16/techniques/T1543/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b0e54bf7-835e-4f44-bd8e-62f431b9b76a" title="T1543.005">Container Service</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/versions/v16/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163"> <a href="/versions/v16/techniques/T1484/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163" title="T1484.001">Group Policy Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/versions/v16/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4a5b7ade-8bb5-4853-84ed-23f262002665"> <a href="/versions/v16/techniques/T1611" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--4a5b7ade-8bb5-4853-84ed-23f262002665" title="T1611">Escape to Host</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <a href="/versions/v16/techniques/T1546" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db" title="T1546">Event Triggered Execution <sub>(17)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b6301b64-ef57-4cce-bb0b-77026f14a8db"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c"> <a href="/versions/v16/techniques/T1546/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98034fef-d9fb-4667-8dc4-2eab6231724c" title="T1546.001">Change Default File Association</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf"> <a href="/versions/v16/techniques/T1546/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ce4b7013-640e-48a9-b501-d0025a95f4bf" title="T1546.002">Screensaver</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58"> <a href="/versions/v16/techniques/T1546/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--910906dd-8c0a-475a-9cc1-5e029e2fad58" title="T1546.003">Windows Management Instrumentation Event Subscription</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2"> <a href="/versions/v16/techniques/T1546/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b63a34e8-0a61-4c97-a23b-bf8a2ed812e2" title="T1546.004">Unix Shell Configuration Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--63220765-d418-44de-8fae-694b3912317d"> <a href="/versions/v16/techniques/T1546/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--63220765-d418-44de-8fae-694b3912317d" title="T1546.005">Trap</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847"> <a href="/versions/v16/techniques/T1546/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--10ff21b9-5a01-4268-a1b5-3b55015f1847" title="T1546.006">LC_LOAD_DYLIB Addition</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed"> <a href="/versions/v16/techniques/T1546/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f63fe421-b1d1-45c0-b8a7-02cd16ff2bed" title="T1546.007">Netsh Helper DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5"> <a href="/versions/v16/techniques/T1546/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70e52b04-2a0c-4cea-9d18-7149f1df9dc5" title="T1546.008">Accessibility Features</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c"> <a href="/versions/v16/techniques/T1546/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7d57b371-10c2-45e5-b3cc-83a8fb380e4c" title="T1546.009">AppCert DLLs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd"> <a href="/versions/v16/techniques/T1546/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--cc89ecbd-3d33-4a41-bcca-001e702d18fd" title="T1546.010">AppInit DLLs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83"> <a href="/versions/v16/techniques/T1546/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--42fe883a-21ea-4cfb-b94a-78b6476dcc83" title="T1546.011">Application Shimming</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6"> <a href="/versions/v16/techniques/T1546/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6d4a7fb3-5a24-42be-ae61-6728a2b581f6" title="T1546.012">Image File Execution Options Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3"> <a href="/versions/v16/techniques/T1546/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0f2c410d-d740-4ed9-abb1-b8f4a7faf6c3" title="T1546.013">PowerShell Profile</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd"> <a href="/versions/v16/techniques/T1546/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9c45eaa3-8604-4780-8988-b5074dbb9ecd" title="T1546.014">Emond</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae"> <a href="/versions/v16/techniques/T1546/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bc0f5e80-91c0-4e04-9fbb-e4e332c85dae" title="T1546.015">Component Object Model Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56"> <a href="/versions/v16/techniques/T1546/016" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--da051493-ae9c-4b1b-9760-c009c46c9b56" title="T1546.016">Installer Packages</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792"> <a href="/versions/v16/techniques/T1546/017" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4c3f644-ab33-433d-8648-75cc03a95792" title="T1546.017">Udev Rules</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b21c3b2d-02e6-45b1-980b-e69051040839"> <a href="/versions/v16/techniques/T1068" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b21c3b2d-02e6-45b1-980b-e69051040839" title="T1068">Exploitation for Privilege Escalation</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <a href="/versions/v16/techniques/T1574" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" title="T1574">Hijack Execution Flow <sub>(13)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34"> <a href="/versions/v16/techniques/T1574/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34" title="T1574.001">DLL Search Order Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b"> <a href="/versions/v16/techniques/T1574/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b" title="T1574.002">DLL Side-Loading</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490"> <a href="/versions/v16/techniques/T1574/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490" title="T1574.004">Dylib Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979"> <a href="/versions/v16/techniques/T1574/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979" title="T1574.005">Executable Installer File Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825"> <a href="/versions/v16/techniques/T1574/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825" title="T1574.006">Dynamic Linker Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32"> <a href="/versions/v16/techniques/T1574/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32" title="T1574.007">Path Interception by PATH Environment Variable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2"> <a href="/versions/v16/techniques/T1574/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2" title="T1574.008">Path Interception by Search Order Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b"> <a href="/versions/v16/techniques/T1574/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b" title="T1574.009">Path Interception by Unquoted Path</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd"> <a href="/versions/v16/techniques/T1574/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd" title="T1574.010">Services File Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c"> <a href="/versions/v16/techniques/T1574/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c" title="T1574.011">Services Registry Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335"> <a href="/versions/v16/techniques/T1574/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335" title="T1574.012">COR_PROFILER</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde"> <a href="/versions/v16/techniques/T1574/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde" title="T1574.013">KernelCallbackTable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8"> <a href="/versions/v16/techniques/T1574/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8" title="T1574.014">AppDomainManager</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <a href="/versions/v16/techniques/T1055" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" title="T1055">Process Injection <sub>(12)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945"> <a href="/versions/v16/techniques/T1055/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945" title="T1055.001">Dynamic-link Library Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662"> <a href="/versions/v16/techniques/T1055/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662" title="T1055.002">Portable Executable Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6"> <a href="/versions/v16/techniques/T1055/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6" title="T1055.003">Thread Execution Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605"> <a href="/versions/v16/techniques/T1055/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605" title="T1055.004">Asynchronous Procedure Call</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744"> <a href="/versions/v16/techniques/T1055/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744" title="T1055.005">Thread Local Storage</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f"> <a href="/versions/v16/techniques/T1055/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f" title="T1055.008">Ptrace System Calls</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591"> <a href="/versions/v16/techniques/T1055/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591" title="T1055.009">Proc Memory</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298"> <a href="/versions/v16/techniques/T1055/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298" title="T1055.011">Extra Window Memory Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4"> <a href="/versions/v16/techniques/T1055/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4" title="T1055.012">Process Hollowing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197"> <a href="/versions/v16/techniques/T1055/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197" title="T1055.013">Process Doppelg盲nging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5"> <a href="/versions/v16/techniques/T1055/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5" title="T1055.014">VDSO Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99"> <a href="/versions/v16/techniques/T1055/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99" title="T1055.015">ListPlanting</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <a href="/versions/v16/techniques/T1053" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9" title="T1053">Scheduled Task/Job <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--35dd844a-b219-4e2b-a6bb-efa9a75995a9"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0"> <a href="/versions/v16/techniques/T1053/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f3d95a1f-bba2-44ce-9af7-37866cd63fd0" title="T1053.002">At</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c"> <a href="/versions/v16/techniques/T1053/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--2acf44aa-542f-4366-b4eb-55ef5747759c" title="T1053.003">Cron</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9"> <a href="/versions/v16/techniques/T1053/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9" title="T1053.005">Scheduled Task</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21"> <a href="/versions/v16/techniques/T1053/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--a542bac9-7bc1-4da7-9a09-96f69e23cc21" title="T1053.006">Systemd Timers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096"> <a href="/versions/v16/techniques/T1053/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--1126cab1-c700-412f-a510-61f4937bb096" title="T1053.007">Container Orchestration Job</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5e29b093-294e-49e9-a803-dab3d73b77dd--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <a href="/versions/v16/techniques/T1548" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b" title="T1548">Abuse Elevation Control Mechanism <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9"> <a href="/versions/v16/techniques/T1548/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6831414d-bb70-42b7-8030-d4e06b2660c9" title="T1548.001">Setuid and Setgid</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073"> <a href="/versions/v16/techniques/T1548/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073" title="T1548.002">Bypass User Account Control</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0"> <a href="/versions/v16/techniques/T1548/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1365fe3b-0f50-455d-b4da-266ce31c23b0" title="T1548.003">Sudo and Sudo Caching</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0"> <a href="/versions/v16/techniques/T1548/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b84903f0-c7d5-435d-a69e-de47cc3578c0" title="T1548.004">Elevated Execution with Prompt</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c"> <a href="/versions/v16/techniques/T1548/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6fa224c7-5091-4595-bf15-3fc9fe2f2c7c" title="T1548.005">Temporary Elevated Cloud Access</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb"> <a href="/versions/v16/techniques/T1548/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e8a0a025-3601-4755-abfb-8d08283329fb" title="T1548.006">TCC Manipulation</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <a href="/versions/v16/techniques/T1134" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48" title="T1134">Access Token Manipulation <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d"> <a href="/versions/v16/techniques/T1134/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--86850eff-2729-40c3-b85e-c4af26da4a2d" title="T1134.001">Token Impersonation/Theft</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf"> <a href="/versions/v16/techniques/T1134/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--677569f9-a8b0-459e-ab24-7f18091fa7bf" title="T1134.002">Create Process with Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819"> <a href="/versions/v16/techniques/T1134/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8cdeb020-e31e-4f88-a582-f53dcfbda819" title="T1134.003">Make and Impersonate Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a"> <a href="/versions/v16/techniques/T1134/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--93591901-3172-4e94-abf8-6034ab26f44a" title="T1134.004">Parent PID Spoofing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023"> <a href="/versions/v16/techniques/T1134/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b7dc639b-24cd-482d-a7f1-8897eda21023" title="T1134.005">SID-History Injection</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7"> <a href="/versions/v16/techniques/T1197" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c8e87b83-edbb-48d4-9295-4974897525b7" title="T1197">BITS Jobs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--800f9819-7007-4540-a520-40e655876800"> <a href="/versions/v16/techniques/T1612" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--800f9819-7007-4540-a520-40e655876800" title="T1612">Build Image on Host</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391"> <a href="/versions/v16/techniques/T1622" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391" title="T1622">Debugger Evasion</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3ccef7ae-cb5e-48f6-8302-897105fbf55c"> <a href="/versions/v16/techniques/T1140" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3ccef7ae-cb5e-48f6-8302-897105fbf55c" title="T1140">Deobfuscate/Decode Files or Information</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92"> <a href="/versions/v16/techniques/T1610" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--56e0d8b8-3e25-49dd-9050-3aa252f5aa92" title="T1610">Deploy Container</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c8ab3eb-df48-4b9c-ace7-beacaac81cc5"> <a href="/versions/v16/techniques/T1006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c8ab3eb-df48-4b9c-ace7-beacaac81cc5" title="T1006">Direct Volume Access</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <a href="/versions/v16/techniques/T1484" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d" title="T1484">Domain or Tenant Policy Modification <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebb42bbe-62d7-47d7-a55f-3b08b61d792d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163"> <a href="/versions/v16/techniques/T1484/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5d2be8b9-d24c-4e98-83bf-2f5f79477163" title="T1484.001">Group Policy Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee"> <a href="/versions/v16/techniques/T1484/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--24769ab5-14bd-4f4e-a752-cfb185da53ee" title="T1484.002">Trust Modification</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852"> <a href="/versions/v16/techniques/T1480" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852" title="T1480">Execution Guardrails <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--853c4192-4311-43e1-bfbb-b11b14911852"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f244b8dd-af6c-4391-a497-fc03627ce995"> <a href="/versions/v16/techniques/T1480/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f244b8dd-af6c-4391-a497-fc03627ce995" title="T1480.001">Environmental Keying</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--49fca0d2-685d-41eb-8bd4-05451cc3a742"> <a href="/versions/v16/techniques/T1480/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--49fca0d2-685d-41eb-8bd4-05451cc3a742" title="T1480.002">Mutual Exclusion</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b"> <a href="/versions/v16/techniques/T1211" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b" title="T1211">Exploitation for Defense Evasion</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196"> <a href="/versions/v16/techniques/T1222" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196" title="T1222">File and Directory Permissions Modification <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--65917ae0-b854-4139-83fe-bf2441cf0196"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34e793de-0274-4982-9c1a-246ed1c19dee"> <a href="/versions/v16/techniques/T1222/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34e793de-0274-4982-9c1a-246ed1c19dee" title="T1222.001">Windows File and Directory Permissions Modification</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b130a2-a77e-4af0-a361-f46f9aad1345"> <a href="/versions/v16/techniques/T1222/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b130a2-a77e-4af0-a361-f46f9aad1345" title="T1222.002">Linux and Mac File and Directory Permissions Modification</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8"> <a href="/versions/v16/techniques/T1564" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8" title="T1564">Hide Artifacts <sub>(12)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--22905430-4901-4c2a-84f6-98243cb173f8"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ec8fc7e2-b356-455c-8db5-2e37be158e7d"> <a href="/versions/v16/techniques/T1564/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ec8fc7e2-b356-455c-8db5-2e37be158e7d" title="T1564.001">Hidden Files and Directories</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8c4aef43-48d5-49aa-b2af-c0cd58d30c3d"> <a href="/versions/v16/techniques/T1564/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8c4aef43-48d5-49aa-b2af-c0cd58d30c3d" title="T1564.002">Hidden Users</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cbb66055-0325-4111-aca0-40547b6ad5b0"> <a href="/versions/v16/techniques/T1564/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cbb66055-0325-4111-aca0-40547b6ad5b0" title="T1564.003">Hidden Window</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f2857333-11d4-45bf-b064-2c28d8525be5"> <a href="/versions/v16/techniques/T1564/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f2857333-11d4-45bf-b064-2c28d8525be5" title="T1564.004">NTFS File Attributes</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dfebc3b7-d19d-450b-81c7-6dafe4184c04"> <a href="/versions/v16/techniques/T1564/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dfebc3b7-d19d-450b-81c7-6dafe4184c04" title="T1564.005">Hidden File System</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b5327dd1-6bf9-4785-a199-25bcbd1f4a9d"> <a href="/versions/v16/techniques/T1564/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b5327dd1-6bf9-4785-a199-25bcbd1f4a9d" title="T1564.006">Run Virtual Instance</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c898c4b5-bf36-4e6e-a4ad-5b8c4c13e35b"> <a href="/versions/v16/techniques/T1564/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c898c4b5-bf36-4e6e-a4ad-5b8c4c13e35b" title="T1564.007">VBA Stomping</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0cf55441-b176-4332-89e7-2c4c7799d0ff"> <a href="/versions/v16/techniques/T1564/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0cf55441-b176-4332-89e7-2c4c7799d0ff" title="T1564.008">Email Hiding Rules</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b22e5153-ac28-4cc6-865c-2054e36285cb"> <a href="/versions/v16/techniques/T1564/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b22e5153-ac28-4cc6-865c-2054e36285cb" title="T1564.009">Resource Forking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffe59ad3-ad9b-4b9f-b74f-5beb3c309dc1"> <a href="/versions/v16/techniques/T1564/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffe59ad3-ad9b-4b9f-b74f-5beb3c309dc1" title="T1564.010">Process Argument Spoofing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4a2975db-414e-4c0c-bd92-775987514b4b"> <a href="/versions/v16/techniques/T1564/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4a2975db-414e-4c0c-bd92-775987514b4b" title="T1564.011">Ignore Process Interrupts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b008a9-b4eb-462a-a751-a0eb58050cd9"> <a href="/versions/v16/techniques/T1564/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09b008a9-b4eb-462a-a751-a0eb58050cd9" title="T1564.012">File/Path Exclusions</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <a href="/versions/v16/techniques/T1574" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6" title="T1574">Hijack Execution Flow <sub>(13)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34"> <a href="/versions/v16/techniques/T1574/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2fee9321-3e71-4cf4-af24-d4d40d355b34" title="T1574.001">DLL Search Order Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b"> <a href="/versions/v16/techniques/T1574/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e64c62cf-9cd7-4a14-94ec-cdaac43ab44b" title="T1574.002">DLL Side-Loading</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490"> <a href="/versions/v16/techniques/T1574/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc742192-19e3-466c-9eb5-964a97b29490" title="T1574.004">Dylib Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979"> <a href="/versions/v16/techniques/T1574/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70d81154-b187-45f9-8ec5-295d01255979" title="T1574.005">Executable Installer File Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825"> <a href="/versions/v16/techniques/T1574/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--633a100c-b2c9-41bf-9be5-905c1b16c825" title="T1574.006">Dynamic Linker Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32"> <a href="/versions/v16/techniques/T1574/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0c2d00da-7742-49e7-9928-4514e5075d32" title="T1574.007">Path Interception by PATH Environment Variable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2"> <a href="/versions/v16/techniques/T1574/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--58af3705-8740-4c68-9329-ec015a7013c2" title="T1574.008">Path Interception by Search Order Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b"> <a href="/versions/v16/techniques/T1574/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bf96a5a3-3bce-43b7-8597-88545984c07b" title="T1574.009">Path Interception by Unquoted Path</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd"> <a href="/versions/v16/techniques/T1574/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--9e8b28c9-35fe-48ac-a14d-e6cc032dcbcd" title="T1574.010">Services File Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c"> <a href="/versions/v16/techniques/T1574/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--17cc750b-e95b-4d7d-9dde-49e0de24148c" title="T1574.011">Services Registry Permissions Weakness</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335"> <a href="/versions/v16/techniques/T1574/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffeb0780-356e-4261-b036-cfb6bd234335" title="T1574.012">COR_PROFILER</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde"> <a href="/versions/v16/techniques/T1574/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a4657bc9-d22f-47d2-a7b7-dd6ec33f3dde" title="T1574.013">KernelCallbackTable</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8"> <a href="/versions/v16/techniques/T1574/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--356662f7-e315-4759-86c9-6214e2a50ff8" title="T1574.014">AppDomainManager</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <a href="/versions/v16/techniques/T1562" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529" title="T1562">Impair Defenses <sub>(11)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3d333250-30e4-4a82-9edc-756c68afc529"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ac08589e-ee59-4935-8667-d845e38fe579"> <a href="/versions/v16/techniques/T1562/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ac08589e-ee59-4935-8667-d845e38fe579" title="T1562.001">Disable or Modify Tools</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4eb28bed-d11a-4641-9863-c2ac017d910a"> <a href="/versions/v16/techniques/T1562/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4eb28bed-d11a-4641-9863-c2ac017d910a" title="T1562.002">Disable Windows Event Logging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8f504411-cb96-4dac-a537-8d2bb7679c59"> <a href="/versions/v16/techniques/T1562/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8f504411-cb96-4dac-a537-8d2bb7679c59" title="T1562.003">Impair Command History Logging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5372c5fe-f424-4def-bcd5-d3a8e770f07b"> <a href="/versions/v16/techniques/T1562/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5372c5fe-f424-4def-bcd5-d3a8e770f07b" title="T1562.004">Disable or Modify System Firewall</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--74d2a63f-3c7b-4852-92da-02d8fbab16da"> <a href="/versions/v16/techniques/T1562/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--74d2a63f-3c7b-4852-92da-02d8fbab16da" title="T1562.006">Indicator Blocking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77532a55-c283-4cd2-bc5d-2d0b65e9d88c"> <a href="/versions/v16/techniques/T1562/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77532a55-c283-4cd2-bc5d-2d0b65e9d88c" title="T1562.007">Disable or Modify Cloud Firewall</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d"> <a href="/versions/v16/techniques/T1562/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cacc40da-4c9e-462c-80d5-fd70a178b12d" title="T1562.008">Disable or Modify Cloud Logs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28170e17-8384-415c-8486-2e6b294cb803"> <a href="/versions/v16/techniques/T1562/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28170e17-8384-415c-8486-2e6b294cb803" title="T1562.009">Safe Mode Boot</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--824add00-99a1-4b15-9a2d-6c5683b7b497"> <a href="/versions/v16/techniques/T1562/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--824add00-99a1-4b15-9a2d-6c5683b7b497" title="T1562.010">Downgrade Attack</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bef8aaee-961d-4359-a308-4c2182bcedff"> <a href="/versions/v16/techniques/T1562/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bef8aaee-961d-4359-a308-4c2182bcedff" title="T1562.011">Spoof Security Alerting</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--562e9b64-7239-493d-80f4-2bff900d9054"> <a href="/versions/v16/techniques/T1562/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--562e9b64-7239-493d-80f4-2bff900d9054" title="T1562.012">Disable or Modify Linux Audit System</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c9e0c59e-162e-40a4-b8b1-78fab4329ada"> <a href="/versions/v16/techniques/T1656" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c9e0c59e-162e-40a4-b8b1-78fab4329ada" title="T1656">Impersonation</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69"> <a href="/versions/v16/techniques/T1070" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69" title="T1070">Indicator Removal <sub>(10)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--799ace7f-e227-4411-baa0-8868704f2a69"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6495ae23-3ab4-43c5-a94f-5638a2c31fd2"> <a href="/versions/v16/techniques/T1070/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6495ae23-3ab4-43c5-a94f-5638a2c31fd2" title="T1070.001">Clear Windows Event Logs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2bce5b30-7014-4a5d-ade7-12913fe6ac36"> <a href="/versions/v16/techniques/T1070/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2bce5b30-7014-4a5d-ade7-12913fe6ac36" title="T1070.002">Clear Linux or Mac System Logs</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3aef9463-9a7a-43ba-8957-a867e07c1e6a"> <a href="/versions/v16/techniques/T1070/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3aef9463-9a7a-43ba-8957-a867e07c1e6a" title="T1070.003">Clear Command History</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d63a3fb8-9452-4e9d-a60a-54be68d5998c"> <a href="/versions/v16/techniques/T1070/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d63a3fb8-9452-4e9d-a60a-54be68d5998c" title="T1070.004">File Deletion</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a750a9f6-0bde-4bb3-9aae-1e2786e9780c"> <a href="/versions/v16/techniques/T1070/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a750a9f6-0bde-4bb3-9aae-1e2786e9780c" title="T1070.005">Network Share Connection Removal</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--47f2d673-ca62-47e9-929b-1b0be9657611"> <a href="/versions/v16/techniques/T1070/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--47f2d673-ca62-47e9-929b-1b0be9657611" title="T1070.006">Timestomp</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3975dbb5-0e1e-4f5b-bae1-cf2ab84b46dc"> <a href="/versions/v16/techniques/T1070/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3975dbb5-0e1e-4f5b-bae1-cf2ab84b46dc" title="T1070.007">Clear Network Connection History and Configurations</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--438c967d-3996-4870-bfc2-3954752a1927"> <a href="/versions/v16/techniques/T1070/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--438c967d-3996-4870-bfc2-3954752a1927" title="T1070.008">Clear Mailbox Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d2c4e5ea-dbdf-4113-805a-b1e2a337fb33"> <a href="/versions/v16/techniques/T1070/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d2c4e5ea-dbdf-4113-805a-b1e2a337fb33" title="T1070.009">Clear Persistence</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc36eeae-2209-4e63-89d3-c97e19edf280"> <a href="/versions/v16/techniques/T1070/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc36eeae-2209-4e63-89d3-c97e19edf280" title="T1070.010">Relocate Malware</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3b0e52ce-517a-4614-a523-1bd5deef6c5e"> <a href="/versions/v16/techniques/T1202" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3b0e52ce-517a-4614-a523-1bd5deef6c5e" title="T1202">Indirect Command Execution</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0"> <a href="/versions/v16/techniques/T1036" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0" title="T1036">Masquerading <sub>(10)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4b7458f-81f2-4d38-84be-1c5ba0167a52"> <a href="/versions/v16/techniques/T1036/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4b7458f-81f2-4d38-84be-1c5ba0167a52" title="T1036.001">Invalid Code Signature</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77eae145-55db-4519-8ae5-77b0c7215d69"> <a href="/versions/v16/techniques/T1036/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--77eae145-55db-4519-8ae5-77b0c7215d69" title="T1036.002">Right-to-Left Override</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bd5b58a4-a52d-4a29-bc0d-3f1d3968eb6b"> <a href="/versions/v16/techniques/T1036/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--bd5b58a4-a52d-4a29-bc0d-3f1d3968eb6b" title="T1036.003">Rename System Utilities</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c"> <a href="/versions/v16/techniques/T1036/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7bdca9d5-d500-4d7d-8c52-5fd47baf4c0c" title="T1036.004">Masquerade Task or Service</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2"> <a href="/versions/v16/techniques/T1036/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1c4e5d32-1fe9-4116-9d9d-59e3925bd6a2" title="T1036.005">Match Legitimate Name or Location</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e51137a5-1cdc-499e-911a-abaedaa5ac86"> <a href="/versions/v16/techniques/T1036/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e51137a5-1cdc-499e-911a-abaedaa5ac86" title="T1036.006">Space after Filename</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--11f29a39-0942-4d62-92b6-fe236cf3066e"> <a href="/versions/v16/techniques/T1036/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--11f29a39-0942-4d62-92b6-fe236cf3066e" title="T1036.007">Double File Extension</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--208884f1-7b83-4473-ac22-4e1cf6c41471"> <a href="/versions/v16/techniques/T1036/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--208884f1-7b83-4473-ac22-4e1cf6c41471" title="T1036.008">Masquerade File Type</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34a80bc4-80f2-46e6-94ff-f3265a4b657c"> <a href="/versions/v16/techniques/T1036/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--34a80bc4-80f2-46e6-94ff-f3265a4b657c" title="T1036.009">Break Process Trees</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d349c66e-18e1-4d8b-a2d7-65af7cbd2ba0"> <a href="/versions/v16/techniques/T1036/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d349c66e-18e1-4d8b-a2d7-65af7cbd2ba0" title="T1036.010">Masquerade Account Name</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/versions/v16/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(9)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605"> <a href="/versions/v16/techniques/T1556/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605" title="T1556.001">Domain Controller Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42"> <a href="/versions/v16/techniques/T1556/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42" title="T1556.002">Password Filter DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771"> <a href="/versions/v16/techniques/T1556/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771" title="T1556.003">Pluggable Authentication Modules</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd"> <a href="/versions/v16/techniques/T1556/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd" title="T1556.004">Network Device Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48"> <a href="/versions/v16/techniques/T1556/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48" title="T1556.005">Reversible Encryption</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/versions/v16/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/versions/v16/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04"> <a href="/versions/v16/techniques/T1556/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04" title="T1556.008">Network Provider DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/versions/v16/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--144e007b-e638-431d-a894-45d90c54ab90');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90"> <a href="/versions/v16/techniques/T1578" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90" title="T1578">Modify Cloud Compute Infrastructure <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--144e007b-e638-431d-a894-45d90c54ab90"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1"> <a href="/versions/v16/techniques/T1578/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ed2e45f9-d338-4eb2-8ce5-3a2e03323bc1" title="T1578.001">Create Snapshot</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cf1c2504-433f-4c4e-a1f8-91de45a0318c"> <a href="/versions/v16/techniques/T1578/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cf1c2504-433f-4c4e-a1f8-91de45a0318c" title="T1578.002">Create Cloud Instance</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70857657-bd0b-4695-ad3e-b13f92cac1b4"> <a href="/versions/v16/techniques/T1578/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--70857657-bd0b-4695-ad3e-b13f92cac1b4" title="T1578.003">Delete Cloud Instance</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0708ae90-d0eb-4938-9a76-d0fc94f6eec1"> <a href="/versions/v16/techniques/T1578/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0708ae90-d0eb-4938-9a76-d0fc94f6eec1" title="T1578.004">Revert Cloud Instance</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ca00366b-83a1-4c7b-a0ce-8ff950a7c87f"> <a href="/versions/v16/techniques/T1578/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ca00366b-83a1-4c7b-a0ce-8ff950a7c87f" title="T1578.005">Modify Cloud Compute Configurations</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0ce73446-8722-4086-9d43-514f1d0f669e"> <a href="/versions/v16/techniques/T1666" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0ce73446-8722-4086-9d43-514f1d0f669e" title="T1666">Modify Cloud Resource Hierarchy</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--57340c81-c025-4189-8fa0-fc7ede51bae4"> <a href="/versions/v16/techniques/T1112" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--57340c81-c025-4189-8fa0-fc7ede51bae4" title="T1112">Modify Registry</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754"> <a href="/versions/v16/techniques/T1601" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754" title="T1601">Modify System Image <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d245808a-7086-4310-984a-a84aaaa43f8f"> <a href="/versions/v16/techniques/T1601/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d245808a-7086-4310-984a-a84aaaa43f8f" title="T1601.001">Patch System Image</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc74ba38-dc98-461f-8611-b3dbf9978e3d"> <a href="/versions/v16/techniques/T1601/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fc74ba38-dc98-461f-8611-b3dbf9978e3d" title="T1601.002">Downgrade System Image</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166"> <a href="/versions/v16/techniques/T1599" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166" title="T1599">Network Boundary Bridging <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b8017880-4b1e-42de-ad10-ae7ac6705166"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ffc1794-ec3b-45be-9e52-42dbcb2af2de"> <a href="/versions/v16/techniques/T1599/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ffc1794-ec3b-45be-9e52-42dbcb2af2de" title="T1599.001">Network Address Translation Traversal</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a"> <a href="/versions/v16/techniques/T1027" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a" title="T1027">Obfuscated Files or Information <sub>(14)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b3d682b6-98f2-4fb0-aa3b-b4df007ca70a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5bfccc3f-2326-4112-86cc-c1ece9d8a2b5"> <a href="/versions/v16/techniques/T1027/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--5bfccc3f-2326-4112-86cc-c1ece9d8a2b5" title="T1027.001">Binary Padding</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--deb98323-e13f-4b0c-8d94-175379069062"> <a href="/versions/v16/techniques/T1027/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--deb98323-e13f-4b0c-8d94-175379069062" title="T1027.002">Software Packing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c2e147a9-d1a8-4074-811a-d8789202d916"> <a href="/versions/v16/techniques/T1027/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c2e147a9-d1a8-4074-811a-d8789202d916" title="T1027.003">Steganography</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c726e0a2-a57a-4b7b-a973-d0f013246617"> <a href="/versions/v16/techniques/T1027/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c726e0a2-a57a-4b7b-a973-d0f013246617" title="T1027.004">Compile After Delivery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b0533c6e-8fea-4788-874f-b799cacc4b92"> <a href="/versions/v16/techniques/T1027/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b0533c6e-8fea-4788-874f-b799cacc4b92" title="T1027.005">Indicator Removal from Tools</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4dc46e3-5ba5-45b9-8204-010867cacfcb"> <a href="/versions/v16/techniques/T1027/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d4dc46e3-5ba5-45b9-8204-010867cacfcb" title="T1027.006">HTML Smuggling</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea4c2f9c-9df1-477c-8c42-6da1118f2ac4"> <a href="/versions/v16/techniques/T1027/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea4c2f9c-9df1-477c-8c42-6da1118f2ac4" title="T1027.007">Dynamic API Resolution</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2f41939b-54c3-41d6-8f8b-35f1ec18ed97"> <a href="/versions/v16/techniques/T1027/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2f41939b-54c3-41d6-8f8b-35f1ec18ed97" title="T1027.008">Stripped Payloads</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0533ab23-3f7d-463f-9bd8-634d27e4dee1"> <a href="/versions/v16/techniques/T1027/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0533ab23-3f7d-463f-9bd8-634d27e4dee1" title="T1027.009">Embedded Payloads</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d511a6f6-4a33-41d5-bc95-c343875d1377"> <a href="/versions/v16/techniques/T1027/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d511a6f6-4a33-41d5-bc95-c343875d1377" title="T1027.010">Command Obfuscation</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--02c5abff-30bf-4703-ab92-1f6072fae939"> <a href="/versions/v16/techniques/T1027/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--02c5abff-30bf-4703-ab92-1f6072fae939" title="T1027.011">Fileless Storage</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--887274fc-2d63-4bdc-82f3-fae56d1d5fdc"> <a href="/versions/v16/techniques/T1027/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--887274fc-2d63-4bdc-82f3-fae56d1d5fdc" title="T1027.012">LNK Icon Smuggling</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0d91b3c0-5e50-47c3-949a-2a796f04d144"> <a href="/versions/v16/techniques/T1027/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0d91b3c0-5e50-47c3-949a-2a796f04d144" title="T1027.013">Encrypted/Encoded File</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b577dfc1-0177-4522-8d5a-782127c8592b"> <a href="/versions/v16/techniques/T1027/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b577dfc1-0177-4522-8d5a-782127c8592b" title="T1027.014">Polymorphic Code</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7d20fff9-8751-404e-badd-ccd71bda0236"> <a href="/versions/v16/techniques/T1647" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7d20fff9-8751-404e-badd-ccd71bda0236" title="T1647">Plist File Modification</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <a href="/versions/v16/techniques/T1542" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e" title="T1542">Pre-OS Boot <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada"> <a href="/versions/v16/techniques/T1542/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--16ab6452-c3c1-497c-a47d-206018ca1ada" title="T1542.001">System Firmware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--791481f8-e96a-41be-b089-a088763083d4"> <a href="/versions/v16/techniques/T1542/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--791481f8-e96a-41be-b089-a088763083d4" title="T1542.002">Component Firmware</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba"> <a href="/versions/v16/techniques/T1542/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1b7b1806-7746-41a1-a35d-e48dae25ddba" title="T1542.003">Bootkit</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc"> <a href="/versions/v16/techniques/T1542/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6557c75-798f-42e4-be70-ab4502e0a3bc" title="T1542.004">ROMMONkit</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4"> <a href="/versions/v16/techniques/T1542/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--28abec6c-4443-4b03-8206-07f2e264a6b4" title="T1542.005">TFTP Boot</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <a href="/versions/v16/techniques/T1055" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d" title="T1055">Process Injection <sub>(12)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--43e7dc91-05b2-474c-b9ac-2ed4fe101f4d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945"> <a href="/versions/v16/techniques/T1055/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f4599aa0-4f85-4a32-80ea-fc39dc965945" title="T1055.001">Dynamic-link Library Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662"> <a href="/versions/v16/techniques/T1055/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--806a49c4-970d-43f9-9acc-ac0ee11e6662" title="T1055.002">Portable Executable Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6"> <a href="/versions/v16/techniques/T1055/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--41d9846c-f6af-4302-a654-24bba2729bc6" title="T1055.003">Thread Execution Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605"> <a href="/versions/v16/techniques/T1055/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7c0f17c9-1af6-4628-9cbd-9e45482dd605" title="T1055.004">Asynchronous Procedure Call</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744"> <a href="/versions/v16/techniques/T1055/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e49ee9d2-0d98-44ef-85e5-5d3100065744" title="T1055.005">Thread Local Storage</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f"> <a href="/versions/v16/techniques/T1055/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ea016b56-ae0e-47fe-967a-cc0ad51af67f" title="T1055.008">Ptrace System Calls</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591"> <a href="/versions/v16/techniques/T1055/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--d201d4cc-214d-4a74-a1ba-b3fa09fd4591" title="T1055.009">Proc Memory</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298"> <a href="/versions/v16/techniques/T1055/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0042a9f5-f053-4769-b3ef-9ad018dfa298" title="T1055.011">Extra Window Memory Injection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4"> <a href="/versions/v16/techniques/T1055/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b200542e-e877-4395-875b-cf1a44537ca4" title="T1055.012">Process Hollowing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197"> <a href="/versions/v16/techniques/T1055/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7007935a-a8a7-4c0b-bd98-4e85be8ed197" title="T1055.013">Process Doppelg盲nging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5"> <a href="/versions/v16/techniques/T1055/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--98be40f2-c86b-4ade-b6fc-4964932040e5" title="T1055.014">VDSO Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99"> <a href="/versions/v16/techniques/T1055/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--eb2cb5cb-ae87-4de0-8c35-da2a17aafb99" title="T1055.015">ListPlanting</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4933e63b-9b77-476e-ab29-761bc5b7d15a"> <a href="/versions/v16/techniques/T1620" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4933e63b-9b77-476e-ab29-761bc5b7d15a" title="T1620">Reflective Code Loading</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--564998d8-ab3e-4123-93fb-eccaa6b9714a"> <a href="/versions/v16/techniques/T1207" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--564998d8-ab3e-4123-93fb-eccaa6b9714a" title="T1207">Rogue Domain Controller</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0f20e3cb-245b-4a61-8a91-2d93f7cb0e9b"> <a href="/versions/v16/techniques/T1014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--0f20e3cb-245b-4a61-8a91-2d93f7cb0e9b" title="T1014">Rootkit</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7"> <a href="/versions/v16/techniques/T1553" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7" title="T1553">Subvert Trust Controls <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b83e166d-13d7-4b52-8677-dff90c548fd7"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--31a0a2ac-c67c-4a7e-b9ed-6a96477d4e8e"> <a href="/versions/v16/techniques/T1553/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--31a0a2ac-c67c-4a7e-b9ed-6a96477d4e8e" title="T1553.001">Gatekeeper Bypass</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--32901740-b42c-4fdd-bc02-345b5dc57082"> <a href="/versions/v16/techniques/T1553/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--32901740-b42c-4fdd-bc02-345b5dc57082" title="T1553.002">Code Signing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--543fceb5-cb92-40cb-aacf-6913d4db58bc"> <a href="/versions/v16/techniques/T1553/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--543fceb5-cb92-40cb-aacf-6913d4db58bc" title="T1553.003">SIP and Trust Provider Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c615231b-f253-4f58-9d47-d5b4cbdb6839"> <a href="/versions/v16/techniques/T1553/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c615231b-f253-4f58-9d47-d5b4cbdb6839" title="T1553.004">Install Root Certificate</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7e7c2fba-7cca-486c-9582-4c1bb2851961"> <a href="/versions/v16/techniques/T1553/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7e7c2fba-7cca-486c-9582-4c1bb2851961" title="T1553.005">Mark-of-the-Web Bypass</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--565275d5-fcc3-4b66-b4e7-928e4cac6b8c"> <a href="/versions/v16/techniques/T1553/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--565275d5-fcc3-4b66-b4e7-928e4cac6b8c" title="T1553.006">Code Signing Policy Modification</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--457c7820-d331-465a-915e-42f85500ccc4');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4"> <a href="/versions/v16/techniques/T1218" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4" title="T1218">System Binary Proxy Execution <sub>(14)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--457c7820-d331-465a-915e-42f85500ccc4"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6937325-9321-4e2e-bb2b-3ed2d40b2a9d"> <a href="/versions/v16/techniques/T1218/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--a6937325-9321-4e2e-bb2b-3ed2d40b2a9d" title="T1218.001">Compiled HTML File</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ff5d6a8-c062-4c68-a778-36fc5edd564f"> <a href="/versions/v16/techniques/T1218/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4ff5d6a8-c062-4c68-a778-36fc5edd564f" title="T1218.002">Control Panel</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4cbc6a62-9e34-4f94-8a19-5c1a11392a49"> <a href="/versions/v16/techniques/T1218/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4cbc6a62-9e34-4f94-8a19-5c1a11392a49" title="T1218.003">CMSTP</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2cd950a6-16c4-404a-aa01-044322395107"> <a href="/versions/v16/techniques/T1218/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--2cd950a6-16c4-404a-aa01-044322395107" title="T1218.004">InstallUtil</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--840a987a-99bd-4a80-a5c9-0cb2baa6cade"> <a href="/versions/v16/techniques/T1218/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--840a987a-99bd-4a80-a5c9-0cb2baa6cade" title="T1218.005">Mshta</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--365be77f-fc0e-42ee-bac8-4faf806d9336"> <a href="/versions/v16/techniques/T1218/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--365be77f-fc0e-42ee-bac8-4faf806d9336" title="T1218.007">Msiexec</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6e3bd510-6b33-41a4-af80-2d80f3ee0071"> <a href="/versions/v16/techniques/T1218/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6e3bd510-6b33-41a4-af80-2d80f3ee0071" title="T1218.008">Odbcconf</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c48a67ee-b657-45c1-91bf-6cdbe27205f8"> <a href="/versions/v16/techniques/T1218/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c48a67ee-b657-45c1-91bf-6cdbe27205f8" title="T1218.009">Regsvcs/Regasm</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b97f1d35-4249-4486-a6b5-ee60ccf24fab"> <a href="/versions/v16/techniques/T1218/010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b97f1d35-4249-4486-a6b5-ee60ccf24fab" title="T1218.010">Regsvr32</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--045d0922-2310-4e60-b5e4-3302302cb3c5"> <a href="/versions/v16/techniques/T1218/011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--045d0922-2310-4e60-b5e4-3302302cb3c5" title="T1218.011">Rundll32</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--808e6329-ca91-4b87-ac2d-8eadc5f8f327"> <a href="/versions/v16/techniques/T1218/012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--808e6329-ca91-4b87-ac2d-8eadc5f8f327" title="T1218.012">Verclsid</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1bae753e-8e52-4055-a66d-2ead90303ca9"> <a href="/versions/v16/techniques/T1218/013" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1bae753e-8e52-4055-a66d-2ead90303ca9" title="T1218.013">Mavinject</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffbcfdb0-de22-4106-9ed3-fc23c8a01407"> <a href="/versions/v16/techniques/T1218/014" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ffbcfdb0-de22-4106-9ed3-fc23c8a01407" title="T1218.014">MMC</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--561ae9aa-c28a-4144-9eec-e7027a14c8c3"> <a href="/versions/v16/techniques/T1218/015" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--561ae9aa-c28a-4144-9eec-e7027a14c8c3" title="T1218.015">Electron Applications</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe"> <a href="/versions/v16/techniques/T1216" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe" title="T1216">System Script Proxy Execution <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f6fe9070-7a65-49ea-ae72-76292f42cebe"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09cd431f-eaf4-4d2a-acaf-2a7acfe7ed58"> <a href="/versions/v16/techniques/T1216/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--09cd431f-eaf4-4d2a-acaf-2a7acfe7ed58" title="T1216.001">PubPrn</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e6f19759-dde3-47fc-99cc-d9f5fa4ade60"> <a href="/versions/v16/techniques/T1216/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e6f19759-dde3-47fc-99cc-d9f5fa4ade60" title="T1216.002">SyncAppvPublishingServer</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dc31fe1e-d722-49da-8f5f-92c7b5aff534"> <a href="/versions/v16/techniques/T1221" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--dc31fe1e-d722-49da-8f5f-92c7b5aff534" title="T1221">Template Injection</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--451a9977-d255-43c9-b431-66de80130c8c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <a href="/versions/v16/techniques/T1205" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" title="T1205">Traffic Signaling <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd"> <a href="/versions/v16/techniques/T1205/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd" title="T1205.001">Port Knocking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520"> <a href="/versions/v16/techniques/T1205/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520" title="T1205.002">Socket Filters</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b"> <a href="/versions/v16/techniques/T1127" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b" title="T1127">Trusted Developer Utilities Proxy Execution <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ff25900d-76d5-449b-a351-8824e62fc81b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c92e3d68-2349-49e4-a341-7edca2deff96"> <a href="/versions/v16/techniques/T1127/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c92e3d68-2349-49e4-a341-7edca2deff96" title="T1127.001">MSBuild</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc279e50-df85-4c8e-be80-6dc2eda8849c"> <a href="/versions/v16/techniques/T1127/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--cc279e50-df85-4c8e-be80-6dc2eda8849c" title="T1127.002">ClickOnce</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--59bd0dec-f8b2-4b9a-9141-37a1e6899761"> <a href="/versions/v16/techniques/T1535" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--59bd0dec-f8b2-4b9a-9141-37a1e6899761" title="T1535">Unused/Unsupported Cloud Regions</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/versions/v16/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/versions/v16/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e"> <a href="/versions/v16/techniques/T1550/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e" title="T1550.002">Pass the Hash</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926"> <a href="/versions/v16/techniques/T1550/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926" title="T1550.003">Pass the Ticket</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0"> <a href="/versions/v16/techniques/T1550/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0" title="T1550.004">Web Session Cookie</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <a href="/versions/v16/techniques/T1078" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81" title="T1078">Valid Accounts <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--b17a1a56-e99c-403c-8948-561df0cffe81"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d"> <a href="/versions/v16/techniques/T1078/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--6151cbea-819b-455a-9fa6-99a1cc58797d" title="T1078.001">Default Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f"> <a href="/versions/v16/techniques/T1078/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--c3d4bdd9-2cfe-4a80-9d0c-07a29ecdce8f" title="T1078.002">Domain Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2"> <a href="/versions/v16/techniques/T1078/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--fdc47f44-dd32-4b99-af5f-209f556f63c2" title="T1078.003">Local Accounts</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65"> <a href="/versions/v16/techniques/T1078/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--f232fa7a-025c-4d43-abc7-318e81a73d65" title="T1078.004">Cloud Accounts</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <a href="/versions/v16/techniques/T1497" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" title="T1497">Virtualization/Sandbox Evasion <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6"> <a href="/versions/v16/techniques/T1497/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6" title="T1497.001">System Checks</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938"> <a href="/versions/v16/techniques/T1497/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938" title="T1497.002">User Activity Based Checks</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0"> <a href="/versions/v16/techniques/T1497/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0" title="T1497.003">Time Based Evasion</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8" onclick="toggleMatrixSubTechniques('x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a', 'attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8"> <a href="/versions/v16/techniques/T1600" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8" title="T1600">Weaken Encryption <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--1f9012ef-1e10-4e48-915e-e03563435fe8"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3a40f208-a9c1-4efa-a598-4003c3681fb8"> <a href="/versions/v16/techniques/T1600/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--3a40f208-a9c1-4efa-a598-4003c3681fb8" title="T1600.001">Reduce Key Space</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7efba77e-3bc4-4ca5-8292-d8201dcd64b5"> <a href="/versions/v16/techniques/T1600/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--7efba77e-3bc4-4ca5-8292-d8201dcd64b5" title="T1600.002">Disable Crypto Hardware</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebbe170d-aa74-4946-8511-9921243415a3"> <a href="/versions/v16/techniques/T1220" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--78b23412-0651-46d7-a540-170a1ce8bd5a--attack-pattern--ebbe170d-aa74-4946-8511-9921243415a3" title="T1220">XSL Script Processing</a> </div> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <a href="/versions/v16/techniques/T1557" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" title="T1557">Adversary-in-the-Middle <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e"> <a href="/versions/v16/techniques/T1557/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e" title="T1557.001">LLMNR/NBT-NS Poisoning and SMB Relay</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213"> <a href="/versions/v16/techniques/T1557/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213" title="T1557.002">ARP Cache Poisoning</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5"> <a href="/versions/v16/techniques/T1557/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5" title="T1557.003">DHCP Spoofing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e"> <a href="/versions/v16/techniques/T1557/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e" title="T1557.004">Evil Twin</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd"> <a href="/versions/v16/techniques/T1110" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd" title="T1110">Brute Force <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a93494bb-4b80-4ea1-8695-3236a49916fd"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119"> <a href="/versions/v16/techniques/T1110/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09c4c11e-4fa1-4f8c-8dad-3cf8e69ad119" title="T1110.001">Password Guessing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d"> <a href="/versions/v16/techniques/T1110/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1d24cdee-9ea2-4189-b08e-af110bf2435d" title="T1110.002">Password Cracking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c"> <a href="/versions/v16/techniques/T1110/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--692074ae-bb62-4a5e-a735-02cb6bde458c" title="T1110.003">Password Spraying</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc"> <a href="/versions/v16/techniques/T1110/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b2d03cea-aec1-45ca-9744-9ee583c1e1cc" title="T1110.004">Credential Stuffing</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0"> <a href="/versions/v16/techniques/T1555" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0" title="T1555">Credentials from Password Stores <sub>(6)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc9b85a-2862-4363-a64d-d692e3ffbee0"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1eaebf46-e361-4437-bc23-d5d65a3b92e3"> <a href="/versions/v16/techniques/T1555/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1eaebf46-e361-4437-bc23-d5d65a3b92e3" title="T1555.001">Keychain</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1a80d097-54df-41d8-9d33-34e755ec5e72"> <a href="/versions/v16/techniques/T1555/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1a80d097-54df-41d8-9d33-34e755ec5e72" title="T1555.002">Securityd Memory</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--58a3e6aa-4453-4cc8-a51f-4befe80b31a8"> <a href="/versions/v16/techniques/T1555/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--58a3e6aa-4453-4cc8-a51f-4befe80b31a8" title="T1555.003">Credentials from Web Browsers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d336b553-5da9-46ca-98a8-0b23f49fb447"> <a href="/versions/v16/techniques/T1555/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d336b553-5da9-46ca-98a8-0b23f49fb447" title="T1555.004">Windows Credential Manager</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--315f51f0-6b03-4c1e-bfb2-84740afb8e21"> <a href="/versions/v16/techniques/T1555/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--315f51f0-6b03-4c1e-bfb2-84740afb8e21" title="T1555.005">Password Managers</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cfb525cc-5494-401d-a82b-2539ca46a561"> <a href="/versions/v16/techniques/T1555/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--cfb525cc-5494-401d-a82b-2539ca46a561" title="T1555.006">Cloud Secrets Management Stores</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36"> <a href="/versions/v16/techniques/T1212" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9c306d8d-cde7-4b4c-b6e8-d0bb16caca36" title="T1212">Exploitation for Credential Access</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2"> <a href="/versions/v16/techniques/T1187" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2" title="T1187">Forced Authentication</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <a href="/versions/v16/techniques/T1606" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c" title="T1606">Forge Web Credentials <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--94cb00a4-b295-4d06-aa2b-5653b9c1be9c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--861b8fd2-57f3-4ee1-ab5d-c19c3b8c7a4a"> <a href="/versions/v16/techniques/T1606/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--861b8fd2-57f3-4ee1-ab5d-c19c3b8c7a4a" title="T1606.001">Web Cookies</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2"> <a href="/versions/v16/techniques/T1606/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1f9c2bae-b441-4f66-a8af-b65946ee72f2" title="T1606.002">SAML Tokens</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <a href="/versions/v16/techniques/T1056" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" title="T1056">Input Capture <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4"> <a href="/versions/v16/techniques/T1056/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4" title="T1056.001">Keylogging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d"> <a href="/versions/v16/techniques/T1056/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d" title="T1056.002">GUI Input Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e"> <a href="/versions/v16/techniques/T1056/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e" title="T1056.003">Web Portal Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6"> <a href="/versions/v16/techniques/T1056/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6" title="T1056.004">Credential API Hooking</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--f4c1826f-a322-41cd-9557-562100848c84');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <a href="/versions/v16/techniques/T1556" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84" title="T1556">Modify Authentication Process <sub>(9)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f4c1826f-a322-41cd-9557-562100848c84"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605"> <a href="/versions/v16/techniques/T1556/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d4b96d2c-1032-4b22-9235-2b5b649d0605" title="T1556.001">Domain Controller Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42"> <a href="/versions/v16/techniques/T1556/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3731fbcd-0e43-47ae-ae6c-d15e510f0d42" title="T1556.002">Password Filter DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771"> <a href="/versions/v16/techniques/T1556/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--06c00069-771a-4d57-8ef5-d3718c1a8771" title="T1556.003">Pluggable Authentication Modules</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd"> <a href="/versions/v16/techniques/T1556/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--fa44a152-ac48-441e-a524-dd7b04b8adcd" title="T1556.004">Network Device Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48"> <a href="/versions/v16/techniques/T1556/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d50955c2-272d-4ac8-95da-10c29dda1c48" title="T1556.005">Reversible Encryption</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc"> <a href="/versions/v16/techniques/T1556/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--b4409cd8-0da9-46e1-a401-a241afd4d1cc" title="T1556.006">Multi-Factor Authentication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f"> <a href="/versions/v16/techniques/T1556/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--54ca26f3-c172-4231-93e5-ccebcac2161f" title="T1556.007">Hybrid Identity</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04"> <a href="/versions/v16/techniques/T1556/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--90c4a591-d02d-490b-92aa-619d9701ac04" title="T1556.008">Network Provider DLL</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae"> <a href="/versions/v16/techniques/T1556/009" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--ceaeb6d8-95ee-4da2-9d42-dc6aa6ca43ae" title="T1556.009">Conditional Access Policies</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--dd43c543-bb85-4a6f-aa6e-160d90d06a49"> <a href="/versions/v16/techniques/T1111" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--dd43c543-bb85-4a6f-aa6e-160d90d06a49" title="T1111">Multi-Factor Authentication Interception</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493"> <a href="/versions/v16/techniques/T1621" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--954a1639-f2d6-407d-aef3-4917622ca493" title="T1621">Multi-Factor Authentication Request Generation</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529"> <a href="/versions/v16/techniques/T1040" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529" title="T1040">Network Sniffing</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22"> <a href="/versions/v16/techniques/T1003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22" title="T1003">OS Credential Dumping <sub>(8)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--65f2d882-3f41-4d48-8a06-29af77ec9f90"> <a href="/versions/v16/techniques/T1003/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--65f2d882-3f41-4d48-8a06-29af77ec9f90" title="T1003.001">LSASS Memory</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1644e709-12d2-41e5-a60f-3470991f5011"> <a href="/versions/v16/techniques/T1003/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1644e709-12d2-41e5-a60f-3470991f5011" title="T1003.002">Security Account Manager</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--edf91964-b26e-4b4a-9600-ccacd7d7df24"> <a href="/versions/v16/techniques/T1003/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--edf91964-b26e-4b4a-9600-ccacd7d7df24" title="T1003.003">NTDS</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1ecfdab8-7d59-4c98-95d4-dc41970f57fc"> <a href="/versions/v16/techniques/T1003/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--1ecfdab8-7d59-4c98-95d4-dc41970f57fc" title="T1003.004">LSA Secrets</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--6add2ab5-2711-4e9d-87c8-7a0be8531530"> <a href="/versions/v16/techniques/T1003/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--6add2ab5-2711-4e9d-87c8-7a0be8531530" title="T1003.005">Cached Domain Credentials</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f303a39a-6255-4b89-aecc-18c4d8ca7163"> <a href="/versions/v16/techniques/T1003/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f303a39a-6255-4b89-aecc-18c4d8ca7163" title="T1003.006">DCSync</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3120b9fa-23b8-4500-ae73-09494f607b7d"> <a href="/versions/v16/techniques/T1003/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3120b9fa-23b8-4500-ae73-09494f607b7d" title="T1003.007">Proc Filesystem</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d0b4fcdb-d67d-4ed2-99ce-788b12f8c0f4"> <a href="/versions/v16/techniques/T1003/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d0b4fcdb-d67d-4ed2-99ce-788b12f8c0f4" title="T1003.008">/etc/passwd and /etc/shadow</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a"> <a href="/versions/v16/techniques/T1528" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--890c9858-598c-401d-a4d5-c67ebcdd703a" title="T1528">Steal Application Access Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331"> <a href="/versions/v16/techniques/T1649" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--7de1f7ac-5d0c-4c9c-8873-627202205331" title="T1649">Steal or Forge Authentication Certificates</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a"> <a href="/versions/v16/techniques/T1558" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a" title="T1558">Steal or Forge Kerberos Tickets <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3fc01293-ef5e-41c6-86ce-61f10706b64a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--768dce68-8d0d-477a-b01d-0eea98b963a1"> <a href="/versions/v16/techniques/T1558/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--768dce68-8d0d-477a-b01d-0eea98b963a1" title="T1558.001">Golden Ticket</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d273434a-448e-4598-8e14-607f4a0d5e27"> <a href="/versions/v16/techniques/T1558/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--d273434a-448e-4598-8e14-607f4a0d5e27" title="T1558.002">Silver Ticket</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f2877f7f-9a4c-4251-879f-1224e3006bee"> <a href="/versions/v16/techniques/T1558/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f2877f7f-9a4c-4251-879f-1224e3006bee" title="T1558.003">Kerberoasting</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3986e7fd-a8e9-4ecb-bfc6-55920855912b"> <a href="/versions/v16/techniques/T1558/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--3986e7fd-a8e9-4ecb-bfc6-55920855912b" title="T1558.004">AS-REP Roasting</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--394220d9-8efc-4252-9040-664f7b115be6"> <a href="/versions/v16/techniques/T1558/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--394220d9-8efc-4252-9040-664f7b115be6" title="T1558.005">Ccache Files</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--10ffac09-e42d-4f56-ab20-db94c67d76ff"> <a href="/versions/v16/techniques/T1539" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--10ffac09-e42d-4f56-ab20-db94c67d76ff" title="T1539">Steal Web Session Cookie</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517" onclick="toggleMatrixSubTechniques('x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263', 'attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> <a href="/versions/v16/techniques/T1552" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517" title="T1552">Unsecured Credentials <sub>(8)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--435dfb86-2697-4867-85b5-2fef496c0517"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--837f9164-50af-4ac0-8219-379d8a74cefc"> <a href="/versions/v16/techniques/T1552/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--837f9164-50af-4ac0-8219-379d8a74cefc" title="T1552.001">Credentials In Files</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--341e222a-a6e3-4f6f-b69c-831d792b1580"> <a href="/versions/v16/techniques/T1552/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--341e222a-a6e3-4f6f-b69c-831d792b1580" title="T1552.002">Credentials in Registry</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8187bd2a-866f-4457-9009-86b0ddedffa3"> <a href="/versions/v16/techniques/T1552/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8187bd2a-866f-4457-9009-86b0ddedffa3" title="T1552.003">Bash History</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--60b508a1-6a5e-46b1-821a-9f7b78752abf"> <a href="/versions/v16/techniques/T1552/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--60b508a1-6a5e-46b1-821a-9f7b78752abf" title="T1552.004">Private Keys</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--19bf235b-8620-4997-b5b4-94e0659ed7c3"> <a href="/versions/v16/techniques/T1552/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--19bf235b-8620-4997-b5b4-94e0659ed7c3" title="T1552.005">Cloud Instance Metadata API</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8d7bd4f5-3a89-4453-9c82-2c8894d5655e"> <a href="/versions/v16/techniques/T1552/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--8d7bd4f5-3a89-4453-9c82-2c8894d5655e" title="T1552.006">Group Policy Preferences</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f8ef3a62-3f44-40a4-abca-761ab235c436"> <a href="/versions/v16/techniques/T1552/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--f8ef3a62-3f44-40a4-abca-761ab235c436" title="T1552.007">Container API</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9664ad0e-789e-40ac-82e2-d7b17fbe8fb3"> <a href="/versions/v16/techniques/T1552/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--2558fd61-8c75-4730-94c4-11926db2a263--attack-pattern--9664ad0e-789e-40ac-82e2-d7b17fbe8fb3" title="T1552.008">Chat Messages</a> </div> </div> </td> </tr> </table> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <a href="/versions/v16/techniques/T1087" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08" title="T1087">Account Discovery <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--72b74d71-8169-42aa-92e0-e7b04b9f5a08"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--25659dd6-ea12-45c4-97e6-381e3e4b593e"> <a href="/versions/v16/techniques/T1087/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--25659dd6-ea12-45c4-97e6-381e3e4b593e" title="T1087.001">Local Account</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--21875073-b0ee-49e3-9077-1e2a885359af"> <a href="/versions/v16/techniques/T1087/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--21875073-b0ee-49e3-9077-1e2a885359af" title="T1087.002">Domain Account</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bc31b94-045b-4752-8920-aebaebdb6470"> <a href="/versions/v16/techniques/T1087/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bc31b94-045b-4752-8920-aebaebdb6470" title="T1087.003">Email Account</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe"> <a href="/versions/v16/techniques/T1087/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f104855-e5b7-4077-b1f5-bc3103b41abe" title="T1087.004">Cloud Account</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4ae4f953-fe58-4cc8-a327-33257e30a830"> <a href="/versions/v16/techniques/T1010" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4ae4f953-fe58-4cc8-a327-33257e30a830" title="T1010">Application Window Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--5e4a2073-9643-44cb-a0b5-e7f4048446c7"> <a href="/versions/v16/techniques/T1217" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--5e4a2073-9643-44cb-a0b5-e7f4048446c7" title="T1217">Browser Information Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--57a3d31a-d04f-4663-b2da-7df8ec3f8c9d"> <a href="/versions/v16/techniques/T1580" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--57a3d31a-d04f-4663-b2da-7df8ec3f8c9d" title="T1580">Cloud Infrastructure Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f"> <a href="/versions/v16/techniques/T1538" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e49920b0-6c54-40c1-9571-73723653205f" title="T1538">Cloud Service Dashboard</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db"> <a href="/versions/v16/techniques/T1526" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e24fcba8-2557-4442-a139-1ee2f2e784db" title="T1526">Cloud Service Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8565825b-21c8-4518-b75e-cbc4c717a156"> <a href="/versions/v16/techniques/T1619" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8565825b-21c8-4518-b75e-cbc4c717a156" title="T1619">Cloud Storage Object Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--0470e792-32f8-46b0-a351-652bc35e9336"> <a href="/versions/v16/techniques/T1613" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--0470e792-32f8-46b0-a351-652bc35e9336" title="T1613">Container and Resource Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391"> <a href="/versions/v16/techniques/T1622" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e4dc8c01-417f-458d-9ee0-bb0617c1b391" title="T1622">Debugger Evasion</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--215d9700-5881-48b8-8265-6449dbb7195d"> <a href="/versions/v16/techniques/T1652" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--215d9700-5881-48b8-8265-6449dbb7195d" title="T1652">Device Driver Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--767dbf9e-df3f-45cb-8998-4903ab5f80c0"> <a href="/versions/v16/techniques/T1482" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--767dbf9e-df3f-45cb-8998-4903ab5f80c0" title="T1482">Domain Trust Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18"> <a href="/versions/v16/techniques/T1083" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18" title="T1083">File and Directory Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--1b20efbf-8063-4fc3-a07d-b575318a301b"> <a href="/versions/v16/techniques/T1615" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--1b20efbf-8063-4fc3-a07d-b575318a301b" title="T1615">Group Policy Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--866d0d6d-02c6-42bd-aa2f-02907fdc0969"> <a href="/versions/v16/techniques/T1654" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--866d0d6d-02c6-42bd-aa2f-02907fdc0969" title="T1654">Log Enumeration</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3a12395-188d-4051-9a16-ea8e14d07b88"> <a href="/versions/v16/techniques/T1046" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3a12395-188d-4051-9a16-ea8e14d07b88" title="T1046">Network Service Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3489cfc5-640f-4bb3-a103-9137b97de79f"> <a href="/versions/v16/techniques/T1135" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3489cfc5-640f-4bb3-a103-9137b97de79f" title="T1135">Network Share Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529"> <a href="/versions/v16/techniques/T1040" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--3257eb21-f9a7-4430-8de1-d8b6e288f529" title="T1040">Network Sniffing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5"> <a href="/versions/v16/techniques/T1201" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--b6075259-dba3-44e9-87c7-e954f37ec0d5" title="T1201">Password Policy Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--348f1eef-964b-4eb6-bb53-69b3dcb0c643"> <a href="/versions/v16/techniques/T1120" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--348f1eef-964b-4eb6-bb53-69b3dcb0c643" title="T1120">Peripheral Device Discovery</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <a href="/versions/v16/techniques/T1069" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce" title="T1069">Permission Groups Discovery <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--15dbf668-795c-41e6-8219-f0447c0e64ce"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--a01bf75f-00b2-4568-a58f-565ff9bf202b"> <a href="/versions/v16/techniques/T1069/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--a01bf75f-00b2-4568-a58f-565ff9bf202b" title="T1069.001">Local Groups</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--2aed01ad-3df3-4410-a8cb-11ea4ded587c"> <a href="/versions/v16/techniques/T1069/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--2aed01ad-3df3-4410-a8cb-11ea4ded587c" title="T1069.002">Domain Groups</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2"> <a href="/versions/v16/techniques/T1069/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--16e94db9-b5b1-4cd0-b851-f38fbd0a70f2" title="T1069.003">Cloud Groups</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f4a33ec-8b1f-4b80-a2f6-642b2e479580"> <a href="/versions/v16/techniques/T1057" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--8f4a33ec-8b1f-4b80-a2f6-642b2e479580" title="T1057">Process Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c32f7008-9fea-41f7-8366-5eb9b74bd896"> <a href="/versions/v16/techniques/T1012" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c32f7008-9fea-41f7-8366-5eb9b74bd896" title="T1012">Query Registry</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e358d692-23c0-4a31-9eb6-ecc13a8d7735"> <a href="/versions/v16/techniques/T1018" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e358d692-23c0-4a31-9eb6-ecc13a8d7735" title="T1018">Remote System Discovery</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58"> <a href="/versions/v16/techniques/T1518" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58" title="T1518">Software Discovery <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--e3b6daca-e963-4a69-aee6-ed4fd653ad58"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--cba37adb-d6fb-4610-b069-dd04c0643384"> <a href="/versions/v16/techniques/T1518/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--cba37adb-d6fb-4610-b069-dd04c0643384" title="T1518.001">Security Software Discovery</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--354a7f88-63fb-41b5-a801-ce3b377b36f1"> <a href="/versions/v16/techniques/T1082" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--354a7f88-63fb-41b5-a801-ce3b377b36f1" title="T1082">System Information Discovery</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979"> <a href="/versions/v16/techniques/T1614" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979" title="T1614">System Location Discovery <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c877e33f-1df6-40d6-b1e7-ce70f16f4979"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c1b68a96-3c48-49ea-a6c0-9b27359f9c19"> <a href="/versions/v16/techniques/T1614/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--c1b68a96-3c48-49ea-a6c0-9b27359f9c19" title="T1614.001">System Language Discovery</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0"> <a href="/versions/v16/techniques/T1016" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0" title="T1016">System Network Configuration Discovery <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--707399d6-ab3e-4963-9315-d9d3818cd6a0"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--132d5b37-aac5-4378-a8dc-3127b18a73dc"> <a href="/versions/v16/techniques/T1016/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--132d5b37-aac5-4378-a8dc-3127b18a73dc" title="T1016.001">Internet Connection Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--494ab9f0-36e0-4b06-b10d-57285b040a06"> <a href="/versions/v16/techniques/T1016/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--494ab9f0-36e0-4b06-b10d-57285b040a06" title="T1016.002">Wi-Fi Discovery</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7e150503-88e7-4861-866b-ff1ac82c4475"> <a href="/versions/v16/techniques/T1049" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--7e150503-88e7-4861-866b-ff1ac82c4475" title="T1049">System Network Connections Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--03d7999c-1f4c-42cc-8373-e7690d318104"> <a href="/versions/v16/techniques/T1033" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--03d7999c-1f4c-42cc-8373-e7690d318104" title="T1033">System Owner/User Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--322bad5a-1c49-4d23-ab79-76d641794afa"> <a href="/versions/v16/techniques/T1007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--322bad5a-1c49-4d23-ab79-76d641794afa" title="T1007">System Service Discovery</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--f3c544dc-673c-4ef3-accb-53229f1ae077"> <a href="/versions/v16/techniques/T1124" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--f3c544dc-673c-4ef3-accb-53229f1ae077" title="T1124">System Time Discovery</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9', 'attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <a href="/versions/v16/techniques/T1497" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d" title="T1497">Virtualization/Sandbox Evasion <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--82caa33e-d11a-433a-94ea-9b5a5fbef81d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6"> <a href="/versions/v16/techniques/T1497/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--29be378d-262d-4e99-b00d-852d573628e6" title="T1497.001">System Checks</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938"> <a href="/versions/v16/techniques/T1497/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--91541e7e-b969-40c6-bbd8-1b5352ec2938" title="T1497.002">User Activity Based Checks</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0"> <a href="/versions/v16/techniques/T1497/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--c17c5845-175e-4421-9713-829d0573dbc9--attack-pattern--4bed873f-0b7d-41d4-b93a-b6905d1f90b0" title="T1497.003">Time Based Evasion</a> </div> </div> </td> </tr> </table> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9db0cf3a-a3c9-4012-8268-123b9db6fd82"> <a href="/versions/v16/techniques/T1210" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9db0cf3a-a3c9-4012-8268-123b9db6fd82" title="T1210">Exploitation of Remote Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9e7452df-5144-4b6e-b04a-b66dd4016747"> <a href="/versions/v16/techniques/T1534" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--9e7452df-5144-4b6e-b04a-b66dd4016747" title="T1534">Internal Spearphishing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--bf90d72c-c00b-45e3-b3aa-68560560d4c5"> <a href="/versions/v16/techniques/T1570" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--bf90d72c-c00b-45e3-b3aa-68560560d4c5" title="T1570">Lateral Tool Transfer</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5"> <a href="/versions/v16/techniques/T1563" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5" title="T1563">Remote Service Session Hijacking <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--5b0ad6f8-6a16-4966-a4ef-d09ea6e2a9f5"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4d2a5b3e-340d-4600-9123-309dd63c9bf8"> <a href="/versions/v16/techniques/T1563/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4d2a5b3e-340d-4600-9123-309dd63c9bf8" title="T1563.001">SSH Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e0033c16-a07e-48aa-8204-7c3ca669998c"> <a href="/versions/v16/techniques/T1563/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e0033c16-a07e-48aa-8204-7c3ca669998c" title="T1563.002">RDP Hijacking</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba"> <a href="/versions/v16/techniques/T1021" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba" title="T1021">Remote Services <sub>(8)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--54a649ff-439a-41a4-9856-8d144a2551ba"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--eb062747-2193-45de-8fa2-e62549c37ddf"> <a href="/versions/v16/techniques/T1021/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--eb062747-2193-45de-8fa2-e62549c37ddf" title="T1021.001">Remote Desktop Protocol</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4f9ca633-15c5-463c-9724-bdcd54fde541"> <a href="/versions/v16/techniques/T1021/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--4f9ca633-15c5-463c-9724-bdcd54fde541" title="T1021.002">SMB/Windows Admin Shares</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--68a0c5ed-bee2-4513-830d-5b0d650139bd"> <a href="/versions/v16/techniques/T1021/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--68a0c5ed-bee2-4513-830d-5b0d650139bd" title="T1021.003">Distributed Component Object Model</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--2db31dcd-54da-405d-acef-b9129b816ed6"> <a href="/versions/v16/techniques/T1021/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--2db31dcd-54da-405d-acef-b9129b816ed6" title="T1021.004">SSH</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--01327cde-66c4-4123-bf34-5f258d59457b"> <a href="/versions/v16/techniques/T1021/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--01327cde-66c4-4123-bf34-5f258d59457b" title="T1021.005">VNC</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--60d0c01d-e2bf-49dd-a453-f8a9c9fa6f65"> <a href="/versions/v16/techniques/T1021/006" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--60d0c01d-e2bf-49dd-a453-f8a9c9fa6f65" title="T1021.006">Windows Remote Management</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--8861073d-d1b8-4941-82ce-dce621d398f0"> <a href="/versions/v16/techniques/T1021/007" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--8861073d-d1b8-4941-82ce-dce621d398f0" title="T1021.007">Cloud Services</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--45241b9e-9bbc-4826-a2cc-78855e51ca09"> <a href="/versions/v16/techniques/T1021/008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--45241b9e-9bbc-4826-a2cc-78855e51ca09" title="T1021.008">Direct Cloud VM Connections</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4"> <a href="/versions/v16/techniques/T1091" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--3b744087-9945-4a6f-91e8-9dbceda417a4" title="T1091">Replication Through Removable Media</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414"> <a href="/versions/v16/techniques/T1072" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--92a78814-b191-47ca-909c-1ccfe3777414" title="T1072">Software Deployment Tools</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--246fd3c7-f5e3-466d-8787-4c13d9e3b61c"> <a href="/versions/v16/techniques/T1080" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--246fd3c7-f5e3-466d-8787-4c13d9e3b61c" title="T1080">Taint Shared Content</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" onclick="toggleMatrixSubTechniques('x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e', 'attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <a href="/versions/v16/techniques/T1550" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814" title="T1550">Use Alternate Authentication Material <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51"> <a href="/versions/v16/techniques/T1550/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--f005e783-57d4-4837-88ad-dbe7faee1c51" title="T1550.001">Application Access Token</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e"> <a href="/versions/v16/techniques/T1550/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--e624264c-033a-424d-9fd7-fc9c3bbdb03e" title="T1550.002">Pass the Hash</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926"> <a href="/versions/v16/techniques/T1550/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--7b211ac6-c815-4189-93a9-ab415deca926" title="T1550.003">Pass the Ticket</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0"> <a href="/versions/v16/techniques/T1550/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--7141578b-e50b-4dcc-bfa4-08a8dd689e9e--attack-pattern--c3c8c916-2f3c-4e71-94b2-240bdfc996f0" title="T1550.004">Web Session Cookie</a> </div> </div> </td> </tr> </table> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <a href="/versions/v16/techniques/T1557" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d" title="T1557">Adversary-in-the-Middle <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--035bb001-ab69-4a0b-9f6c-2de8b09e1b9d"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e"> <a href="/versions/v16/techniques/T1557/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--650c784b-7504-4df7-ab2c-4ea882384d1e" title="T1557.001">LLMNR/NBT-NS Poisoning and SMB Relay</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213"> <a href="/versions/v16/techniques/T1557/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cabe189c-a0e3-4965-a473-dcff00f17213" title="T1557.002">ARP Cache Poisoning</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5"> <a href="/versions/v16/techniques/T1557/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--59ff91cd-1430-4075-8563-e6f15f4f9ff5" title="T1557.003">DHCP Spoofing</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e"> <a href="/versions/v16/techniques/T1557/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--48b836c6-e4ca-435a-82a3-29c03e5b492e" title="T1557.004">Evil Twin</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a"> <a href="/versions/v16/techniques/T1560" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a" title="T1560">Archive Collected Data <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--00f90846-cbd1-4fc5-9233-df5c2bf2a662"> <a href="/versions/v16/techniques/T1560/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--00f90846-cbd1-4fc5-9233-df5c2bf2a662" title="T1560.001">Archive via Utility</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--41868330-6ee2-4d0f-b743-9f2294c3c9b6"> <a href="/versions/v16/techniques/T1560/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--41868330-6ee2-4d0f-b743-9f2294c3c9b6" title="T1560.002">Archive via Library</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--143c0cbb-a297-4142-9624-87ffc778980b"> <a href="/versions/v16/techniques/T1560/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--143c0cbb-a297-4142-9624-87ffc778980b" title="T1560.003">Archive via Custom Method</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1035cdf2-3e5f-446f-a7a7-e8f6d7925967"> <a href="/versions/v16/techniques/T1123" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1035cdf2-3e5f-446f-a7a7-e8f6d7925967" title="T1123">Audio Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30208d3e-0d6b-43c8-883e-44462a514619"> <a href="/versions/v16/techniques/T1119" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30208d3e-0d6b-43c8-883e-44462a514619" title="T1119">Automated Collection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--544b0346-29ad-41e1-a808-501bb4193f47"> <a href="/versions/v16/techniques/T1185" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--544b0346-29ad-41e1-a808-501bb4193f47" title="T1185">Browser Session Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30973a08-aed9-4edf-8604-9084ce1b5c4f"> <a href="/versions/v16/techniques/T1115" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--30973a08-aed9-4edf-8604-9084ce1b5c4f" title="T1115">Clipboard Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3298ce88-1628-43b1-87d9-0b5336b193d7"> <a href="/versions/v16/techniques/T1530" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3298ce88-1628-43b1-87d9-0b5336b193d7" title="T1530">Data from Cloud Storage</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74"> <a href="/versions/v16/techniques/T1602" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74" title="T1602">Data from Configuration Repository <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0ad7bc5c-235a-4048-944b-3b286676cb74"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ee7ff928-801c-4f34-8a99-3df965e581a5"> <a href="/versions/v16/techniques/T1602/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ee7ff928-801c-4f34-8a99-3df965e581a5" title="T1602.001">SNMP (MIB Dump)</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--52759bf1-fe12-4052-ace6-c5b0cf7dd7fd"> <a href="/versions/v16/techniques/T1602/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--52759bf1-fe12-4052-ace6-c5b0cf7dd7fd" title="T1602.002">Network Device Configuration Dump</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416"> <a href="/versions/v16/techniques/T1213" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416" title="T1213">Data from Information Repositories <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--d28ef391-8ed4-45dc-bc4a-2f43abf54416"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7ad38ef1-381a-406d-872a-38b136eb5ecc"> <a href="/versions/v16/techniques/T1213/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7ad38ef1-381a-406d-872a-38b136eb5ecc" title="T1213.001">Confluence</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0c4b4fda-9062-47da-98b9-ceae2dcf052a"> <a href="/versions/v16/techniques/T1213/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0c4b4fda-9062-47da-98b9-ceae2dcf052a" title="T1213.002">Sharepoint</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cff94884-3b1c-4987-a70b-6d5643c621c3"> <a href="/versions/v16/techniques/T1213/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--cff94884-3b1c-4987-a70b-6d5643c621c3" title="T1213.003">Code Repositories</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bbfbb096-6561-4d7d-aa2c-a5ee8e44c696"> <a href="/versions/v16/techniques/T1213/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bbfbb096-6561-4d7d-aa2c-a5ee8e44c696" title="T1213.004">Customer Relationship Management Software</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--fb75213f-cfb0-40bf-a02f-3bad93d6601e"> <a href="/versions/v16/techniques/T1213/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--fb75213f-cfb0-40bf-a02f-3bad93d6601e" title="T1213.005">Messaging Applications</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3c4a2599-71ee-4405-ba1e-0e28414b4bc5"> <a href="/versions/v16/techniques/T1005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--3c4a2599-71ee-4405-ba1e-0e28414b4bc5" title="T1005">Data from Local System</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ae676644-d2d2-41b7-af7e-9bed1b55898c"> <a href="/versions/v16/techniques/T1039" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--ae676644-d2d2-41b7-af7e-9bed1b55898c" title="T1039">Data from Network Shared Drive</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1b7ba276-eedc-4951-a762-0ceea2c030ec"> <a href="/versions/v16/techniques/T1025" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1b7ba276-eedc-4951-a762-0ceea2c030ec" title="T1025">Data from Removable Media</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e"> <a href="/versions/v16/techniques/T1074" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e" title="T1074">Data Staged <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7dd95ff6-712e-4056-9626-312ea4ab4c5e"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1c34f7aa-9341-4a48-bfab-af22e51aca6c"> <a href="/versions/v16/techniques/T1074/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1c34f7aa-9341-4a48-bfab-af22e51aca6c" title="T1074.001">Local Data Staging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--359b00ad-9425-420b-bba5-6de8d600cbc0"> <a href="/versions/v16/techniques/T1074/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--359b00ad-9425-420b-bba5-6de8d600cbc0" title="T1074.002">Remote Data Staging</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f"> <a href="/versions/v16/techniques/T1114" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f" title="T1114">Email Collection <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1608f3e1-598a-42f4-a01a-2e252e81728f"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1e9eb839-294b-48cc-b0d3-c45555a2a004"> <a href="/versions/v16/techniques/T1114/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--1e9eb839-294b-48cc-b0d3-c45555a2a004" title="T1114.001">Local Email Collection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--b4694861-542c-48ea-9eb1-10d356e7140a"> <a href="/versions/v16/techniques/T1114/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--b4694861-542c-48ea-9eb1-10d356e7140a" title="T1114.002">Remote Email Collection</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7d77a07d-02fe-4e88-8bd9-e9c008c01bf0"> <a href="/versions/v16/techniques/T1114/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--7d77a07d-02fe-4e88-8bd9-e9c008c01bf0" title="T1114.003">Email Forwarding Rule</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" onclick="toggleMatrixSubTechniques('x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe', 'attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <a href="/versions/v16/techniques/T1056" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2" title="T1056">Input Capture <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--bb5a00de-e086-4859-a231-fa793f6797e2"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4"> <a href="/versions/v16/techniques/T1056/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--09a60ea3-a8d1-4ae5-976e-5783248b72a4" title="T1056.001">Keylogging</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d"> <a href="/versions/v16/techniques/T1056/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--a2029942-0a85-4947-b23c-ca434698171d" title="T1056.002">GUI Input Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e"> <a href="/versions/v16/techniques/T1056/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--69e5226d-05dc-4f15-95d7-44f5ed78d06e" title="T1056.003">Web Portal Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6"> <a href="/versions/v16/techniques/T1056/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--f5946b5e-9408-485f-a7f7-b5efc88909b6" title="T1056.004">Credential API Hooking</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0259baeb-9f63-4c69-bf10-eb038c390688"> <a href="/versions/v16/techniques/T1113" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--0259baeb-9f63-4c69-bf10-eb038c390688" title="T1113">Screen Capture</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--6faf650d-bf31-4eb4-802d-1000cf38efaf"> <a href="/versions/v16/techniques/T1125" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--d108ce10-2419-4cf9-a774-46161d6c6cfe--attack-pattern--6faf650d-bf31-4eb4-802d-1000cf38efaf" title="T1125">Video Capture</a> </div> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6"> <a href="/versions/v16/techniques/T1071" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6" title="T1071">Application Layer Protocol <sub>(5)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--355be19c-ffc9-46d5-8d50-d6a036c675b6"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161"> <a href="/versions/v16/techniques/T1071/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--df8b2a25-8bdf-4856-953c-a04372b1c161" title="T1071.001">Web Protocols</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9a60a291-8960-4387-8a4a-2ab5c18bb50b"> <a href="/versions/v16/techniques/T1071/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9a60a291-8960-4387-8a4a-2ab5c18bb50b" title="T1071.002">File Transfer Protocols</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--54b4c251-1f0e-4eba-ba6b-dbc7a6f6f06b"> <a href="/versions/v16/techniques/T1071/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--54b4c251-1f0e-4eba-ba6b-dbc7a6f6f06b" title="T1071.003">Mail Protocols</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--1996eef1-ced3-4d7f-bf94-33298cabbf72"> <a href="/versions/v16/techniques/T1071/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--1996eef1-ced3-4d7f-bf94-33298cabbf72" title="T1071.004">DNS</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--241f9ea8-f6ae-4f38-92f5-cef5b7e539dd"> <a href="/versions/v16/techniques/T1071/005" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--241f9ea8-f6ae-4f38-92f5-cef5b7e539dd" title="T1071.005">Publish/Subscribe Protocols</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--64196062-5210-42c3-9a02-563a0d1797ef"> <a href="/versions/v16/techniques/T1092" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--64196062-5210-42c3-9a02-563a0d1797ef" title="T1092">Communication Through Removable Media</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c"> <a href="/versions/v16/techniques/T1659" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--43c9bc06-715b-42db-972f-52d25c09a20c" title="T1659">Content Injection</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f"> <a href="/versions/v16/techniques/T1132" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f" title="T1132">Data Encoding <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--04fd5427-79c7-44ea-ae13-11b24778ff1c"> <a href="/versions/v16/techniques/T1132/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--04fd5427-79c7-44ea-ae13-11b24778ff1c" title="T1132.001">Standard Encoding</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--d467bc38-284b-4a00-96ac-125f447799fc"> <a href="/versions/v16/techniques/T1132/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--d467bc38-284b-4a00-96ac-125f447799fc" title="T1132.002">Non-Standard Encoding</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842"> <a href="/versions/v16/techniques/T1001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842" title="T1001">Data Obfuscation <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ad255bfe-a9e6-4b52-a258-8d3462abe842"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7c0689c-4dbd-489b-81be-7cb7c7079ade"> <a href="/versions/v16/techniques/T1001/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7c0689c-4dbd-489b-81be-7cb7c7079ade" title="T1001.001">Junk Data</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eec23884-3fa1-4d8a-ac50-6f104d51e235"> <a href="/versions/v16/techniques/T1001/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eec23884-3fa1-4d8a-ac50-6f104d51e235" title="T1001.002">Steganography</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c325b232-d5bc-4dde-a3ec-71f3db9e8adc"> <a href="/versions/v16/techniques/T1001/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c325b232-d5bc-4dde-a3ec-71f3db9e8adc" title="T1001.003">Protocol or Service Impersonation</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b"> <a href="/versions/v16/techniques/T1568" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b" title="T1568">Dynamic Resolution <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--7bd9c723-2f78-4309-82c5-47cad406572b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--29ba5a15-3b7b-4732-b817-65ea8f6468e6"> <a href="/versions/v16/techniques/T1568/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--29ba5a15-3b7b-4732-b817-65ea8f6468e6" title="T1568.001">Fast Flux DNS</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--118f61a5-eb3e-4fb6-931f-2096647f4ecd"> <a href="/versions/v16/techniques/T1568/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--118f61a5-eb3e-4fb6-931f-2096647f4ecd" title="T1568.002">Domain Generation Algorithms</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--83a766f8-1501-4b3a-a2de-2e2849e8dfc1"> <a href="/versions/v16/techniques/T1568/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--83a766f8-1501-4b3a-a2de-2e2849e8dfc1" title="T1568.003">DNS Calculation</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118"> <a href="/versions/v16/techniques/T1573" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118" title="T1573">Encrypted Channel <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b8902400-e6c5-4ba2-95aa-2d35b442b118"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--24bfaeba-cb0d-4525-b3dc-507c77ecec41"> <a href="/versions/v16/techniques/T1573/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--24bfaeba-cb0d-4525-b3dc-507c77ecec41" title="T1573.001">Symmetric Cryptography</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--bf176076-b789-408e-8cba-7275e81c0ada"> <a href="/versions/v16/techniques/T1573/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--bf176076-b789-408e-8cba-7275e81c0ada" title="T1573.002">Asymmetric Cryptography</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f24faf46-3b26-4dbb-98f2-63460498e433"> <a href="/versions/v16/techniques/T1008" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f24faf46-3b26-4dbb-98f2-63460498e433" title="T1008">Fallback Channels</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eb897572-8979-4242-a089-56f294f4c91d"> <a href="/versions/v16/techniques/T1665" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--eb897572-8979-4242-a089-56f294f4c91d" title="T1665">Hide Infrastructure</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--e6919abc-99f9-4c6c-95a5-14761e7b2add"> <a href="/versions/v16/techniques/T1105" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--e6919abc-99f9-4c6c-95a5-14761e7b2add" title="T1105">Ingress Tool Transfer</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--84e02621-8fdf-470f-bd58-993bb6a89d91"> <a href="/versions/v16/techniques/T1104" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--84e02621-8fdf-470f-bd58-993bb6a89d91" title="T1104">Multi-Stage Channels</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c21d5a77-d422-4a69-acd7-2c53c1faa34b"> <a href="/versions/v16/techniques/T1095" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--c21d5a77-d422-4a69-acd7-2c53c1faa34b" title="T1095">Non-Application Layer Protocol</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b18eae87-b469-4e14-b454-b171b416bc18"> <a href="/versions/v16/techniques/T1571" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--b18eae87-b469-4e14-b454-b171b416bc18" title="T1571">Non-Standard Port</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4fe28b27-b13c-453e-a386-c2ef362a573b"> <a href="/versions/v16/techniques/T1572" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4fe28b27-b13c-453e-a386-c2ef362a573b" title="T1572">Protocol Tunneling</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea"> <a href="/versions/v16/techniques/T1090" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea" title="T1090">Proxy <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--731f4f55-b6d0-41d1-a7a9-072a66389aea"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f6dacc85-b37d-458e-b58d-74fc4bbf5755"> <a href="/versions/v16/techniques/T1090/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f6dacc85-b37d-458e-b58d-74fc4bbf5755" title="T1090.001">Internal Proxy</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--69b8fd78-40e8-4600-ae4d-662c9d7afdb3"> <a href="/versions/v16/techniques/T1090/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--69b8fd78-40e8-4600-ae4d-662c9d7afdb3" title="T1090.002">External Proxy</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--a782ebe2-daba-42c7-bc82-e8e9d923162d"> <a href="/versions/v16/techniques/T1090/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--a782ebe2-daba-42c7-bc82-e8e9d923162d" title="T1090.003">Multi-hop Proxy</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ca9d3402-ada3-484d-876a-d717bd6e05f2"> <a href="/versions/v16/techniques/T1090/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--ca9d3402-ada3-484d-876a-d717bd6e05f2" title="T1090.004">Domain Fronting</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4061e78c-1284-44b4-9116-73e4ac3912f7"> <a href="/versions/v16/techniques/T1219" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--4061e78c-1284-44b4-9116-73e4ac3912f7" title="T1219">Remote Access Software</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--451a9977-d255-43c9-b431-66de80130c8c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <a href="/versions/v16/techniques/T1205" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c" title="T1205">Traffic Signaling <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--451a9977-d255-43c9-b431-66de80130c8c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd"> <a href="/versions/v16/techniques/T1205/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--8868cb5b-d575-4a60-acb2-07d37389a2fd" title="T1205.001">Port Knocking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520"> <a href="/versions/v16/techniques/T1205/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--005cc321-08ce-4d17-b1ea-cb5275926520" title="T1205.002">Socket Filters</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665" onclick="toggleMatrixSubTechniques('x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813', 'attack-pattern--830c9528-df21-472c-8c14-a036bf17d665');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665"> <a href="/versions/v16/techniques/T1102" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665" title="T1102">Web Service <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--830c9528-df21-472c-8c14-a036bf17d665"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7827069-0bf2-4764-af4f-23fae0d181b7"> <a href="/versions/v16/techniques/T1102/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--f7827069-0bf2-4764-af4f-23fae0d181b7" title="T1102.001">Dead Drop Resolver</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--be055942-6e63-49d7-9fa1-9cb7d8a8f3f4"> <a href="/versions/v16/techniques/T1102/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--be055942-6e63-49d7-9fa1-9cb7d8a8f3f4" title="T1102.002">Bidirectional Communication</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9c99724c-a483-4d60-ad9d-7f004e42e8e8"> <a href="/versions/v16/techniques/T1102/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--f72804c5-f15a-449e-a5da-2eecd181f813--attack-pattern--9c99724c-a483-4d60-ad9d-7f004e42e8e8" title="T1102.003">One-Way Communication</a> </div> </div> </td> </tr> </table> </td> <td class="tactic">  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9"> <a href="/versions/v16/techniques/T1020" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9" title="T1020">Automated Exfiltration <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--774a3188-6ba9-4dc4-879d-d54ee48a5ce9"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--7c46b364-8496-4234-8a56-f7e6727e21e1"> <a href="/versions/v16/techniques/T1020/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--7c46b364-8496-4234-8a56-f7e6727e21e1" title="T1020.001">Traffic Duplication</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--c3888c54-775d-4b2f-b759-75a2ececcbfd"> <a href="/versions/v16/techniques/T1030" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--c3888c54-775d-4b2f-b759-75a2ececcbfd" title="T1030">Data Transfer Size Limits</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776"> <a href="/versions/v16/techniques/T1048" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776" title="T1048">Exfiltration Over Alternative Protocol <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a19e86f8-1c0a-4fea-8407-23b73d615776"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--79a4052e-1a89-4b09-aea6-51f1d11fe19c"> <a href="/versions/v16/techniques/T1048/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--79a4052e-1a89-4b09-aea6-51f1d11fe19c" title="T1048.001">Exfiltration Over Symmetric Encrypted Non-C2 Protocol</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--8e350c1d-ac79-4b5c-bd4e-7476d7e84ec5"> <a href="/versions/v16/techniques/T1048/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--8e350c1d-ac79-4b5c-bd4e-7476d7e84ec5" title="T1048.002">Exfiltration Over Asymmetric Encrypted Non-C2 Protocol</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--fb8d023d-45be-47e9-bc51-f56bcae6435b"> <a href="/versions/v16/techniques/T1048/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--fb8d023d-45be-47e9-bc51-f56bcae6435b" title="T1048.003">Exfiltration Over Unencrypted Non-C2 Protocol</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--92d7da27-2d91-488e-a00c-059dc162766d"> <a href="/versions/v16/techniques/T1041" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--92d7da27-2d91-488e-a00c-059dc162766d" title="T1041">Exfiltration Over C2 Channel</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87"> <a href="/versions/v16/techniques/T1011" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87" title="T1011">Exfiltration Over Other Network Medium <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--51ea26b1-ff1e-4faa-b1a0-1114cd298c87"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--613d08bc-e8f4-4791-80b0-c8b974340dfd"> <a href="/versions/v16/techniques/T1011/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--613d08bc-e8f4-4791-80b0-c8b974340dfd" title="T1011.001">Exfiltration Over Bluetooth</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549"> <a href="/versions/v16/techniques/T1052" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549" title="T1052">Exfiltration Over Physical Medium <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--e6415f09-df0e-48de-9aba-928c902b7549"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a3e1e6c5-9c74-4fc0-a16c-a9d228c17829"> <a href="/versions/v16/techniques/T1052/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--a3e1e6c5-9c74-4fc0-a16c-a9d228c17829" title="T1052.001">Exfiltration over USB</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807" onclick="toggleMatrixSubTechniques('x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462', 'attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807"> <a href="/versions/v16/techniques/T1567" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807" title="T1567">Exfiltration Over Web Service <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--40597f16-0963-4249-bf4c-ac93b7fb9807"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--86a96bf6-cf8b-411c-aaeb-8959944d64f7"> <a href="/versions/v16/techniques/T1567/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--86a96bf6-cf8b-411c-aaeb-8959944d64f7" title="T1567.001">Exfiltration to Code Repository</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--bf1b6176-597c-4600-bfcd-ac989670f96b"> <a href="/versions/v16/techniques/T1567/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--bf1b6176-597c-4600-bfcd-ac989670f96b" title="T1567.002">Exfiltration to Cloud Storage</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--ba04e672-da86-4e69-aa15-0eca5db25f43"> <a href="/versions/v16/techniques/T1567/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--ba04e672-da86-4e69-aa15-0eca5db25f43" title="T1567.003">Exfiltration to Text Storage Sites</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--43f2776f-b4bd-4118-94b8-fee47e69676d"> <a href="/versions/v16/techniques/T1567/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--43f2776f-b4bd-4118-94b8-fee47e69676d" title="T1567.004">Exfiltration Over Webhook</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--4eeaf8a9-c86b-4954-a663-9555fb406466"> <a href="/versions/v16/techniques/T1029" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--4eeaf8a9-c86b-4954-a663-9555fb406466" title="T1029">Scheduled Transfer</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--d4bdbdea-eaec-4071-b4f9-5105e12ea4b6"> <a href="/versions/v16/techniques/T1537" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--9a4e74ab-5008-408c-84bf-a10dfbc53462--attack-pattern--d4bdbdea-eaec-4071-b4f9-5105e12ea4b6" title="T1537">Transfer Data to Cloud Account</a> </div> </td> <td class="tactic"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b24e2a20-3b3d-4bf0-823b-1ed765398fb0"> <a href="/versions/v16/techniques/T1531" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b24e2a20-3b3d-4bf0-823b-1ed765398fb0" title="T1531">Account Access Removal</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c"> <a href="/versions/v16/techniques/T1485" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c" title="T1485">Data Destruction <sub>(1)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1001e0d6-ee09-4dfc-aa90-e9320ffc8fe4"> <a href="/versions/v16/techniques/T1485/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1001e0d6-ee09-4dfc-aa90-e9320ffc8fe4" title="T1485.001">Lifecycle-Triggered Deletion</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b80d107d-fa0d-4b60-9684-b0433e8bdba0"> <a href="/versions/v16/techniques/T1486" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--b80d107d-fa0d-4b60-9684-b0433e8bdba0" title="T1486">Data Encrypted for Impact</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931"> <a href="/versions/v16/techniques/T1565" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931" title="T1565">Data Manipulation <sub>(3)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ac9e6b22-11bf-45d7-9181-c1cb08360931"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1cfcb312-b8d7-47a4-b560-4b16cc677292"> <a href="/versions/v16/techniques/T1565/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1cfcb312-b8d7-47a4-b560-4b16cc677292" title="T1565.001">Stored Data Manipulation</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d0613359-5781-4fd2-b5be-c269270be1f6"> <a href="/versions/v16/techniques/T1565/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d0613359-5781-4fd2-b5be-c269270be1f6" title="T1565.002">Transmitted Data Manipulation</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--32ad5c86-2bcf-47d8-8fdc-d7f3d79a7490"> <a href="/versions/v16/techniques/T1565/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--32ad5c86-2bcf-47d8-8fdc-d7f3d79a7490" title="T1565.003">Runtime Data Manipulation</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b"> <a href="/versions/v16/techniques/T1491" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b" title="T1491">Defacement <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--5909f20f-3c39-4795-be06-ef1ea40d350b"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--8c41090b-aa47-4331-986b-8c9a51a91103"> <a href="/versions/v16/techniques/T1491/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--8c41090b-aa47-4331-986b-8c9a51a91103" title="T1491.001">Internal Defacement</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0cfe31a7-81fc-472c-bc45-e2808d1066a3"> <a href="/versions/v16/techniques/T1491/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0cfe31a7-81fc-472c-bc45-e2808d1066a3" title="T1491.002">External Defacement</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967"> <a href="/versions/v16/techniques/T1561" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967" title="T1561">Disk Wipe <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--1988cc35-ced8-4dad-b2d1-7628488fa967"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--fb640c43-aa6b-431e-a961-a279010424ac"> <a href="/versions/v16/techniques/T1561/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--fb640c43-aa6b-431e-a961-a279010424ac" title="T1561.001">Disk Content Wipe</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0af0ca99-357d-4ba1-805f-674fdfb7bef9"> <a href="/versions/v16/techniques/T1561/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0af0ca99-357d-4ba1-805f-674fdfb7bef9" title="T1561.002">Disk Structure Wipe</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4"> <a href="/versions/v16/techniques/T1499" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4" title="T1499">Endpoint Denial of Service <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--c675646d-e204-4aa8-978d-e3d6d65885c4"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0df05477-c572-4ed6-88a9-47c581f548f7"> <a href="/versions/v16/techniques/T1499/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0df05477-c572-4ed6-88a9-47c581f548f7" title="T1499.001">OS Exhaustion Flood</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--38eb0c22-6caf-46ce-8869-5964bd735858"> <a href="/versions/v16/techniques/T1499/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--38eb0c22-6caf-46ce-8869-5964bd735858" title="T1499.002">Service Exhaustion Flood</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--18cffc21-3260-437e-80e4-4ab8bf2ba5e9"> <a href="/versions/v16/techniques/T1499/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--18cffc21-3260-437e-80e4-4ab8bf2ba5e9" title="T1499.003">Application Exhaustion Flood</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--2bee5ffb-7a7a-4119-b1f2-158151b19ac0"> <a href="/versions/v16/techniques/T1499/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--2bee5ffb-7a7a-4119-b1f2-158151b19ac0" title="T1499.004">Application or System Exploitation</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--851e071f-208d-4c79-adc6-5974c85c78f3"> <a href="/versions/v16/techniques/T1657" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--851e071f-208d-4c79-adc6-5974c85c78f3" title="T1657">Financial Theft</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5bb433e-bdf6-4781-84bc-35e97e43be89"> <a href="/versions/v16/techniques/T1495" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5bb433e-bdf6-4781-84bc-35e97e43be89" title="T1495">Firmware Corruption</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a"> <a href="/versions/v16/techniques/T1490" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a" title="T1490">Inhibit System Recovery</a> </div>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab"> <a href="/versions/v16/techniques/T1498" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab" title="T1498">Network Denial of Service <sub>(2)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--d74c4a7e-ffbf-432f-9365-7ebf1f787cab"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0bda01d5-4c1d-4062-8ee2-6872334383c3"> <a href="/versions/v16/techniques/T1498/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--0bda01d5-4c1d-4062-8ee2-6872334383c3" title="T1498.001">Direct Network Flood</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--36b2a1d7-e09e-49bf-b45e-477076c2ec01"> <a href="/versions/v16/techniques/T1498/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--36b2a1d7-e09e-49bf-b45e-477076c2ec01" title="T1498.002">Reflection Amplification</a> </div> </div> </td> </tr> </table>  <table class="supertechnique"> <tr> <td class="sidebar technique sidebar--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783" onclick="toggleMatrixSubTechniques('x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8', 'attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783');"> <div class="handle"> = </div> </td> <td class="technique"> <div class="technique-cell supertechniquecell" id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783"> <a href="/versions/v16/techniques/T1496" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783" title="T1496">Resource Hijacking <sub>(4)</sub></a> </div> </td> </tr> <tr class="subtechniques-row hidden subtechniques-container subtechniques--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--cd25c1b4-935c-4f0e-ba8d-552f28bc4783"> <td class="sidebar subtechniques"> <svg width="12px" height="12px"> <path d="M0 0H12V12Z"/> </svg> </td> <td class="subtechniques"> <div class="subtechniques"> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--a718a0c8-5768-41a1-9958-a1cc3f995e99"> <a href="/versions/v16/techniques/T1496/001" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--a718a0c8-5768-41a1-9958-a1cc3f995e99" title="T1496.001">Compute Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--718cb208-6446-4572-a2f0-9c799c60091e"> <a href="/versions/v16/techniques/T1496/002" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--718cb208-6446-4572-a2f0-9c799c60091e" title="T1496.002">Bandwidth Hijacking</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--130d4494-b2d6-4040-bcea-6e59f05222fe"> <a href="/versions/v16/techniques/T1496/003" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--130d4494-b2d6-4040-bcea-6e59f05222fe" title="T1496.003">SMS Pumping</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--924d273c-be0d-4d8d-af58-2dddb15ef1e2"> <a href="/versions/v16/techniques/T1496/004" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--924d273c-be0d-4d8d-af58-2dddb15ef1e2" title="T1496.004">Cloud Service Hijacking</a> </div> </div> </td> </tr> </table> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--20fb2507-d71c-455d-9b6d-6104461cf26b"> <a href="/versions/v16/techniques/T1489" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--20fb2507-d71c-455d-9b6d-6104461cf26b" title="T1489">Service Stop</a> </div> <div class="technique-cell " id="technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ff73aa03-0090-4464-83ac-f89e233c02bc"> <a href="/versions/v16/techniques/T1529" data-toggle="tooltip" data-placement="top" data-animation="false" data-container="#technique-cell--x-mitre-tactic--5569339b-94c2-49ee-afb3-2222936582c8--attack-pattern--ff73aa03-0090-4464-83ac-f89e233c02bc" title="T1529">System Shutdown/Reboot</a> </div> </td> </tr> </tbody> </table> </div> <div class="scroll-indicator right"> <div class="cover"></div> </div> </div>  </div> </div> </div> </div> </div> </div>    <div class="overlay search" id="search-overlay" style="display: none;"> <div class="overlay-inner">  <div class="search-header"> <div class="search-input"> <input type="text" id="search-input" placeholder="search"> </div> <div class="search-icons"> <div class="search-parsing-icon spinner-border" style="display: none" id="search-parsing-icon"></div> <div class="close-search-icon" id="close-search-icon">×</div> </div> </div>  <div id="search-body" class="search-body"> <div class="results" id="search-results">  </div> <div id="load-more-results" class="load-more-results"> <button class="btn btn-default" id="load-more-results-button">load more results</button> </div> </div> </div> </div> </div> <div class="row flex-grow-0 flex-shrink-1">  <footer class="col footer"> <div class="container-fluid"> <div class="row row-footer"> <div class="col-2 col-sm-2 col-md-2"> <div class="footer-center-responsive my-auto"> <a href="https://www.mitre.org" target="_blank" rel="noopener" aria-label="MITRE"> <img src="/versions/v16/theme/images/mitrelogowhiteontrans.gif" class="mitre-logo-wtrans"> </a> </div> </div> <div class="col-2 col-sm-2 footer-responsive-break"></div> <div class="footer-link-group"> <div class="row row-footer"> <div class="px-3 col-footer"> <u class="footer-link"><a href="/versions/v16/resources/engage-with-attack/contact" class="footer-link">Contact Us</a></u> </div> <div class="px-3 col-footer"> <u class="footer-link"><a href="/versions/v16/resources/legal-and-branding/terms-of-use" class="footer-link">Terms of Use</a></u> </div> <div class="px-3 col-footer"> <u class="footer-link"><a href="/versions/v16/resources/legal-and-branding/privacy" class="footer-link">Privacy Policy</a></u> </div> <div class="px-3"> <u class="footer-link"><a href="/versions/v16/resources/changelog.html" class="footer-link" data-toggle="tooltip" data-placement="top" data-html="true" title="ATT&CK content v16.1Website v4.2.1">Website Changelog</a></u> </div> </div> <div class="row"> <small class="px-3"> © 2015 - 2024, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation. </small> </div> </div> <div class="w-100 p-2 footer-responsive-break"></div> <div class="col pr-4"> <div class="footer-float-right-responsive-brand"> <div class="row row-footer row-footer-icon"> <div class="mb-1"> <a href="https://twitter.com/MITREattack" class="btn btn-footer"> <i class="fa-brands fa-x-twitter fa-lg"></i> </a> <a href="https://github.com/mitre-attack" class="btn btn-footer"> <i class="fa-brands fa-github fa-lg"></i> </a> </div> </div> </div> </div> </div> </div> </div> </footer> </div> </div>  </div>   <script src="/versions/v16/theme/scripts/jquery-3.5.1.min.js"></script> <script src="/versions/v16/theme/scripts/popper.min.js"></script> <script src="/versions/v16/theme/scripts/bootstrap-select.min.js"></script> <script src="/versions/v16/theme/scripts/bootstrap.bundle.min.js"></script> <script src="/versions/v16/theme/scripts/site.js"></script> <script src="/versions/v16/theme/scripts/settings.js"></script> <script src="/versions/v16/theme/scripts/search_bundle.js"></script> <script src="/versions/v16/theme/scripts/matrix.js"></script> <script src="/versions/v16/theme/scripts/bootstrap-tourist.js"></script> <script src="/versions/v16/theme/scripts/settings.js"></script> <script src="/versions/v16/theme/scripts/tour/tour-introduction.js"></script> <script src="/versions/v16/theme/scripts/random_page.js"></script> </body> </html>

CINXE.COM

MITRE ATT&CK®