Detections
Analytics

Attack Path Techniques Search

IDNamePlatformFamilyFramework
T0814_ICSDenial of ServiceOTInhibit Response FunctionMITRE ATT&CK
T0888Remote System Information DiscoveryDiscoveryMITRE ATT&CK
T0812_ICSDefault CredentialsOTLateral MovementMITRE ATT&CK
T0820_ICSExploitation for EvasionOTEvasionMITRE ATT&CK
T0891_ICSHardcoded CredentialsOTLateral Movement, PersistenceMITRE ATT&CK
T0801Monitor Process StateCollectionMITRE ATT&CK
T0816Device Restart/ShutdownInhibit Response FunctionMITRE ATT&CK
T0881Service StopInhibit Response FunctionMITRE ATT&CK
T0846_ICSRemote System DiscoveryOTDiscoveryMITRE ATT&CK
T0845_ICSProgram UploadOTCollectionMITRE ATT&CK
T0820Exploitation for EvasionEvasionMITRE ATT&CK
T0866Exploitation of Remote ServicesInitial Access, Lateral MovementMITRE ATT&CK
T0843Program DownloadLateral MovementMITRE ATT&CK
T0845Program UploadCollectionMITRE ATT&CK
T0822External Remote ServicesInitial AccessMITRE ATT&CK
T0843_ICSProgram DownloadOTLateral MovementMITRE ATT&CK
T0866_ICSExploitation of Remote ServicesOTInitial Access, Lateral MovementMITRE ATT&CK
T0814Denial of ServiceInhibit Response FunctionMITRE ATT&CK
T0839Module FirmwarePersistence, Impair Process ControlMITRE ATT&CK
T0861Point & Tag IdentificationCollectionMITRE ATT&CK
T0812Default CredentialsLateral MovementMITRE ATT&CK
T0891Hardcoded CredentialsLateral Movement, PersistenceMITRE ATT&CK
T0821Modify Controller TaskingExecutionMITRE ATT&CK
T0835Manipulate I/O ImageInhibit Response FunctionMITRE ATT&CK
T0857System FirmwarePersistence, Inhibit Response FunctionMITRE ATT&CK
T0873Project File InfectionPersistenceMITRE ATT&CK
T0889Modify ProgramPersistenceMITRE ATT&CK
T0840Network Connection EnumerationDiscoveryMITRE ATT&CK
T0846Remote System DiscoveryDiscoveryMITRE ATT&CK
T0855Unauthorized Command MessageImpair Process ControlMITRE ATT&CK
1078.001Valid Accounts: Default AccountsAzure AD, Containers, Google Workspace, IaaS, Linux, Office 365, SaaS, Windows, macOSDefense Evasion, Persistence, Privilege Escalation, Initial AccessMITRE ATT&CK
T0873_ICSProject File InfectionOTPersistenceMITRE ATT&CK
T1040Network SniffingCredential Access, DiscoveryMITRE ATT&CK
T1048.002_WindowsExfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non-C2 Protocol (Windows)WindowsExfiltrationMITRE ATT&CK
T1048.003_WindowsExfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol (Windows)WindowsExfiltrationMITRE ATT&CK
T1059.005_WindowsCommand and Scripting Interpreter: Visual BasicWindowsExecutionMITRE ATT&CK
T1210_WindowsExploitation of Remote Services (Windows)WindowsLateral MovementMITRE ATT&CK
T1547.005Security Support ProviderPersistence, Privilege EscalationMITRE ATT&CK
T1552.005Cloud Instance Metadata APICredential AccessMITRE ATT&CK
T1606.002SAML TokensCredential AccessMITRE ATT&CK
T1203Exploitation for Client ExecutionExecutionMITRE ATT&CK
T1190_AwsExploit Public-Facing Application (Aws)AwsInitial Access, PersistenceMITRE ATT&CK
T1082System Information DiscoveryDiscoveryMITRE ATT&CK
T1528_AWSSteal Application Access Token (AWS)AWSCollectionMITRE ATT&CK
T1087.004_AWSAccount Discovery: Cloud Account (AWS)AWSDiscoveryMITRE ATT&CK
T1204.002_AWSUser Execution: Malicious File (AWS)AWSExecutionMITRE ATT&CK
T1619_AWSCloud Storage Object Discovery(AWS)AWSDiscoveryMITRE ATT&CK
T1528Steal Application Access TokenCollectionMITRE ATT&CK
T1550.001_WindowsMaterial: Application Access TokenWindowsLateral Movement, Defense EvasionMITRE ATT&CK
T1133_AWSExternal Remote ServicesWindowsInitial Access, PersistenceMITRE ATT&CK