Techniques
34 techniques T1078 Valid Accounts T1190 Exploit Public-Facing Application T1199 Trusted Relationship T1566 Phishing T1566.001 Phishing: Spearphishing Attachment T1059 Command and Scripting Interpreter T1059.005 Command and Scripting Interpreter: Visual Basic T1204.002 User Execution: Malicious File T1053 Scheduled Task/Job T1098 Account Manipulation T1505.003 Server Software Component: Web Shell T1543.003 Create or Modify System Process: Windows Service T1547.001 Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder T1548.002 Abuse Elevation Control Mechanism: Bypass UAC T1027 Obfuscated Files or Information T1027.002 Obfuscated Files or Information: Software Packing T1027.011 Obfuscated Files or Information: Fileless Storage T1027.013 Obfuscated Files or Information: Encrypted/Encoded File T1070 Indicator Removal T1562.001 Impair Defenses: Disable or Modify Tools T1003 OS Credential Dumping T1046 Network Service Discovery T1083 File and Directory Discovery T1021.001 Remote Services: Remote Desktop Protocol T1021.002 Remote Services: SMB/Windows Admin Shares T1005 Data from Local System T1560 Archive Collected Data T1041 Exfiltration Over C2 Channel T1567.002 Exfiltration Over Web Service: Exfiltration to Cloud Storage T1071.001 Application Layer Protocol: Web Protocols T1486 Data Encrypted for Impact T1490 Inhibit System Recovery T1588.002 Obtain Capabilities: Tool T1595 Active Scanning
