mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
find/replace Related ATT&CK Technique(s) to singular
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0001**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Debugger Detection
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0004**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Emulator Detection
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0007**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Sandbox Detection
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0009**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|[Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497/)|
|
||||
|**Related ATT&CK Technique**|[Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497/)|
|
||||
|
||||
|
||||
Virtual Machine Detection
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0036**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
Capture Evasion
|
||||
===============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0002**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Debugger Evasion
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0003**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
Dynamic Analysis Evasion
|
||||
========================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0005**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
Emulator Evasion
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0006**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
Memory Dump Evasion
|
||||
===================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1480**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis), [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Execution Guardrails](https://attack.mitre.org/techniques/T1480/)|
|
||||
|**Related ATT&CK Technique**|[Execution Guardrails](https://attack.mitre.org/techniques/T1480/)|
|
||||
|
||||
Execution Guardrails
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0010**|
|
||||
|**Objective(s)**| [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Call Graph Generation Evasion
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0012**|
|
||||
|**Objective(s)**| [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Disassembler Evasion
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0032**|
|
||||
|**Objective(s)**| [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Executable Code Obfuscation
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0034**|
|
||||
|**Objective(s)**| [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Executable Code Optimization
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0008**|
|
||||
|**Objective(s)**| [Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis), [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Executable Code Virtualization
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1045**|
|
||||
|**Objective(s)**|[Anti-Behavioral Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-behavioral-analysis), [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis), [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Software Packing](https://attack.mitre.org/techniques/T1045/)|
|
||||
|**Related ATT&CK Technique**|[Software Packing](https://attack.mitre.org/techniques/T1045/)|
|
||||
|
||||
Software Packing
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1433**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Access Call Log](https://attack.mitre.org/techniques/T1433/)|
|
||||
|**Related ATT&CK Technique**|[Access Call Log](https://attack.mitre.org/techniques/T1433/)|
|
||||
|
||||
Access Call Log
|
||||
===============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1409**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection), [Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Access Sensitive Data or Credentials in Files](https://attack.mitre.org/techniques/T1409/)|
|
||||
|**Related ATT&CK Technique**|[Access Sensitive Data or Credentials in Files](https://attack.mitre.org/techniques/T1409/)|
|
||||
|
||||
Access Sensitive Data or Credentials in Files
|
||||
=============================================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1123**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Audio Capture](https://attack.mitre.org/techniques/T1123/)|
|
||||
|**Related ATT&CK Technique**|[Audio Capture](https://attack.mitre.org/techniques/T1123/)|
|
||||
|
||||
Audio Capture
|
||||
=============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1119**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Automated Collection](https://attack.mitre.org/techniques/T1119/)|
|
||||
|**Related ATT&CK Technique**|[Automated Collection](https://attack.mitre.org/techniques/T1119/)|
|
||||
|
||||
Automated Collection
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1412**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection), [Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Capture SMS Messages](https://attack.mitre.org/techniques/T1412/)|
|
||||
|**Related ATT&CK Technique**|[Capture SMS Messages](https://attack.mitre.org/techniques/T1412/)|
|
||||
|
||||
Capture SMS Messages
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1115**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Clipboard Data](https://attack.mitre.org/techniques/T1115/)|
|
||||
|**Related ATT&CK Technique**|[Clipboard Data](https://attack.mitre.org/techniques/T1115/)|
|
||||
|
||||
Clipboard Data
|
||||
==============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1005**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Data from Local System](https://attack.mitre.org/techniques/T1005/)|
|
||||
|**Related ATT&CK Technique**|[Data from Local System](https://attack.mitre.org/techniques/T1005/)|
|
||||
|
||||
Data from Local System
|
||||
======================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1039**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Data from Network Shared Drive](https://attack.mitre.org/techniques/T1039/)|
|
||||
|**Related ATT&CK Technique**|[Data from Network Shared Drive](https://attack.mitre.org/techniques/T1039/)|
|
||||
|
||||
Data from Network Shared Drive
|
||||
==============================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1025**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Data from Removable Media](https://attack.mitre.org/techniques/T1025/)|
|
||||
|**Related ATT&CK Technique**|[Data from Removable Media](https://attack.mitre.org/techniques/T1025/)|
|
||||
|
||||
Data from Removable Media
|
||||
=========================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1074**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Data Staged](https://attack.mitre.org/techniques/T1074/)|
|
||||
|**Related ATT&CK Technique**|[Data Staged](https://attack.mitre.org/techniques/T1074/)|
|
||||
|
||||
Data Staged
|
||||
===========
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1114**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Email Collection](https://attack.mitre.org/techniques/T1114/)|
|
||||
|**Related ATT&CK Technique**|[Email Collection](https://attack.mitre.org/techniques/T1114/)|
|
||||
|
||||
Email Collection
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1056**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection), [Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Input Capture](https://attack.mitre.org/techniques/T1056/)|
|
||||
|**Related ATT&CK Technique**|[Input Capture](https://attack.mitre.org/techniques/T1056/)|
|
||||
|
||||
Input Capture
|
||||
=============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1430**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Location Tracking](https://attack.mitre.org/techniques/T1430/)|
|
||||
|**Related ATT&CK Technique**|[Location Tracking](https://attack.mitre.org/techniques/T1430/)|
|
||||
|
||||
Location Tracking
|
||||
=================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1185**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Man in the Browser](https://attack.mitre.org/techniques/T1185/)|
|
||||
|**Related ATT&CK Technique**|[Man in the Browser](https://attack.mitre.org/techniques/T1185/)|
|
||||
|
||||
Man in the Browser
|
||||
==================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1429**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Microphone or Camera Recordings](https://attack.mitre.org/techniques/T1429/), [Capture Camera](https://attack.mitre.org/techniques/T1512/), [Capture Audio](https://attack.mitre.org/techniques/T1429/)|
|
||||
|**Related ATT&CK Technique**|[Microphone or Camera Recordings](https://attack.mitre.org/techniques/T1429/), [Capture Camera](https://attack.mitre.org/techniques/T1512/), [Capture Audio](https://attack.mitre.org/techniques/T1429/)|
|
||||
|
||||
Microphone or Camera Capture
|
||||
============================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1113**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Screen Capture](https://attack.mitre.org/techniques/T1113/)|
|
||||
|**Related ATT&CK Technique**|[Screen Capture](https://attack.mitre.org/techniques/T1113/)|
|
||||
|
||||
Screen Capture
|
||||
==============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1125**|
|
||||
|**Objective(s)**|[Collection](https://github.com/MBCProject/mbc-markdown/tree/master/collection)|
|
||||
|**Related ATT&CK Technique(s)**|[Video Capture](https://attack.mitre.org/techniques/T1125/)|
|
||||
|**Related ATT&CK Technique**|[Video Capture](https://attack.mitre.org/techniques/T1125/)|
|
||||
|
||||
Video Capture
|
||||
=============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0030**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
C2 Communication
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1043**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Commonly Used Port](https://attack.mitre.org/techniques/T1043/), [Commonly Used Port (Mobile)](https://attack.mitre.org/techniques/T1436/)|
|
||||
|**Related ATT&CK Technique**|[Commonly Used Port](https://attack.mitre.org/techniques/T1043/), [Commonly Used Port (Mobile)](https://attack.mitre.org/techniques/T1436/)|
|
||||
|
||||
Commonly Used Port
|
||||
==================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1090**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Connection Proxy](https://attack.mitre.org/techniques/T1090/)|
|
||||
|**Related ATT&CK Technique**|[Connection Proxy](https://attack.mitre.org/techniques/T1090/)|
|
||||
|
||||
Connection Proxy
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1094**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Custom Command and Control Protocol](https://attack.mitre.org/techniques/T1094/)|
|
||||
|**Related ATT&CK Technique**|[Custom Command and Control Protocol](https://attack.mitre.org/techniques/T1094/)|
|
||||
|
||||
Custom Command and Control Protocol
|
||||
===================================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1024**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Custom Cryptographic Protocol](https://attack.mitre.org/techniques/T1024/)|
|
||||
|**Related ATT&CK Technique**|[Custom Cryptographic Protocol](https://attack.mitre.org/techniques/T1024/)|
|
||||
|
||||
Custom Cryptographic Protocol
|
||||
=============================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1132**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Data Encoding](https://attack.mitre.org/techniques/T1132/)|
|
||||
|**Related ATT&CK Technique**|[Data Encoding](https://attack.mitre.org/techniques/T1132/)|
|
||||
|
||||
Data Encoding
|
||||
=============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1001**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Data Obfuscation](https://attack.mitre.org/techniques/T1001/)|
|
||||
|**Related ATT&CK Technique**|[Data Obfuscation](https://attack.mitre.org/techniques/T1001/)|
|
||||
|
||||
Data Obfuscation
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0031**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Domain Generation Algorithms](https://attack.mitre.org/techniques/T1483/)|
|
||||
|**Related ATT&CK Technique**|[Domain Generation Algorithms](https://attack.mitre.org/techniques/T1483/)|
|
||||
|
||||
Domain Name Generation
|
||||
======================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1008**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Fallback Channels](https://attack.mitre.org/techniques/T1008/)|
|
||||
|**Related ATT&CK Technique**|[Fallback Channels](https://attack.mitre.org/techniques/T1008/)|
|
||||
|
||||
Fallback Channels
|
||||
=================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1104**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Multi-Stage Channels](https://attack.mitre.org/techniques/T1104/)|
|
||||
|**Related ATT&CK Technique**|[Multi-Stage Channels](https://attack.mitre.org/techniques/T1104/)|
|
||||
|
||||
Multi-Stage Channels
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1188**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Multi-hop Proxy](https://attack.mitre.org/techniques/T1188/)|
|
||||
|**Related ATT&CK Technique**|[Multi-hop Proxy](https://attack.mitre.org/techniques/T1188/)|
|
||||
|
||||
Multi-hop Proxy
|
||||
===============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1205**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control), [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Port Knocking](https://attack.mitre.org/techniques/T1205/)|
|
||||
|**Related ATT&CK Technique**|[Port Knocking](https://attack.mitre.org/techniques/T1205/)|
|
||||
|
||||
Port Knocking
|
||||
=============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1219**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Remote Access Tools](https://attack.mitre.org/techniques/T1219/)|
|
||||
|**Related ATT&CK Technique**|[Remote Access Tools](https://attack.mitre.org/techniques/T1219/)|
|
||||
|
||||
Remote Access Tools
|
||||
===================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1105**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control), [Lateral Movement](https://github.com/MBCProject/mbc-markdown/tree/master/lateral-movement), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Remote File Copy](https://attack.mitre.org/techniques/T1105/)|
|
||||
|**Related ATT&CK Technique**|[Remote File Copy](https://attack.mitre.org/techniques/T1105/)|
|
||||
|
||||
Remote File Copy
|
||||
================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1071**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Standard Application Layer Protocol](https://attack.mitre.org/techniques/T1071/)|
|
||||
|**Related ATT&CK Technique**|[Standard Application Layer Protocol](https://attack.mitre.org/techniques/T1071/)|
|
||||
|
||||
Standard Application Layer Protocol
|
||||
===================================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1032**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Standard Cryptographic Protocol](https://attack.mitre.org/techniques/T1032/)|
|
||||
|**Related ATT&CK Technique**|[Standard Cryptographic Protocol](https://attack.mitre.org/techniques/T1032/)|
|
||||
|
||||
Standard Cryptographic Protocol
|
||||
===============================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1095**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Standard Non-Application Layer Protocol](https://attack.mitre.org/techniques/T1095/)|
|
||||
|**Related ATT&CK Technique**|[Standard Non-Application Layer Protocol](https://attack.mitre.org/techniques/T1095/)|
|
||||
|
||||
Standard Non-Application Layer Protocol
|
||||
=======================================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1065**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control)|
|
||||
|**Related ATT&CK Technique(s)**|[Uncommonly Used Port](https://attack.mitre.org/techniques/T1065/)|
|
||||
|**Related ATT&CK Technique**|[Uncommonly Used Port](https://attack.mitre.org/techniques/T1065/)|
|
||||
|
||||
Uncommonly Used Port
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1102**|
|
||||
|**Objective(s)**|[Command and Control](https://github.com/MBCProject/mbc-markdown/tree/master/command-and-control), [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Web Service](https://attack.mitre.org/techniques/T1102/)|
|
||||
|**Related ATT&CK Technique**|[Web Service](https://attack.mitre.org/techniques/T1102/)|
|
||||
|
||||
Web Service
|
||||
===========
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1171**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[LLMNR/NBT-NS Poisoning](https://attack.mitre.org/techniques/T1171/)|
|
||||
|**Related ATT&CK Technique**|[LLMNR/NBT-NS Poisoning](https://attack.mitre.org/techniques/T1171/)|
|
||||
|
||||
LLMNR/NBT-NS Poisoning
|
||||
======================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1098**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Account Manipulation](https://attack.mitre.org/techniques/T1098/)|
|
||||
|**Related ATT&CK Technique**|[Account Manipulation](https://attack.mitre.org/techniques/T1098/)|
|
||||
|
||||
Account Manipulation
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1003**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Credential Dumping](https://attack.mitre.org/techniques/T1003/)|
|
||||
|**Related ATT&CK Technique**|[Credential Dumping](https://attack.mitre.org/techniques/T1003/)|
|
||||
|
||||
Credential Dumping
|
||||
==================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1081**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Credentials in Files](https://attack.mitre.org/techniques/T1081/)|
|
||||
|**Related ATT&CK Technique**|[Credentials in Files](https://attack.mitre.org/techniques/T1081/)|
|
||||
|
||||
Credentials in Files
|
||||
====================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1214**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Credentials in Registry](https://attack.mitre.org/techniques/T1214/)|
|
||||
|**Related ATT&CK Technique**|[Credentials in Registry](https://attack.mitre.org/techniques/T1214/)|
|
||||
|
||||
Credentials in Registry
|
||||
=======================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1503**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Credentials in Web Browsers](https://attack.mitre.org/techniques/T1503/)|
|
||||
|**Related ATT&CK Technique**|[Credentials in Web Browsers](https://attack.mitre.org/techniques/T1503/)|
|
||||
|
||||
Credentials in Web Browsers
|
||||
===========================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1145**|
|
||||
|**Objective(s)**|[Credential Access](https://github.com/MBCProject/mbc-markdown/tree/master/credential-access)|
|
||||
|**Related ATT&CK Technique(s)**|[Private Keys](https://attack.mitre.org/techniques/T1145/)|
|
||||
|**Related ATT&CK Technique**|[Private Keys](https://attack.mitre.org/techniques/T1145/)|
|
||||
|
||||
Private Keys
|
||||
============
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1134**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Access Token Manipulation](https://attack.mitre.org/techniques/T1134)|
|
||||
|**Related ATT&CK Technique**|[Access Token Manipulation](https://attack.mitre.org/techniques/T1134)|
|
||||
|
||||
|
||||
Access Token Manipulation
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0027**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Alternative Installation Location
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1009**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Binary Padding](https://attack.mitre.org/techniques/T1009)|
|
||||
|**Related ATT&CK Technique**|[Binary Padding](https://attack.mitre.org/techniques/T1009)|
|
||||
|
||||
|
||||
Binary Padding
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1197**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[BITS Jobs](https://attack.mitre.org/techniques/T1197)|
|
||||
|**Related ATT&CK Technique**|[BITS Jobs](https://attack.mitre.org/techniques/T1197)|
|
||||
|
||||
|
||||
BITS Jobs
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0028**|
|
||||
|**Objective(s)**|[Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Bootkit](https://attack.mitre.org/techniques/T1067/)|
|
||||
|**Related ATT&CK Technique**|[Bootkit](https://attack.mitre.org/techniques/T1067/)|
|
||||
|
||||
Boot Sector Modification
|
||||
========================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1088**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Privilege Escalation](https://github.com/MBCProject/mbc-markdown/tree/master/privilege-escalation)|
|
||||
|**Related ATT&CK Technique(s)**|[Bypass User Account Control](https://attack.mitre.org/techniques/T1088)|
|
||||
|**Related ATT&CK Technique**|[Bypass User Account Control](https://attack.mitre.org/techniques/T1088)|
|
||||
|
||||
|
||||
Bypass User Account Control
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1116**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Code Signing](https://attack.mitre.org/techniques/T1116)|
|
||||
|**Related ATT&CK Technique**|[Code Signing](https://attack.mitre.org/techniques/T1116)|
|
||||
|
||||
|
||||
Code Signing
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1122**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Component Object Model Hijacking](https://attack.mitre.org/techniques/T1122)|
|
||||
|**Related ATT&CK Technique**|[Component Object Model Hijacking](https://attack.mitre.org/techniques/T1122)|
|
||||
|
||||
|
||||
Component Object Model Hijacking
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1478**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Install Insecure or Malicious Configuration](https://attack.mitre.org/techniques/T1478)|
|
||||
|**Related ATT&CK Technique**|[Install Insecure or Malicious Configuration](https://attack.mitre.org/techniques/T1478)|
|
||||
|
||||
|
||||
Configuration Modification
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1207**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[DCShadow](https://attack.mitre.org/techniques/T1207)|
|
||||
|**Related ATT&CK Technique**|[DCShadow](https://attack.mitre.org/techniques/T1207)|
|
||||
|
||||
|
||||
DCShadow
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1140**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Deobfuscate/Decode Files or Information](https://attack.mitre.org/techniques/T1140)|
|
||||
|**Related ATT&CK Technique**|[Deobfuscate/Decode Files or Information](https://attack.mitre.org/techniques/T1140)|
|
||||
|
||||
|
||||
Deobfuscate/Decode Files or Information
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1089**|
|
||||
|**Objective(s)**|[Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Disabling Security Tools](https://attack.mitre.org/techniques/T1089/)|
|
||||
|**Related ATT&CK Technique**|[Disabling Security Tools](https://attack.mitre.org/techniques/T1089/)|
|
||||
|
||||
Disabling Security Tools
|
||||
========================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1211**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Exploitation for Defense Evasion](https://attack.mitre.org/techniques/T1211)|
|
||||
|**Related ATT&CK Technique**|[Exploitation for Defense Evasion](https://attack.mitre.org/techniques/T1211)|
|
||||
|
||||
|
||||
Exploitation for Defense Evasion
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1107**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[File Deletion](https://attack.mitre.org/techniques/T1107)|
|
||||
|**Related ATT&CK Technique**|[File Deletion](https://attack.mitre.org/techniques/T1107)|
|
||||
|
||||
|
||||
File Deletion
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1222**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[File Permissions Modification](https://attack.mitre.org/techniques/T1222)|
|
||||
|**Related ATT&CK Technique**|[File Permissions Modification](https://attack.mitre.org/techniques/T1222)|
|
||||
|
||||
|
||||
File Permissions Modification
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1006]**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[File System Logical Offsets](https://attack.mitre.org/techniques/T1006)|
|
||||
|**Related ATT&CK Technique**|[File System Logical Offsets](https://attack.mitre.org/techniques/T1006)|
|
||||
|
||||
|
||||
File System Logical Offsets
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1158**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Hidden Files and Directories](https://attack.mitre.org/techniques/T1158)|
|
||||
|**Related ATT&CK Technique**|[Hidden Files and Directories](https://attack.mitre.org/techniques/T1158)|
|
||||
|
||||
|
||||
Hidden Files and Directories
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1143**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Hidden Window](https://attack.mitre.org/techniques/T1143)|
|
||||
|**Related ATT&CK Technique**|[Hidden Window](https://attack.mitre.org/techniques/T1143)|
|
||||
|
||||
|
||||
Hidden Window
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1148**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[HISTCONTROL](https://attack.mitre.org/techniques/T1148)|
|
||||
|**Related ATT&CK Technique**|[HISTCONTROL](https://attack.mitre.org/techniques/T1148)|
|
||||
|
||||
|
||||
HISTCONTROL
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1183**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Privilege Escalation](https://github.com/MBCProject/mbc-markdown/tree/master/privilege-escalation), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Image File Execution Options Injection](https://attack.mitre.org/techniques/T1183)|
|
||||
|**Related ATT&CK Technique**|[Image File Execution Options Injection](https://attack.mitre.org/techniques/T1183)|
|
||||
|
||||
|
||||
Image File Execution Options Injection
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1054**|
|
||||
|**Objective(s)**|[Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Indicator Blocking](https://attack.mitre.org/techniques/T1054/)|
|
||||
|**Related ATT&CK Technique**|[Indicator Blocking](https://attack.mitre.org/techniques/T1054/)|
|
||||
|
||||
Indicator Blocking
|
||||
==================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1070**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Indicator Removal on Host](https://attack.mitre.org/techniques/T1070)|
|
||||
|**Related ATT&CK Technique**|[Indicator Removal on Host](https://attack.mitre.org/techniques/T1070)|
|
||||
|
||||
|
||||
Indicator Removal on Host
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1202**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Indirect Command Execution](https://attack.mitre.org/techniques/T1202)|
|
||||
|**Related ATT&CK Technique**|[Indirect Command Execution](https://attack.mitre.org/techniques/T1202)|
|
||||
|
||||
|
||||
Indirect Command Execution
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1130**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Install Root Certificate](https://attack.mitre.org/techniques/T1130)|
|
||||
|**Related ATT&CK Technique**|[Install Root Certificate](https://attack.mitre.org/techniques/T1130)|
|
||||
|
||||
|
||||
Install Root Certificate
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1036**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Masquerading](https://attack.mitre.org/techniques/T1036)|
|
||||
|**Related ATT&CK Technique**|[Masquerading](https://attack.mitre.org/techniques/T1036)|
|
||||
|
||||
|
||||
Masquerading
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1399**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Modify Trusted Execution Environment](https://attack.mitre.org/techniques/T1399)|
|
||||
|**Related ATT&CK Technique**|[Modify Trusted Execution Environment](https://attack.mitre.org/techniques/T1399)|
|
||||
|
||||
|
||||
Modify Trusted Execution Environment
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1112**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Modify Registry](https://attack.mitre.org/techniques/T1112)|
|
||||
|**Related ATT&CK Technique**|[Modify Registry](https://attack.mitre.org/techniques/T1112)|
|
||||
|
||||
|
||||
Modify Registry
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1096**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[NTFS File Attributes](https://attack.mitre.org/techniques/T1096/)|
|
||||
|**Related ATT&CK Technique**|[NTFS File Attributes](https://attack.mitre.org/techniques/T1096/)|
|
||||
|
||||
|
||||
NTFS File Attributes
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1027**|
|
||||
|**Objective(s)**| [Anti-Static Analysis](https://github.com/MBCProject/mbc-markdown/tree/master/anti-static-analysis), [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Obfuscated Files or Information](https://attack.mitre.org/techniques/T1027)|
|
||||
|**Related ATT&CK Technique**|[Obfuscated Files or Information](https://attack.mitre.org/techniques/T1027)|
|
||||
|
||||
|
||||
Obfuscated Files or Information
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1502**|
|
||||
|**Objective(s)**|[Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Privilege Escalation](https://github.com/MBCProject/mbc-markdown/tree/master/privilege-escalation)|
|
||||
|**Related ATT&CK Technique(s)**|[Parent PID Spoofing](https://attack.mitre.org/techniques/T1502/)|
|
||||
|**Related ATT&CK Technique**|[Parent PID Spoofing](https://attack.mitre.org/techniques/T1502/)|
|
||||
|
||||
Parent PID Spoofing
|
||||
===================
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0029**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Polymorphic Code
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1093**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Process Hollowing](https://attack.mitre.org/techniques/T1093)|
|
||||
|**Related ATT&CK Technique**|[Process Hollowing](https://attack.mitre.org/techniques/T1093)|
|
||||
|
||||
|
||||
Process Hollowing
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1055**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Privilege Escalation](https://github.com/MBCProject/mbc-markdown/tree/master/privilege-escalation)|
|
||||
|**Related ATT&CK Technique(s)**|[Process Injection](https://attack.mitre.org/techniques/T1055)|
|
||||
|**Related ATT&CK Technique**|[Process Injection](https://attack.mitre.org/techniques/T1055)|
|
||||
|
||||
|
||||
Process Injection
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1108**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Persistence](https://github.com/MBCProject/mbc-markdown/tree/master/persistence)|
|
||||
|**Related ATT&CK Technique(s)**|[Redundant Access](https://attack.mitre.org/techniques/T1108)|
|
||||
|**Related ATT&CK Technique**|[Redundant Access](https://attack.mitre.org/techniques/T1108)|
|
||||
|
||||
|
||||
Redundant Access
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1117**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Execution](https://github.com/MBCProject/mbc-markdown/tree/master/execution)|
|
||||
|**Related ATT&CK Technique(s)**|[Regsvr32](https://attack.mitre.org/techniques/T1117)|
|
||||
|**Related ATT&CK Technique**|[Regsvr32](https://attack.mitre.org/techniques/T1117)|
|
||||
|
||||
Regsvr32
|
||||
========
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**E1014**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Rootkit](https://attack.mitre.org/techniques/T1014)|
|
||||
|**Related ATT&CK Technique**|[Rootkit](https://attack.mitre.org/techniques/T1014)|
|
||||
|
||||
|
||||
Rootkit Behavior
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1085**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion), [Execution](https://github.com/MBCProject/mbc-markdown/tree/master/execution)|
|
||||
|**Related ATT&CK Technique(s)**|[Rundll32](https://attack.mitre.org/techniques/T1085)|
|
||||
|**Related ATT&CK Technique**|[Rundll32](https://attack.mitre.org/techniques/T1085)|
|
||||
|
||||
Rundll32
|
||||
========
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1099**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Timestomp](https://attack.mitre.org/techniques/T1099)|
|
||||
|**Related ATT&CK Technique**|[Timestomp](https://attack.mitre.org/techniques/T1099)|
|
||||
|
||||
|
||||
TimeStomp
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1497**|
|
||||
|**Objective(s)**| [Defense Evasion](https://github.com/MBCProject/mbc-markdown/tree/master/defense-evasion)|
|
||||
|**Related ATT&CK Technique(s)**|[Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497)|
|
||||
|**Related ATT&CK Technique**|[Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497)|
|
||||
|
||||
|
||||
Virtualization/Sandbox Evasion
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**T1087**|
|
||||
|**Objective(s)**|[Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/discovery)|
|
||||
|**Related ATT&CK Technique(s)**|[Account Discovery](https://attack.mitre.org/techniques/T1087)|
|
||||
|**Related ATT&CK Technique**|[Account Discovery](https://attack.mitre.org/techniques/T1087)|
|
||||
|
||||
|
||||
Account Discovery
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|---------|------------------------|
|
||||
|**ID**|**M0013**|
|
||||
|**Objective(s)**|[Discovery](https://github.com/MBCProject/mbc-markdown/tree/master/discovery)|
|
||||
|**Related ATT&CK Technique(s)**|None|
|
||||
|**Related ATT&CK Technique**|None|
|
||||
|
||||
|
||||
Analysis Tool Discovery
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user