diff --git a/anti-behavioral-analysis/capture-evasion.md b/anti-behavioral-analysis/capture-evasion.md index 3780aca..3312c05 100644 --- a/anti-behavioral-analysis/capture-evasion.md +++ b/anti-behavioral-analysis/capture-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0036**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0036
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesNone
Capture Evasion diff --git a/anti-behavioral-analysis/debugger-detection.md b/anti-behavioral-analysis/debugger-detection.md index b8c9927..20318b1 100644 --- a/anti-behavioral-analysis/debugger-detection.md +++ b/anti-behavioral-analysis/debugger-detection.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0001**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0001
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesNone
Debugger Detection diff --git a/anti-behavioral-analysis/debugger-evasion.md b/anti-behavioral-analysis/debugger-evasion.md index 00a50eb..af16ead 100644 --- a/anti-behavioral-analysis/debugger-evasion.md +++ b/anti-behavioral-analysis/debugger-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0002**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|[Debugger Evasion (T1622)](https://attack.mitre.org/techniques/T1622/)| + + + + + + + + + + + + + + +
IDB0002
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesDebugger Evasion (T1622)
Debugger Evasion diff --git a/anti-behavioral-analysis/dynamic-analysis-evasion.md b/anti-behavioral-analysis/dynamic-analysis-evasion.md index fd863fa..8741a81 100644 --- a/anti-behavioral-analysis/dynamic-analysis-evasion.md +++ b/anti-behavioral-analysis/dynamic-analysis-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0003**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|Virtualization/Sandbox Evasion ([T1497](https://attack.mitre.org/techniques/T1497/), [T1633](https://attack.mitre.org/techniques/T1633/))| + + + + + + + + + + + + + + +
IDB0003
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesT1497, T1633
Dynamic Analysis Evasion diff --git a/anti-behavioral-analysis/emulator-detection.md b/anti-behavioral-analysis/emulator-detection.md index 4557f54..2faa609 100644 --- a/anti-behavioral-analysis/emulator-detection.md +++ b/anti-behavioral-analysis/emulator-detection.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0004**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0004
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesNone
Emulator Detection diff --git a/anti-behavioral-analysis/emulator-evasion.md b/anti-behavioral-analysis/emulator-evasion.md index e19902a..04f5449 100644 --- a/anti-behavioral-analysis/emulator-evasion.md +++ b/anti-behavioral-analysis/emulator-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0005**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0005
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesNone
Emulator Evasion diff --git a/anti-behavioral-analysis/memory-dump-evasion.md b/anti-behavioral-analysis/memory-dump-evasion.md index 1a376a5..41c167e 100644 --- a/anti-behavioral-analysis/memory-dump-evasion.md +++ b/anti-behavioral-analysis/memory-dump-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0006**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0006
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesNone
Memory Dump Evasion diff --git a/anti-behavioral-analysis/virtual-machine-detection.md b/anti-behavioral-analysis/virtual-machine-detection.md index e68614a..146af9b 100644 --- a/anti-behavioral-analysis/virtual-machine-detection.md +++ b/anti-behavioral-analysis/virtual-machine-detection.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0009**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis)| -|**Related ATT&CK Technique**|Virtualization/Sandbox Evasion ([T1497](https://attack.mitre.org/techniques/T1497/), [T1633](https://attack.mitre.org/techniques/T1633/))| + + + + + + + + + + + + + + +
IDB0009
Objective(s)Anti-Behavioral Analysis
Related ATT&CK TechniquesT1497, T1633
Virtual Machine Detection diff --git a/anti-static-analysis/call-graph-generation-evasion.md b/anti-static-analysis/call-graph-generation-evasion.md index 31ea8e4..c23aba5 100644 --- a/anti-static-analysis/call-graph-generation-evasion.md +++ b/anti-static-analysis/call-graph-generation-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0010**| -|**Objective(s)**|[Anti-Static Analysis](../anti-static-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0010
Objective(s)Anti-Static Analysis
Related ATT&CK TechniquesNone
Call Graph Generation Evasion diff --git a/anti-static-analysis/data-flow-analysis-evasion.md b/anti-static-analysis/data-flow-analysis-evasion.md index a60ab4f..113c485 100644 --- a/anti-static-analysis/data-flow-analysis-evasion.md +++ b/anti-static-analysis/data-flow-analysis-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0045**| -|**Objective(s)**|[Anti-Static Analysis](../anti-static-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0045
Objective(s)Anti-Static Analysis
Related ATT&CK TechniquesNone
Data Flow Analysis Evasion diff --git a/anti-static-analysis/disassembler-evasion.md b/anti-static-analysis/disassembler-evasion.md index 27241d3..ab0e8c2 100644 --- a/anti-static-analysis/disassembler-evasion.md +++ b/anti-static-analysis/disassembler-evasion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0012**| -|**Objective(s)**|[Anti-Static Analysis](../anti-static-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0012
Objective(s)Anti-Static Analysis
Related ATT&CK TechniquesNone
Disassembler Evasion diff --git a/anti-static-analysis/executable-code-obfuscation.md b/anti-static-analysis/executable-code-obfuscation.md index 99a08ff..e9d5062 100644 --- a/anti-static-analysis/executable-code-obfuscation.md +++ b/anti-static-analysis/executable-code-obfuscation.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0032**| -|**Objective(s)**|[Anti-Static Analysis](../anti-static-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0032
Objective(s)Anti-Static Analysis
Related ATT&CK TechniquesNone
Executable Code Obfuscation diff --git a/anti-static-analysis/executable-code-optimization.md b/anti-static-analysis/executable-code-optimization.md index 1bb0b97..eb71c5f 100644 --- a/anti-static-analysis/executable-code-optimization.md +++ b/anti-static-analysis/executable-code-optimization.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0034**| -|**Objective(s)**|[Anti-Static Analysis](../anti-static-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0034
Objective(s)Anti-Static Analysis
Related ATT&CK TechniquesNone
Executable Code Optimization diff --git a/anti-static-analysis/executable-code-virtualization.md b/anti-static-analysis/executable-code-virtualization.md index b86b500..daa755b 100644 --- a/anti-static-analysis/executable-code-virtualization.md +++ b/anti-static-analysis/executable-code-virtualization.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0008**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis), [Anti-Static Analysis](../anti-static-analysis)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0008
Objective(s)Anti-Behavioral Analysis, Anti-Static Analysis
Related ATT&CK TechniquesNone
Executable Code Virtualization diff --git a/anti-static-analysis/software-packing.md b/anti-static-analysis/software-packing.md index 7d00556..548e98e 100644 --- a/anti-static-analysis/software-packing.md +++ b/anti-static-analysis/software-packing.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0001**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis), [Anti-Static Analysis](../anti-static-analysis), [Defense Evasion](../defense-evasion)| -|**Related ATT&CK Sub-Technique**|Obfuscated Files or Information: Software Packing ([T1027.002](https://attack.mitre.org/techniques/T1027/002/), [T1406.002](https://attack.mitre.org/techniques/T1406/002/))| + + + + + + + + + + + + + + +
IDF0001
Objective(s)Anti-Behavioral Analysis, Anti-Static Analysis, Defense Evasion
Related ATT&CK TechniquesT1027.002, T1406.002
Software Packing ================ diff --git a/collection/cryptocurrency.md b/collection/cryptocurrency.md index 7831537..118202e 100644 --- a/collection/cryptocurrency.md +++ b/collection/cryptocurrency.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0028**| -|**Objective(s)**|[Collection](../collection), [Credential Access](../credential-access)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0028
Objective(s)Collection, Credential Access
Related ATT&CK TechniquesNone
Cryptocurrency diff --git a/collection/input-capture.md b/collection/input-capture.md index a728c1d..e091b1b 100644 --- a/collection/input-capture.md +++ b/collection/input-capture.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1056**| -|**Objective(s)**|[Collection](../collection), [Credential Access](../credential-access)| -|**Related ATT&CK Technique**|Input Capture ([T1056](https://attack.mitre.org/techniques/T1056), [T1417](https://attack.mitre.org/techniques/T1417/))| + + + + + + + + + + + + + + +
IDE1056
Objective(s)Collection, Credential Access
Related ATT&CK TechniquesT1056, T1417
Input Capture diff --git a/collection/keylogging.md b/collection/keylogging.md index 8ce28fc..81f97e0 100644 --- a/collection/keylogging.md +++ b/collection/keylogging.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0002**| -|**Objective(s)**|[Collection](../collection), [Credential Access](../credential-access)| -|**Related ATT&CK Sub-Technique**|Input Capture: Keylogging ([T1056.001](https://attack.mitre.org/techniques/T1056/001), [T1417.001](https://attack.mitre.org/techniques/T1417/001/))| + + + + + + + + + + + + + + +
IDF0002
Objective(s)Collection, Credential Access
Related ATT&CK TechniquesT1056.001, T1417.001
Keylogging diff --git a/collection/screen-capture.md b/collection/screen-capture.md index 2fd28b2..aaf4dba 100644 --- a/collection/screen-capture.md +++ b/collection/screen-capture.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1113**| -|**Objective(s)**|[Collection](../collection), [Credential Access](../credential-access)| -|**Related ATT&CK Technique**|[Screen Capture](https://attack.mitre.org/techniques/T1113/)| + + + + + + + + + + + + + + +
IDE1113
Objective(s)Collection, Credential Access
Related ATT&CK TechniquesScreen Capture
Screen Capture diff --git a/command-and-control/c2-communication.md b/command-and-control/c2-communication.md index f6445c2..00e5651 100644 --- a/command-and-control/c2-communication.md +++ b/command-and-control/c2-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0030**| -|**Objective(s)**|[Command and Control](../command-and-control)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0030
Objective(s)Command and Control
Related ATT&CK TechniquesNone
C2 Communication diff --git a/command-and-control/domain-name-generation.md b/command-and-control/domain-name-generation.md index e63159d..8f33502 100644 --- a/command-and-control/domain-name-generation.md +++ b/command-and-control/domain-name-generation.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0031**| -|**Objective(s)**|[Command and Control](../command-and-control)| -|**Related ATT&CK Sub-Technique**|[Dynamic Resolution: Domain Generation Algorithms (T1568.002)](https://attack.mitre.org/techniques/T1568/002/)| + + + + + + + + + + + + + + +
IDB0031
Objective(s)Command and Control
Related ATT&CK TechniquesDynamic Resolution: Domain Generation Algorithms (T1568.002)
Domain Name Generation diff --git a/command-and-control/ingress-tool-transfer.md b/command-and-control/ingress-tool-transfer.md index d4de2bf..892d5ec 100644 --- a/command-and-control/ingress-tool-transfer.md +++ b/command-and-control/ingress-tool-transfer.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1105**| -|**Objective(s)**|[Command and Control](../command-and-control), [Lateral Movement](../lateral-movement), [Persistence](../persistence)| -|**Related ATT&CK Technique**|[Ingress Tool Transfer](https://attack.mitre.org/techniques/T1105/)| + + + + + + + + + + + + + + +
IDE1105
Objective(s)Command and Control, Lateral Movement, Persistence
Related ATT&CK TechniquesIngress Tool Transfer
Ingress Tool Transfer diff --git a/defense-evasion/alternative-installation-location.md b/defense-evasion/alternative-installation-location.md index 6033bd8..2244ea5 100644 --- a/defense-evasion/alternative-installation-location.md +++ b/defense-evasion/alternative-installation-location.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0027**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0027
Objective(s)Defense Evasion
Related ATT&CK TechniquesNone
Alternative Installation Location diff --git a/defense-evasion/bootkit.md b/defense-evasion/bootkit.md index 9aafd61..e54140f 100644 --- a/defense-evasion/bootkit.md +++ b/defense-evasion/bootkit.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0013**| -|**Objective(s)**|[Defense Evasion](../defense-evasion), [Persistence](../persistence)| -|**Related ATT&CK Sub-Technique**|[Pre-OS Boot: Bootkit](https://attack.mitre.org/techniques/T1542/003)| + + + + + + + + + + + + + + +
IDF0013
Objective(s)Defense Evasion, Persistence
Related ATT&CK TechniquesPre-OS Boot: Bootkit
Bootkit diff --git a/defense-evasion/bypass-data-execution-prevention.md b/defense-evasion/bypass-data-execution-prevention.md index 73279e5..db1d7b1 100644 --- a/defense-evasion/bypass-data-execution-prevention.md +++ b/defense-evasion/bypass-data-execution-prevention.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0037**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0037
Objective(s)Defense Evasion
Related ATT&CK TechniquesNone
Bypass Data Execution Prevention diff --git a/defense-evasion/covert-location.md b/defense-evasion/covert-location.md index ff37f9f..1444b74 100644 --- a/defense-evasion/covert-location.md +++ b/defense-evasion/covert-location.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0040**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0040
Objective(s)Defense Evasion
Related ATT&CK TechniquesNone
Covert Location diff --git a/defense-evasion/disable-or-evade-security-tools.md b/defense-evasion/disable-or-evade-security-tools.md index 0a71322..b93fb03 100644 --- a/defense-evasion/disable-or-evade-security-tools.md +++ b/defense-evasion/disable-or-evade-security-tools.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0004**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Sub-Techniques**|Impair Defenses: Disable or Modify Tools ([T1562.001](https://attack.mitre.org/techniques/T1562/001), [T1629.003](https://attack.mitre.org/techniques/T1629/003/))| + + + + + + + + + + + + + + +
IDF0004
Objective(s)Defense Evasion
Related ATT&CK TechniquesT1562.001, T1629.003
Disable or Evade Security Tools diff --git a/defense-evasion/hidden-files-and-directories.md b/defense-evasion/hidden-files-and-directories.md index ef0bc13..129127e 100644 --- a/defense-evasion/hidden-files-and-directories.md +++ b/defense-evasion/hidden-files-and-directories.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0005**| -|**Objective(s)**|[Defense Evasion](../defense-evasion), [Persistence](../persistence)| -|**Related ATT&CK Sub-Technique**|[Hide Artifacts: Hidden Files and Directories](https://attack.mitre.org/techniques/T1564/001/)| + + + + + + + + + + + + + + +
IDF0005
Objective(s)Defense Evasion, Persistence
Related ATT&CK TechniquesHide Artifacts: Hidden Files and Directories
Hidden Files and Directories diff --git a/defense-evasion/hide-artifacts.md b/defense-evasion/hide-artifacts.md index 0a824b3..5f5e589 100644 --- a/defense-evasion/hide-artifacts.md +++ b/defense-evasion/hide-artifacts.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1564**| -|**Objective(s)**|[Defense Evasion](../defense-evasion), [Persistence](../persistence)| -|**Related ATT&CK Technique**|Hide Artifacts ([T1564](https://attack.mitre.org/techniques/T1564/), [T1628](https://attack.mitre.org/techniques/T1628/))| + + + + + + + + + + + + + + +
IDE1564
Objective(s)Defense Evasion, Persistence
Related ATT&CK TechniquesT1564, T1628
Hide Artifacts diff --git a/defense-evasion/hijack-execution-flow.md b/defense-evasion/hijack-execution-flow.md index 677e1e7..ff61cc7 100644 --- a/defense-evasion/hijack-execution-flow.md +++ b/defense-evasion/hijack-execution-flow.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0015**| -|**Objective(s)**|[Anti-Behavioral Analysis](../anti-behavioral-analysis), [Collection](../collection), [Credential Access](../credential-access), [Defense Evasion](../defense-evasion), [Persistence](../persistence), [Privilege Escalation](../privilege-escalation)| -|**Related ATT&CK Technique**|Hijack Execution Flow ([T1574](https://attack.mitre.org/techniques/T1574), [T1625](https://attack.mitre.org/techniques/T1625))| + + + + + + + + + + + + + + +
IDF0015
Objective(s)Anti-Behavioral Analysis, Collection, Credential Access, Defense Evasion, Persistence, Privilege Escalation
Related ATT&CK TechniquesT1574, T1625
Hijack Execution Flow diff --git a/defense-evasion/indicator-blocking.md b/defense-evasion/indicator-blocking.md index dd55662..0189169 100644 --- a/defense-evasion/indicator-blocking.md +++ b/defense-evasion/indicator-blocking.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0006**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Sub-Technique**|[Impair Defenses: Indicator Blocking](https://attack.mitre.org/techniques/T1562/006/)| + + + + + + + + + + + + + + +
IDF0006
Objective(s)Defense Evasion
Related ATT&CK TechniquesImpair Defenses: Indicator Blocking
Indicator Blocking diff --git a/defense-evasion/install-insecure-or-malicious-configuration.md b/defense-evasion/install-insecure-or-malicious-configuration.md index 9379e72..d40d615 100644 --- a/defense-evasion/install-insecure-or-malicious-configuration.md +++ b/defense-evasion/install-insecure-or-malicious-configuration.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0047**| -|**Objective(s)**|[Defense Evasion](../defense-evasion), [Persistence](../persistence)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0047
Objective(s)Defense Evasion, Persistence
Related ATT&CK TechniquesNone
Install Insecure or Malicious Configuration diff --git a/defense-evasion/modify-registry.md b/defense-evasion/modify-registry.md index f5afc5b..8860863 100644 --- a/defense-evasion/modify-registry.md +++ b/defense-evasion/modify-registry.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1112**| -|**Objective(s)**|[Defense Evasion](../defense-evasion), [Persistence](../persistence)| -|**Related ATT&CK Technique**|[Modify Registry](https://attack.mitre.org/techniques/T1112)| + + + + + + + + + + + + + + +
IDE1112
Objective(s)Defense Evasion, Persistence
Related ATT&CK TechniquesModify Registry
Modify Registry diff --git a/defense-evasion/obfuscated-files-or-information.md b/defense-evasion/obfuscated-files-or-information.md index f5e83dd..c8e62e2 100644 --- a/defense-evasion/obfuscated-files-or-information.md +++ b/defense-evasion/obfuscated-files-or-information.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1027**| -|**Objective(s)**|[Anti-Static Analysis](../anti-static-analysis), [Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|Obfuscated Files or Information ([T1027](https://attack.mitre.org/techniques/T1027/), [T1406](https://attack.mitre.org/techniques/T1406/))| + + + + + + + + + + + + + + +
IDE1027
Objective(s)Anti-Static Analysis, Defense Evasion
Related ATT&CK TechniquesT1027, T1406
Obfuscated Files or Information diff --git a/defense-evasion/polymorphic-code.md b/defense-evasion/polymorphic-code.md index 003dbfe..ea4601d 100644 --- a/defense-evasion/polymorphic-code.md +++ b/defense-evasion/polymorphic-code.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0029**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0029
Objective(s)Defense Evasion
Related ATT&CK TechniquesNone
Polymorphic Code diff --git a/defense-evasion/process-injection.md b/defense-evasion/process-injection.md index a9a95f9..8dedc71 100644 --- a/defense-evasion/process-injection.md +++ b/defense-evasion/process-injection.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1055**| -|**Objective(s)**|[Defense Evasion](../defense-evasion), [Privilege Escalation](../privilege-escalation)| -|**Related ATT&CK Technique**|Process Injection ([T1055](https://attack.mitre.org/techniques/T1055), [T1631](https://attack.mitre.org/techniques/T1631/))| + + + + + + + + + + + + + + +
IDE1055
Objective(s)Defense Evasion, Privilege Escalation
Related ATT&CK TechniquesT1055, T1631
Process Injection diff --git a/defense-evasion/rootkit.md b/defense-evasion/rootkit.md index e7d096d..c634d71 100644 --- a/defense-evasion/rootkit.md +++ b/defense-evasion/rootkit.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1014**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|[Rootkit](https://attack.mitre.org/techniques/T1014)| + + + + + + + + + + + + + + +
IDE1014
Objective(s)Defense Evasion
Related ATT&CK TechniquesRootkit
Rootkit diff --git a/defense-evasion/self-deletion.md b/defense-evasion/self-deletion.md index 3743024..fa5448a 100644 --- a/defense-evasion/self-deletion.md +++ b/defense-evasion/self-deletion.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0007**| -|**Objective(s)**|[Defense Evasion](../defense-evasion)| -|**Related ATT&CK Sub-Technique**|Indicator Removal on Host: Uninstall Malicious Application ([T1630.001](https://attack.mitre.org/techniques/T1630/001/)), Indicator Removal on Host: File Deletion ([T1070.004](https://attack.mitre.org/techniques/T1070/004/))| + + + + + + + + + + + + + + +
IDF0007
Objective(s)Defense Evasion
Related ATT&CK TechniquesT1630.001, T1070.004
Self Deletion diff --git a/discovery/analysis-tool-discovery.md b/discovery/analysis-tool-discovery.md index 1bc51a2..b714a60 100644 --- a/discovery/analysis-tool-discovery.md +++ b/discovery/analysis-tool-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0013**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0013
Objective(s)Discovery
Related ATT&CK TechniquesNone
Analysis Tool Discovery diff --git a/discovery/application-window-discovery.md b/discovery/application-window-discovery.md index c50062c..dfa39e6 100644 --- a/discovery/application-window-discovery.md +++ b/discovery/application-window-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1010**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|[Application Window Discovery](https://attack.mitre.org/techniques/T1010/) | + + + + + + + + + + + + + + +
IDE1010
Objective(s)Discovery
Related ATT&CK TechniquesApplication Window Discovery
Application Window Discovery diff --git a/discovery/code-discovery.md b/discovery/code-discovery.md index 0572dcc..25098a1 100644 --- a/discovery/code-discovery.md +++ b/discovery/code-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0046**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0046
Objective(s)Discovery
Related ATT&CK TechniquesNone
Code Discovery diff --git a/discovery/file-and-directory-discovery.md b/discovery/file-and-directory-discovery.md index b9575d3..65bc02f 100644 --- a/discovery/file-and-directory-discovery.md +++ b/discovery/file-and-directory-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1083**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|[File and Directory Discovery](https://attack.mitre.org/techniques/T1083/) | + + + + + + + + + + + + + + +
IDE1083
Objective(s)Discovery
Related ATT&CK TechniquesFile and Directory Discovery
File and Directory Discovery diff --git a/discovery/self-discovery.md b/discovery/self-discovery.md index f7faa65..0d94390 100644 --- a/discovery/self-discovery.md +++ b/discovery/self-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0038**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0038
Objective(s)Discovery
Related ATT&CK TechniquesNone
Self Discovery diff --git a/discovery/smtp-connection-discovery.md b/discovery/smtp-connection-discovery.md index ddeb2e5..5995988 100644 --- a/discovery/smtp-connection-discovery.md +++ b/discovery/smtp-connection-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0014**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0014
Objective(s)Discovery
Related ATT&CK TechniquesNone
SMTP Connection Discovery diff --git a/discovery/system-information-discovery.md b/discovery/system-information-discovery.md index e694b7d..50a9fbb 100644 --- a/discovery/system-information-discovery.md +++ b/discovery/system-information-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1082**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|[System Information Discovery](https://attack.mitre.org/techniques/T1082)| + + + + + + + + + + + + + + +
IDE1082
Objective(s)Discovery
Related ATT&CK TechniquesSystem Information Discovery
System Information Discovery diff --git a/discovery/taskbar-discovery.md b/discovery/taskbar-discovery.md index 58120ef..b879e91 100644 --- a/discovery/taskbar-discovery.md +++ b/discovery/taskbar-discovery.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0043**| -|**Objective(s)**|[Discovery](../discovery)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0043
Objective(s)Discovery
Related ATT&CK TechniquesNone
Taskbar Discovery diff --git a/execution/command-and-scripting-interpreter.md b/execution/command-and-scripting-interpreter.md index 6ff0b8d..f8ba34b 100644 --- a/execution/command-and-scripting-interpreter.md +++ b/execution/command-and-scripting-interpreter.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1059**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|Command and Scripting Interpreter ([T1059](https://attack.mitre.org/techniques/T1059), [T1623](https://attack.mitre.org/techniques/T1623))| + + + + + + + + + + + + + + +
IDE1059
Objective(s)Execution
Related ATT&CK TechniquesT1059, T1623
Command and Scripting Interpreter diff --git a/execution/conditional-execution.md b/execution/conditional-execution.md index fb386ed..9acd924 100644 --- a/execution/conditional-execution.md +++ b/execution/conditional-execution.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0025**| -|**Objective(s)**|[Execution](../execution), [Anti-Behavioral Analysis](../anti-behavioral-analysis), [Defense Evasion](../defense-evasion)| -|**Related ATT&CK Technique**|[Execution Guardrails (T1480)](https://attack.mitre.org/techniques/T1480)| + + + + + + + + + + + + + + +
IDB0025
Objective(s)Execution, Anti-Behavioral Analysis, Defense Evasion
Related ATT&CK TechniquesExecution Guardrails (T1480)
Conditional Execution diff --git a/execution/execution-dependency.md b/execution/execution-dependency.md index 6403695..0d0c473 100644 --- a/execution/execution-dependency.md +++ b/execution/execution-dependency.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0044**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0044
Objective(s)Execution
Related ATT&CK TechniquesNone
Execution Dependency diff --git a/execution/exploitation-for-client-execution.md b/execution/exploitation-for-client-execution.md index f045be0..248b73d 100644 --- a/execution/exploitation-for-client-execution.md +++ b/execution/exploitation-for-client-execution.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1203**| -|**Objective(s)**|[Execution](../execution), [Impact](../impact)| -|**Related ATT&CK Technique**|[Exploitation for Client Execution](https://attack.mitre.org/techniques/T1203)| + + + + + + + + + + + + + + +
IDE1203
Objective(s)Execution, Impact
Related ATT&CK TechniquesExploitation for Client Execution
Exploitation for Client Execution diff --git a/execution/install-additional-program.md b/execution/install-additional-program.md index d91399d..52d29df 100644 --- a/execution/install-additional-program.md +++ b/execution/install-additional-program.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0023**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0023
Objective(s)Execution
Related ATT&CK TechniquesNone
Install Additional Program diff --git a/execution/prevent-concurrent-execution.md b/execution/prevent-concurrent-execution.md index f797031..98ff548 100644 --- a/execution/prevent-concurrent-execution.md +++ b/execution/prevent-concurrent-execution.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0024**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0024
Objective(s)Execution
Related ATT&CK TechniquesNone
Prevent Concurrent Execution diff --git a/execution/remote-commands.md b/execution/remote-commands.md index 744ee9f..b64da45 100644 --- a/execution/remote-commands.md +++ b/execution/remote-commands.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0011**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0011
Objective(s)Execution
Related ATT&CK TechniquesNone
Remote Commands diff --git a/execution/send-email.md b/execution/send-email.md index 0f551b9..39a9855 100644 --- a/execution/send-email.md +++ b/execution/send-email.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0020**| -|**Objective(s)**|[Execution](../execution), [Lateral Movement](../lateral-movement)| -|**Related ATT&CK Technique**|[Phishing (T1566)](https://attack.mitre.org/techniques/T1566/)| + + + + + + + + + + + + + + +
IDB0020
Objective(s)Execution, Lateral Movement
Related ATT&CK TechniquesPhishing (T1566)
Send Email diff --git a/execution/send-poisoned-text-message.md b/execution/send-poisoned-text-message.md index 761f89e..9e1ec37 100644 --- a/execution/send-poisoned-text-message.md +++ b/execution/send-poisoned-text-message.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0021**| -|**Objective(s)**|[Execution](../execution), [Lateral Movement](../lateral-movement)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0021
Objective(s)Execution, Lateral Movement
Related ATT&CK TechniquesNone
Send Poisoned Text Message diff --git a/execution/system-services.md b/execution/system-services.md index 7c3692f..8a31737 100644 --- a/execution/system-services.md +++ b/execution/system-services.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1569**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|[System Services](https://attack.mitre.org/techniques/T1569/)| + + + + + + + + + + + + + + +
IDE1569
Objective(s)Execution
Related ATT&CK TechniquesSystem Services
System Services diff --git a/execution/user-execution.md b/execution/user-execution.md index a9b1f08..f37a64b 100644 --- a/execution/user-execution.md +++ b/execution/user-execution.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1204**| -|**Objective(s)**|[Execution](../execution)| -|**Related ATT&CK Technique**|[User Execution](https://attack.mitre.org/techniques/T1204)| + + + + + + + + + + + + + + +
IDE1204
Objective(s)Execution
Related ATT&CK TechniquesUser Execution
User Execution diff --git a/exfiltration/archive-collected-data.md b/exfiltration/archive-collected-data.md index 170ee01..235ec16 100644 --- a/exfiltration/archive-collected-data.md +++ b/exfiltration/archive-collected-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1560**| -|**Objective(s)**|[Exfiltration](../exfiltration)| -|**Related ATT&CK Technique**|[Archive Collected Data](https://attack.mitre.org/techniques/T1560/)| + + + + + + + + + + + + + + +
IDE1560
Objective(s)Exfiltration
Related ATT&CK TechniquesArchive Collected Data
Archive Collected Data diff --git a/exfiltration/automated-exfiltration.md b/exfiltration/automated-exfiltration.md index dae7c2b..3c5e129 100644 --- a/exfiltration/automated-exfiltration.md +++ b/exfiltration/automated-exfiltration.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1020**| -|**Objective(s)**|[Exfiltration](../exfiltration)| -|**Related ATT&CK Technique**|[Automated Exfiltration](https://attack.mitre.org/techniques/T1020/)| + + + + + + + + + + + + + + +
IDE1020
Objective(s)Exfiltration
Related ATT&CK TechniquesAutomated Exfiltration
Automated Exfiltration diff --git a/impact/clipboard-modification.md b/impact/clipboard-modification.md index 5236df7..d1e1982 100644 --- a/impact/clipboard-modification.md +++ b/impact/clipboard-modification.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1510**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|[Clipboard Modification](https://attack.mitre.org/techniques/T1510/)| + + + + + + + + + + + + + + +
IDE1510
Objective(s)Impact
Related ATT&CK TechniquesClipboard Modification
Clipboard Modification diff --git a/impact/compromise-data-integrity.md b/impact/compromise-data-integrity.md index d42631f..12ef6de 100644 --- a/impact/compromise-data-integrity.md +++ b/impact/compromise-data-integrity.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0016**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Sub-Technique**|[Data Manipulation: Stored Data Manipulation (T1565.001)](https://attack.mitre.org/techniques/T1565/001/)| + + + + + + + + + + + + + + +
IDB0016
Objective(s)Impact
Related ATT&CK TechniquesData Manipulation: Stored Data Manipulation (T1565.001)
Compromise Data Integrity diff --git a/impact/data-destruction.md b/impact/data-destruction.md index 1aeb457..c239e66 100644 --- a/impact/data-destruction.md +++ b/impact/data-destruction.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1485**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|[Data Destruction](https://attack.mitre.org/techniques/T1485/)| + + + + + + + + + + + + + + +
IDE1485
Objective(s)Impact
Related ATT&CK TechniquesData Destruction
Data Destruction diff --git a/impact/denial-of-service.md b/impact/denial-of-service.md index 67881c2..62dd56c 100644 --- a/impact/denial-of-service.md +++ b/impact/denial-of-service.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0033**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|[Network Denial of Service (T1498)](https://attack.mitre.org/techniques/T1498/)| + + + + + + + + + + + + + + +
IDB0033
Objective(s)Impact
Related ATT&CK TechniquesNetwork Denial of Service (T1498)
Denial of Service diff --git a/impact/destroy-hardware.md b/impact/destroy-hardware.md index 75842a0..8797f80 100644 --- a/impact/destroy-hardware.md +++ b/impact/destroy-hardware.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0017**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0017
Objective(s)Impact
Related ATT&CK TechniquesNone
Destroy Hardware diff --git a/impact/disk-wipe.md b/impact/disk-wipe.md index 22bc8ce..f5ec788 100644 --- a/impact/disk-wipe.md +++ b/impact/disk-wipe.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0014**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Sub-Technique**|[Disk Wipe](https://attack.mitre.org/techniques/T1561/)| + + + + + + + + + + + + + + +
IDF0014
Objective(s)Impact
Related ATT&CK TechniquesDisk Wipe
Disk Wipe ========= diff --git a/impact/exploit-kit.md b/impact/exploit-kit.md index 38f4350..9e521f0 100644 --- a/impact/exploit-kit.md +++ b/impact/exploit-kit.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1190**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|[Exploit Public-Facing Application](https://attack.mitre.org/techniques/T1190)| + + + + + + + + + + + + + + +
IDE1190
Objective(s)Impact
Related ATT&CK TechniquesExploit Public-Facing Application
Exploit Kit diff --git a/impact/generate-traffic-from-victim.md b/impact/generate-traffic-from-victim.md index 25b83bd..cc8048c 100644 --- a/impact/generate-traffic-from-victim.md +++ b/impact/generate-traffic-from-victim.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1643**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|[Generate Traffic from Victim](https://attack.mitre.org/techniques/T1643/)| + + + + + + + + + + + + + + +
IDE1643
Objective(s)Impact
Related ATT&CK TechniquesGenerate Traffic from Victim
Generate Traffic from Victim diff --git a/impact/manipulate-network-traffic.md b/impact/manipulate-network-traffic.md index 9c5e60f..9faa3ef 100644 --- a/impact/manipulate-network-traffic.md +++ b/impact/manipulate-network-traffic.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0019**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Sub-Technique**|[Data Manipulation: Transmitted Data Manipulation (T1565.002)](https://attack.mitre.org/techniques/T1565/002/)| + + + + + + + + + + + + + + +
IDB0019
Objective(s)Impact
Related ATT&CK TechniquesData Manipulation: Transmitted Data Manipulation (T1565.002)
Manipulate Network Traffic diff --git a/impact/modify-hardware.md b/impact/modify-hardware.md index c2ee3ea..80c74e9 100644 --- a/impact/modify-hardware.md +++ b/impact/modify-hardware.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0042**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0042
Objective(s)Impact
Related ATT&CK TechniquesNone
Modify Hardware diff --git a/impact/remote-access.md b/impact/remote-access.md index 72a07c5..25984d8 100644 --- a/impact/remote-access.md +++ b/impact/remote-access.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0022**| -|**Objective(s)**|[Impact](../impact), [Persistence](../persistence)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0022
Objective(s)Impact, Persistence
Related ATT&CK TechniquesNone
Remote Access diff --git a/impact/resource-hijacking.md b/impact/resource-hijacking.md index 93d0cc3..49aa528 100644 --- a/impact/resource-hijacking.md +++ b/impact/resource-hijacking.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0018**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|[Resource Hijacking (T1496)](https://attack.mitre.org/techniques/T1496/)| + + + + + + + + + + + + + + +
IDB0018
Objective(s)Impact
Related ATT&CK TechniquesResource Hijacking (T1496)
Resource Hijacking diff --git a/impact/spamming.md b/impact/spamming.md index 69ed572..11c5deb 100644 --- a/impact/spamming.md +++ b/impact/spamming.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0039**| -|**Objective(s)**|[Impact](../impact)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0039
Objective(s)Impact
Related ATT&CK TechniquesNone
Spamming diff --git a/lateral-movement/supply-chain-compromise.md b/lateral-movement/supply-chain-compromise.md index 0b6b920..e33f413 100644 --- a/lateral-movement/supply-chain-compromise.md +++ b/lateral-movement/supply-chain-compromise.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1195**| -|**Objective(s)**|[Lateral Movement](../lateral-movement)| -|**Related ATT&CK Technique**|Supply Chain Compromise ([T1195](https://attack.mitre.org/techniques/T1195/), [T1474](https://attack.mitre.org/techniques/T1474/))| + + + + + + + + + + + + + + +
IDE1195
Objective(s)Lateral Movement
Related ATT&CK TechniquesT1195, T1474
Supply Chain Compromise diff --git a/micro-behaviors/communication/dns-communication.md b/micro-behaviors/communication/dns-communication.md index db4b3be..99b61f4 100644 --- a/micro-behaviors/communication/dns-communication.md +++ b/micro-behaviors/communication/dns-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0011**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0011
Objective(s)Communication
Related ATT&CK TechniquesNone
DNS Communication diff --git a/micro-behaviors/communication/ftp-communication.md b/micro-behaviors/communication/ftp-communication.md index 60a1600..0f8b786 100644 --- a/micro-behaviors/communication/ftp-communication.md +++ b/micro-behaviors/communication/ftp-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0004**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0004
Objective(s)Communication
Related ATT&CK TechniquesNone
FTP Communication diff --git a/micro-behaviors/communication/http-communication.md b/micro-behaviors/communication/http-communication.md index 0819459..8efebc9 100644 --- a/micro-behaviors/communication/http-communication.md +++ b/micro-behaviors/communication/http-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0002**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0002
Objective(s)Communication
Related ATT&CK TechniquesNone
HTTP Communication diff --git a/micro-behaviors/communication/icmp-communication.md b/micro-behaviors/communication/icmp-communication.md index fdab99f..5523d28 100644 --- a/micro-behaviors/communication/icmp-communication.md +++ b/micro-behaviors/communication/icmp-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0014**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0014
Objective(s)Communication
Related ATT&CK TechniquesNone
ICMP Communication diff --git a/micro-behaviors/communication/interprocess-communication.md b/micro-behaviors/communication/interprocess-communication.md index 7ec4374..3945f6b 100644 --- a/micro-behaviors/communication/interprocess-communication.md +++ b/micro-behaviors/communication/interprocess-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0003**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0003
Objective(s)Communication
Related ATT&CK TechniquesNone
Interprocess Communication diff --git a/micro-behaviors/communication/smtp-communication.md b/micro-behaviors/communication/smtp-communication.md index bc0f9fd..aeac90e 100644 --- a/micro-behaviors/communication/smtp-communication.md +++ b/micro-behaviors/communication/smtp-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0012**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0012
Objective(s)Communication
Related ATT&CK TechniquesNone
SMTP Communication diff --git a/micro-behaviors/communication/socket-communication.md b/micro-behaviors/communication/socket-communication.md index f2e9388..1eaa0b6 100644 --- a/micro-behaviors/communication/socket-communication.md +++ b/micro-behaviors/communication/socket-communication.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0001**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0001
Objective(s)Communication
Related ATT&CK TechniquesNone
Socket Communication diff --git a/micro-behaviors/communication/wininet.md b/micro-behaviors/communication/wininet.md index 445ea18..e5e6cec 100644 --- a/micro-behaviors/communication/wininet.md +++ b/micro-behaviors/communication/wininet.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0005**| -|**Objective(s)**|[Communication](../communication)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0005
Objective(s)Communication
Related ATT&CK TechniquesNone
WinINet diff --git a/micro-behaviors/cryptography/crypto-lib.md b/micro-behaviors/cryptography/crypto-lib.md index 31779a5..d9d408a 100644 --- a/micro-behaviors/cryptography/crypto-lib.md +++ b/micro-behaviors/cryptography/crypto-lib.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0059**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0059
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Crypto Library diff --git a/micro-behaviors/cryptography/cryptographic-hash.md b/micro-behaviors/cryptography/cryptographic-hash.md index b55ced5..fa9f2d3 100644 --- a/micro-behaviors/cryptography/cryptographic-hash.md +++ b/micro-behaviors/cryptography/cryptographic-hash.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0029**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0029
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Cryptographic Hash diff --git a/micro-behaviors/cryptography/decrypt-data.md b/micro-behaviors/cryptography/decrypt-data.md index 3754303..18a6d23 100644 --- a/micro-behaviors/cryptography/decrypt-data.md +++ b/micro-behaviors/cryptography/decrypt-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0031**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0031
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Decrypt Data diff --git a/micro-behaviors/cryptography/encrypt-data.md b/micro-behaviors/cryptography/encrypt-data.md index 2b507c1..94625fa 100644 --- a/micro-behaviors/cryptography/encrypt-data.md +++ b/micro-behaviors/cryptography/encrypt-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0027**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0027
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Encrypt Data diff --git a/micro-behaviors/cryptography/encryption-key.md b/micro-behaviors/cryptography/encryption-key.md index 04269ae..3ce0dab 100644 --- a/micro-behaviors/cryptography/encryption-key.md +++ b/micro-behaviors/cryptography/encryption-key.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0028**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0028
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Encryption Key diff --git a/micro-behaviors/cryptography/generate-pseudorandom-sequence.md b/micro-behaviors/cryptography/generate-pseudorandom-sequence.md index b08d7cf..cce3a3d 100644 --- a/micro-behaviors/cryptography/generate-pseudorandom-sequence.md +++ b/micro-behaviors/cryptography/generate-pseudorandom-sequence.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0021**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0021
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Generate Pseudo-random Sequence diff --git a/micro-behaviors/cryptography/hashed-message-authentication-code.md b/micro-behaviors/cryptography/hashed-message-authentication-code.md index fa5670a..6c79006 100644 --- a/micro-behaviors/cryptography/hashed-message-authentication-code.md +++ b/micro-behaviors/cryptography/hashed-message-authentication-code.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0061**| -|**Objective(s)**|[Cryptography](../cryptography)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0061
Objective(s)Cryptography
Related ATT&CK TechniquesNone
Hashed Message Authentication Code diff --git a/micro-behaviors/data/check-string.md b/micro-behaviors/data/check-string.md index ad76805..0bf0506 100644 --- a/micro-behaviors/data/check-string.md +++ b/micro-behaviors/data/check-string.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0019**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0019
Objective(s)Data
Related ATT&CK TechniquesNone
Check String diff --git a/micro-behaviors/data/checksum.md b/micro-behaviors/data/checksum.md index f182034..de3a302 100644 --- a/micro-behaviors/data/checksum.md +++ b/micro-behaviors/data/checksum.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0032**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0032
Objective(s)Data
Related ATT&CK TechniquesNone
Checksum diff --git a/micro-behaviors/data/compress-data.md b/micro-behaviors/data/compress-data.md index aa0d3e9..2b923fe 100644 --- a/micro-behaviors/data/compress-data.md +++ b/micro-behaviors/data/compress-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0024**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0024
Objective(s)Data
Related ATT&CK TechniquesNone
Compress Data diff --git a/micro-behaviors/data/compression-library.md b/micro-behaviors/data/compression-library.md index d36da5f..00c608d 100644 --- a/micro-behaviors/data/compression-library.md +++ b/micro-behaviors/data/compression-library.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0060**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0060
Objective(s)Data
Related ATT&CK TechniquesNone
Compression Library diff --git a/micro-behaviors/data/decode-data.md b/micro-behaviors/data/decode-data.md index 545e22e..d4e86ae 100644 --- a/micro-behaviors/data/decode-data.md +++ b/micro-behaviors/data/decode-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0053**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0053
Objective(s)Data
Related ATT&CK TechniquesNone
Decode Data diff --git a/micro-behaviors/data/decompress-data.md b/micro-behaviors/data/decompress-data.md index 522c50f..db18149 100644 --- a/micro-behaviors/data/decompress-data.md +++ b/micro-behaviors/data/decompress-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0025**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0025
Objective(s)Data
Related ATT&CK TechniquesNone
Decompress Data diff --git a/micro-behaviors/data/encode-data.md b/micro-behaviors/data/encode-data.md index 9275026..b8c031c 100644 --- a/micro-behaviors/data/encode-data.md +++ b/micro-behaviors/data/encode-data.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0026**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0026
Objective(s)Data
Related ATT&CK TechniquesNone
Encode Data diff --git a/micro-behaviors/data/modulo.md b/micro-behaviors/data/modulo.md index f0f59be..46c2565 100644 --- a/micro-behaviors/data/modulo.md +++ b/micro-behaviors/data/modulo.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0058**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0058
Objective(s)Data
Related ATT&CK TechniquesNone
Modulo diff --git a/micro-behaviors/data/noncryptographic-hash.md b/micro-behaviors/data/noncryptographic-hash.md index f826dae..c4f66f2 100644 --- a/micro-behaviors/data/noncryptographic-hash.md +++ b/micro-behaviors/data/noncryptographic-hash.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0030**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0030
Objective(s)Data
Related ATT&CK TechniquesNone
Non-Cryptographic Hash diff --git a/micro-behaviors/data/use-constant.md b/micro-behaviors/data/use-constant.md index ab1ae46..0e1ceeb 100644 --- a/micro-behaviors/data/use-constant.md +++ b/micro-behaviors/data/use-constant.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0020**| -|**Objective(s)**|[Data](../data)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0020
Objective(s)Data
Related ATT&CK TechniquesNone
Use Constant diff --git a/micro-behaviors/file-system/alter-file-extension.md b/micro-behaviors/file-system/alter-file-extension.md index 1c29efe..d8e2b00 100644 --- a/micro-behaviors/file-system/alter-file-extension.md +++ b/micro-behaviors/file-system/alter-file-extension.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0015**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0015
Objective(s)File System
Related ATT&CK TechniquesNone
Alter File Extension diff --git a/micro-behaviors/file-system/copy-file.md b/micro-behaviors/file-system/copy-file.md index e6e17ae..bf8d7b2 100644 --- a/micro-behaviors/file-system/copy-file.md +++ b/micro-behaviors/file-system/copy-file.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0045**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0045
Objective(s)File System
Related ATT&CK TechniquesNone
Copy File diff --git a/micro-behaviors/file-system/create-directory.md b/micro-behaviors/file-system/create-directory.md index 4c3cc4a..d892a24 100644 --- a/micro-behaviors/file-system/create-directory.md +++ b/micro-behaviors/file-system/create-directory.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0046**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0046
Objective(s)File System
Related ATT&CK TechniquesNone
Create Directory diff --git a/micro-behaviors/file-system/create-file.md b/micro-behaviors/file-system/create-file.md index b5170bf..0dcb27d 100644 --- a/micro-behaviors/file-system/create-file.md +++ b/micro-behaviors/file-system/create-file.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0016**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0016
Objective(s)File System
Related ATT&CK TechniquesNone
Create File diff --git a/micro-behaviors/file-system/delete-directory.md b/micro-behaviors/file-system/delete-directory.md index 38f458a..f2e82f4 100644 --- a/micro-behaviors/file-system/delete-directory.md +++ b/micro-behaviors/file-system/delete-directory.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0048**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0048
Objective(s)File System
Related ATT&CK TechniquesNone
Delete Directory diff --git a/micro-behaviors/file-system/delete-file.md b/micro-behaviors/file-system/delete-file.md index 045a9a8..837c9bb 100644 --- a/micro-behaviors/file-system/delete-file.md +++ b/micro-behaviors/file-system/delete-file.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0047**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0047
Objective(s)File System
Related ATT&CK TechniquesNone
Delete File diff --git a/micro-behaviors/file-system/get-file-attributes.md b/micro-behaviors/file-system/get-file-attributes.md index 26427a1..55caf4a 100644 --- a/micro-behaviors/file-system/get-file-attributes.md +++ b/micro-behaviors/file-system/get-file-attributes.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0049**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0049
Objective(s)File System
Related ATT&CK TechniquesNone
Get File Attributes diff --git a/micro-behaviors/file-system/move-file.md b/micro-behaviors/file-system/move-file.md index 7391aaa..4014ba1 100644 --- a/micro-behaviors/file-system/move-file.md +++ b/micro-behaviors/file-system/move-file.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0063**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0063
Objective(s)File System
Related ATT&CK TechniquesNone
Move File diff --git a/micro-behaviors/file-system/read-file.md b/micro-behaviors/file-system/read-file.md index 3164c78..b97e6af 100644 --- a/micro-behaviors/file-system/read-file.md +++ b/micro-behaviors/file-system/read-file.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0051**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0051
Objective(s)File System
Related ATT&CK TechniquesNone
Read File diff --git a/micro-behaviors/file-system/read-virtual-disk.md b/micro-behaviors/file-system/read-virtual-disk.md index aa3d10e..99ce0ca 100644 --- a/micro-behaviors/file-system/read-virtual-disk.md +++ b/micro-behaviors/file-system/read-virtual-disk.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0056**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0056
Objective(s)File System
Related ATT&CK TechniquesNone
Read Virtual Disk diff --git a/micro-behaviors/file-system/set-file-attributes.md b/micro-behaviors/file-system/set-file-attributes.md index c868339..f3763ca 100644 --- a/micro-behaviors/file-system/set-file-attributes.md +++ b/micro-behaviors/file-system/set-file-attributes.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0050**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0050
Objective(s)File System
Related ATT&CK TechniquesNone
Set File Attributes diff --git a/micro-behaviors/file-system/write-file.md b/micro-behaviors/file-system/write-file.md index 2713a0c..60488e5 100644 --- a/micro-behaviors/file-system/write-file.md +++ b/micro-behaviors/file-system/write-file.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0052**| -|**Objective(s)**|[File System](../file-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0052
Objective(s)File System
Related ATT&CK TechniquesNone
Writes File diff --git a/micro-behaviors/hardware/install-driver.md b/micro-behaviors/hardware/install-driver.md index 1085a3c..20d1461 100644 --- a/micro-behaviors/hardware/install-driver.md +++ b/micro-behaviors/hardware/install-driver.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0037**| -|**Objective(s)**|[Hardware](../hardware)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0037
Objective(s)Hardware
Related ATT&CK TechniquesNone
Install Driver diff --git a/micro-behaviors/hardware/load-driver.md b/micro-behaviors/hardware/load-driver.md index 7b1850b..dda960d 100644 --- a/micro-behaviors/hardware/load-driver.md +++ b/micro-behaviors/hardware/load-driver.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0023**| -|**Objective(s)**|[Hardware](../hardware)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0023
Objective(s)Hardware
Related ATT&CK TechniquesNone
Load Driver diff --git a/micro-behaviors/hardware/simulate-hardware.md b/micro-behaviors/hardware/simulate-hardware.md index a314460..23dd2c6 100644 --- a/micro-behaviors/hardware/simulate-hardware.md +++ b/micro-behaviors/hardware/simulate-hardware.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0057**| -|**Objective(s)**|[Hardware](../hardware)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0057
Objective(s)Hardware
Related ATT&CK TechniquesNone
Simulate Hardware diff --git a/micro-behaviors/memory/allocate-memory.md b/micro-behaviors/memory/allocate-memory.md index 6dfb160..a9f307a 100644 --- a/micro-behaviors/memory/allocate-memory.md +++ b/micro-behaviors/memory/allocate-memory.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0007**| -|**Objective(s)**|[Memory](../memory)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0007
Objective(s)Memory
Related ATT&CK TechniquesNone
Allocate Memory diff --git a/micro-behaviors/memory/change-memory-protection.md b/micro-behaviors/memory/change-memory-protection.md index a88d887..29372ef 100644 --- a/micro-behaviors/memory/change-memory-protection.md +++ b/micro-behaviors/memory/change-memory-protection.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0008**| -|**Objective(s)**|[Memory](../memory)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0008
Objective(s)Memory
Related ATT&CK TechniquesNone
Change Memory Protection diff --git a/micro-behaviors/memory/free-memory.md b/micro-behaviors/memory/free-memory.md index 41ebd08..cc5a972 100644 --- a/micro-behaviors/memory/free-memory.md +++ b/micro-behaviors/memory/free-memory.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0044**| -|**Objective(s)**|[Memory](../memory)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0044
Objective(s)Memory
Related ATT&CK TechniquesNone
Free Memory diff --git a/micro-behaviors/memory/heap-spray.md b/micro-behaviors/memory/heap-spray.md index 3675bba..4adc212 100644 --- a/micro-behaviors/memory/heap-spray.md +++ b/micro-behaviors/memory/heap-spray.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0006**| -|**Objective(s)**|[Memory](../memory)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0006
Objective(s)Memory
Related ATT&CK TechniquesNone
Heap Spray diff --git a/micro-behaviors/memory/overflow-buffer.md b/micro-behaviors/memory/overflow-buffer.md index ce239a0..8a12278 100644 --- a/micro-behaviors/memory/overflow-buffer.md +++ b/micro-behaviors/memory/overflow-buffer.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0010**| -|**Objective(s)**|[Memory](../memory)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0010
Objective(s)Memory
Related ATT&CK TechniquesNone
Overflow Buffer diff --git a/micro-behaviors/memory/stack-pivot.md b/micro-behaviors/memory/stack-pivot.md index a896f92..e1a83ba 100644 --- a/micro-behaviors/memory/stack-pivot.md +++ b/micro-behaviors/memory/stack-pivot.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0009**| -|**Objective(s)**|[Memory](../memory)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0009
Objective(s)Memory
Related ATT&CK TechniquesNone
Stack Pivot diff --git a/micro-behaviors/operating-system/console.md b/micro-behaviors/operating-system/console.md index 89bebfd..6bec672 100644 --- a/micro-behaviors/operating-system/console.md +++ b/micro-behaviors/operating-system/console.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0033**| -|**Objective(s)**|[Operating System](../operating-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0033
Objective(s)Operating System
Related ATT&CK TechniquesNone
Console diff --git a/micro-behaviors/operating-system/environment-variable.md b/micro-behaviors/operating-system/environment-variable.md index ce64564..3560976 100644 --- a/micro-behaviors/operating-system/environment-variable.md +++ b/micro-behaviors/operating-system/environment-variable.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0034**| -|**Objective(s)**|[Operating System](../operating-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0034
Objective(s)Operating System
Related ATT&CK TechniquesNone
Environment Variable diff --git a/micro-behaviors/operating-system/registry.md b/micro-behaviors/operating-system/registry.md index efe9681..651386b 100644 --- a/micro-behaviors/operating-system/registry.md +++ b/micro-behaviors/operating-system/registry.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0036**| -|**Objective(s)**|[Operating System](../operating-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0036
Objective(s)Operating System
Related ATT&CK TechniquesNone
Registry diff --git a/micro-behaviors/operating-system/wallpaper.md b/micro-behaviors/operating-system/wallpaper.md index 232a06e..1040b3e 100644 --- a/micro-behaviors/operating-system/wallpaper.md +++ b/micro-behaviors/operating-system/wallpaper.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0035**| -|**Objective(s)**|[Operating System](../operating-system)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0035
Objective(s)Operating System
Related ATT&CK TechniquesNone
Wallpaper diff --git a/micro-behaviors/process/allocate-thread-local-storage.md b/micro-behaviors/process/allocate-thread-local-storage.md index 64b9852..40b7666 100644 --- a/micro-behaviors/process/allocate-thread-local-storage.md +++ b/micro-behaviors/process/allocate-thread-local-storage.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0040**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0040
Objective(s)Process
Related ATT&CK TechniquesNone
Allocate Thread Local Storage diff --git a/micro-behaviors/process/check-mutex.md b/micro-behaviors/process/check-mutex.md index b5c8699..36c75ad 100644 --- a/micro-behaviors/process/check-mutex.md +++ b/micro-behaviors/process/check-mutex.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0043**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0043
Objective(s)Process
Related ATT&CK TechniquesNone
Check Mutex diff --git a/micro-behaviors/process/create-mutex.md b/micro-behaviors/process/create-mutex.md index 94f68ac..e28b09f 100644 --- a/micro-behaviors/process/create-mutex.md +++ b/micro-behaviors/process/create-mutex.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0042**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0042
Objective(s)Process
Related ATT&CK TechniquesNone
Create Mutex diff --git a/micro-behaviors/process/create-process.md b/micro-behaviors/process/create-process.md index 8d286e0..01649c6 100644 --- a/micro-behaviors/process/create-process.md +++ b/micro-behaviors/process/create-process.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0017**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0017
Objective(s)Process
Related ATT&CK TechniquesNone
Create Process diff --git a/micro-behaviors/process/create-thread.md b/micro-behaviors/process/create-thread.md index 34716a2..d983c22 100644 --- a/micro-behaviors/process/create-thread.md +++ b/micro-behaviors/process/create-thread.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0038**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0038
Objective(s)Process
Related ATT&CK TechniquesNone
Create Thread diff --git a/micro-behaviors/process/enumerate-threads.md b/micro-behaviors/process/enumerate-threads.md index 1e64c85..28ee3b4 100644 --- a/micro-behaviors/process/enumerate-threads.md +++ b/micro-behaviors/process/enumerate-threads.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0064**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0064
Objective(s)Process
Related ATT&CK TechniquesNone
Enumerate Threads diff --git a/micro-behaviors/process/open-process.md b/micro-behaviors/process/open-process.md index 4607a00..72e1ac5 100644 --- a/micro-behaviors/process/open-process.md +++ b/micro-behaviors/process/open-process.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0065**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0065
Objective(s)Process
Related ATT&CK TechniquesNone
Open Process diff --git a/micro-behaviors/process/open-thread.md b/micro-behaviors/process/open-thread.md index 1b6a1db..7ae60e7 100644 --- a/micro-behaviors/process/open-thread.md +++ b/micro-behaviors/process/open-thread.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0066**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0066
Objective(s)Process
Related ATT&CK TechniquesNone
Open Thread diff --git a/micro-behaviors/process/resume-thread.md b/micro-behaviors/process/resume-thread.md index 832764f..0d2b3f7 100644 --- a/micro-behaviors/process/resume-thread.md +++ b/micro-behaviors/process/resume-thread.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0054**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0054
Objective(s)Process
Related ATT&CK TechniquesNone
Resume Thread diff --git a/micro-behaviors/process/set-thread-local-storage-value.md b/micro-behaviors/process/set-thread-local-storage-value.md index dd71415..fbde991 100644 --- a/micro-behaviors/process/set-thread-local-storage-value.md +++ b/micro-behaviors/process/set-thread-local-storage-value.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0041**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0041
Objective(s)Process
Related ATT&CK TechniquesNone
Set Thread Local Storage Value diff --git a/micro-behaviors/process/suspend-thread.md b/micro-behaviors/process/suspend-thread.md index ec5f53b..98ad0d2 100644 --- a/micro-behaviors/process/suspend-thread.md +++ b/micro-behaviors/process/suspend-thread.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0055**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0055
Objective(s)Process
Related ATT&CK TechniquesNone
Suspend Thread diff --git a/micro-behaviors/process/synchronization.md b/micro-behaviors/process/synchronization.md index 960b27c..727bdc6 100644 --- a/micro-behaviors/process/synchronization.md +++ b/micro-behaviors/process/synchronization.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0022**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0022
Objective(s)Process
Related ATT&CK TechniquesNone
Synchronization diff --git a/micro-behaviors/process/terminate-process.md b/micro-behaviors/process/terminate-process.md index de22413..5b9841a 100644 --- a/micro-behaviors/process/terminate-process.md +++ b/micro-behaviors/process/terminate-process.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0018**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0018
Objective(s)Process
Related ATT&CK TechniquesNone
Terminate Process diff --git a/micro-behaviors/process/terminate-thread.md b/micro-behaviors/process/terminate-thread.md index 07ca582..7385d45 100644 --- a/micro-behaviors/process/terminate-thread.md +++ b/micro-behaviors/process/terminate-thread.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**C0039**| -|**Objective(s)**|[Process](../process)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDC0039
Objective(s)Process
Related ATT&CK TechniquesNone
Terminate Thread diff --git a/persistence/component-firmware.md b/persistence/component-firmware.md index ff027df..b64e080 100644 --- a/persistence/component-firmware.md +++ b/persistence/component-firmware.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0009**| -|**Objective(s)**|[Impact](../impact), [Persistence](../persistence), [Defense Evasion](../defense-evasion)| -|**Related ATT&CK Sub-Technique**|[Pre-OS Boot: Component Firmware](https://attack.mitre.org/techniques/T1542/002/)| + + + + + + + + + + + + + + +
IDF0009
Objective(s)Impact, Persistence, Defense Evasion
Related ATT&CK TechniquesPre-OS Boot: Component Firmware
Component Firmware diff --git a/persistence/kernel-modules-and-extensions.md b/persistence/kernel-modules-and-extensions.md index 144445a..bb2a564 100644 --- a/persistence/kernel-modules-and-extensions.md +++ b/persistence/kernel-modules-and-extensions.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0010**| -|**Objective(s)**|[Persistence](../persistence), [Privilege Escalation](../privilege-escalation)| -|**Related ATT&CK Sub-Technique**|[Boot or Logon Autostart Execution: Kernel Modules and Extensions](https://attack.mitre.org/techniques/T1547/006/)| + + + + + + + + + + + + + + +
IDF0010
Objective(s)Persistence, Privilege Escalation
Related ATT&CK TechniquesBoot or Logon Autostart Execution: Kernel Modules and Extensions
Kernel Modules and Extensions diff --git a/persistence/malicious-network-driver.md b/persistence/malicious-network-driver.md index a551b26..93363be 100644 --- a/persistence/malicious-network-driver.md +++ b/persistence/malicious-network-driver.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0026**| -|**Objective(s)**|[Lateral Movement](../lateral-movement), [Persistence](../persistence)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0026
Objective(s)Lateral Movement, Persistence
Related ATT&CK TechniquesNone
Malicious Network Driver diff --git a/persistence/modify-existing-service.md b/persistence/modify-existing-service.md index f71a9d4..898e4e8 100644 --- a/persistence/modify-existing-service.md +++ b/persistence/modify-existing-service.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0011**| -|**Objective(s)**|[Persistence](../persistence), [Privilege Escalation](../privilege-escalation)| -|**Related ATT&CK Sub-Technique**|[Create or Modify System Process::Windows Service](https://attack.mitre.org/techniques/T1543/003/)| + + + + + + + + + + + + + + +
IDF0011
Objective(s)Persistence, Privilege Escalation
Related ATT&CK TechniquesCreate or Modify System Process::Windows Service
Modify Existing Service diff --git a/persistence/registry-run-keys-startup-folder.md b/persistence/registry-run-keys-startup-folder.md index 0789917..6e51baa 100644 --- a/persistence/registry-run-keys-startup-folder.md +++ b/persistence/registry-run-keys-startup-folder.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**F0012**| -|**Objective(s)**|[Persistence](../persistence)| -|**Related ATT&CK Sub-Technique**|[Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder](https://attack.mitre.org/techniques/T1547/001/)| + + + + + + + + + + + + + + +
IDF0012
Objective(s)Persistence
Related ATT&CK TechniquesBoot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Registry Run Keys / Startup Folder diff --git a/persistence/shutdown-event.md b/persistence/shutdown-event.md index f2c3ed5..45547fa 100644 --- a/persistence/shutdown-event.md +++ b/persistence/shutdown-event.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**B0035**| -|**Objective(s)**|[Persistence](../persistence)| -|**Related ATT&CK Technique**|None| + + + + + + + + + + + + + + +
IDB0035
Objective(s)Persistence
Related ATT&CK TechniquesNone
Shutdown Event diff --git a/privilege-escalation/install-certificate.md b/privilege-escalation/install-certificate.md index c1b2138..0a17775 100644 --- a/privilege-escalation/install-certificate.md +++ b/privilege-escalation/install-certificate.md @@ -1,8 +1,18 @@ -||| -|---|---| -|**ID**|**E1608**| -|**Objective(s)**|[Privilege Escalation](../privilege-escalation)| -|**Related ATT&CK Technique**|[Stage Capabilities: Install Digital Certificate](https://attack.mitre.org/techniques/T1608/003/)| + + + + + + + + + + + + + + +
IDE1608
Objective(s)Privilege Escalation
Related ATT&CK TechniquesStage Capabilities: Install Digital Certificate
Install Certificate diff --git a/xample-malware/bagle.md b/xample-malware/bagle.md index ec7f1fa..185e066 100644 --- a/xample-malware/bagle.md +++ b/xample-malware/bagle.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0001**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2004| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0001
AliasesNone
PlatformsWindows
Year2004
Associated ATT&CK SoftwareNone
Bagle diff --git a/xample-malware/blackenergy.md b/xample-malware/blackenergy.md index 1e9fa90..b25c48c 100644 --- a/xample-malware/blackenergy.md +++ b/xample-malware/blackenergy.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0002**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2007| -|**Associated ATT&CK Software**|[BlackEnergy](https://attack.mitre.org/software/S0089/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0002
AliasesNone
PlatformsWindows
Year2007
Associated ATT&CK SoftwareBlackEnergy
BlackEnergy diff --git a/xample-malware/conficker.md b/xample-malware/conficker.md index 1cd0f64..68e5585 100644 --- a/xample-malware/conficker.md +++ b/xample-malware/conficker.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0003**| -|**Aliases**|Downup, Downadup, Kido| -|**Platforms**|Windows| -|**Year**|2008| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0003
AliasesDownup, Downadup, Kido
PlatformsWindows
Year2008
Associated ATT&CK SoftwareNone
Conficker diff --git a/xample-malware/cryptolocker.md b/xample-malware/cryptolocker.md index e8af6cd..7db3fb2 100644 --- a/xample-malware/cryptolocker.md +++ b/xample-malware/cryptolocker.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0030**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2013| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0030
AliasesNone
PlatformsWindows
Year2013
Associated ATT&CK SoftwareNone
CryptoLocker diff --git a/xample-malware/cryptowall.md b/xample-malware/cryptowall.md index 75e3364..d1b128a 100644 --- a/xample-malware/cryptowall.md +++ b/xample-malware/cryptowall.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0029**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2014| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0029
AliasesNone
PlatformsWindows
Year2014
Associated ATT&CK SoftwareNone
CryptoWall diff --git a/xample-malware/dark-comet.md b/xample-malware/dark-comet.md index 903fc70..6da347f 100644 --- a/xample-malware/dark-comet.md +++ b/xample-malware/dark-comet.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0004**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2008| -|**Associated ATT&CK Software**|[DarkComet](https://attack.mitre.org/software/S0334/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0004
AliasesNone
PlatformsWindows
Year2008
Associated ATT&CK SoftwareDarkComet
Dark Comet diff --git a/xample-malware/dnschanger.md b/xample-malware/dnschanger.md index 5add888..8267f6f 100644 --- a/xample-malware/dnschanger.md +++ b/xample-malware/dnschanger.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0005**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2011| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0005
AliasesNone
PlatformsWindows
Year2011
Associated ATT&CK SoftwareNone
DNSChanger diff --git a/xample-malware/emotet.md b/xample-malware/emotet.md index dc79b4a..783c292 100644 --- a/xample-malware/emotet.md +++ b/xample-malware/emotet.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0028**| -|**Aliases**|Geodo| -|**Platforms**|Windows| -|**Year**|2018| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0028
AliasesGeodo
PlatformsWindows
Year2018
Associated ATT&CK SoftwareNone
Emotet diff --git a/xample-malware/gamut.md b/xample-malware/gamut.md index f603571..1c7f0cb 100644 --- a/xample-malware/gamut.md +++ b/xample-malware/gamut.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0006**| -|**Aliases**|Bobax| -|**Platforms**|Windows| -|**Year**|2014| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0006
AliasesBobax
PlatformsWindows
Year2014
Associated ATT&CK SoftwareNone
Gamut diff --git a/xample-malware/geneio.md b/xample-malware/geneio.md index 2443433..0562ff5 100644 --- a/xample-malware/geneio.md +++ b/xample-malware/geneio.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0007**| -|**Aliases**|| -|**Platforms**|OS X| -|**Year**|2015| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0007
AliasesNone
PlatformsOS X
Year2015
Associated ATT&CK SoftwareNone
Geneio diff --git a/xample-malware/gotbotkr.md b/xample-malware/gotbotkr.md index e4f9848..f0139b3 100644 --- a/xample-malware/gotbotkr.md +++ b/xample-malware/gotbotkr.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0027**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2019| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0027
AliasesNone
PlatformsWindows
Year2019
Associated ATT&CK SoftwareNone
GotBotKR diff --git a/xample-malware/gravity-rat.md b/xample-malware/gravity-rat.md index 8da2a60..60638bf 100644 --- a/xample-malware/gravity-rat.md +++ b/xample-malware/gravity-rat.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0032**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2018| -|**Associated ATT&CK Software**|[GravityRAT](https://attack.mitre.org/software/S0237/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0032
AliasesNone
PlatformsWindows
Year2018
Associated ATT&CK SoftwareGravityRAT
GravityRAT diff --git a/xample-malware/heriplor.md b/xample-malware/heriplor.md index 3969f89..87d6c26 100644 --- a/xample-malware/heriplor.md +++ b/xample-malware/heriplor.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0026**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2012| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0026
AliasesNone
PlatformsWindows
Year2012
Associated ATT&CK SoftwareNone
Heriplor diff --git a/xample-malware/hupigon.md b/xample-malware/hupigon.md index 486d51e..6e4d561 100644 --- a/xample-malware/hupigon.md +++ b/xample-malware/hupigon.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0008**| -|**Aliases**|Delf, Emerleox, Logsnif, Graybird, Pcclient| -|**Platforms**|Windows| -|**Year**|2013| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0008
AliasesDelf, Emerleox, Logsnif, Graybird, Pcclient
PlatformsWindows
Year2013
Associated ATT&CK SoftwareNone
Hupigon diff --git a/xample-malware/kovter.md b/xample-malware/kovter.md index e44bae0..705b303 100644 --- a/xample-malware/kovter.md +++ b/xample-malware/kovter.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0009**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2016| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0009
AliasesNone
PlatformsWindows
Year2016
Associated ATT&CK SoftwareNone
Kovter diff --git a/xample-malware/kraken.md b/xample-malware/kraken.md index 7b23e2b..afd3580 100644 --- a/xample-malware/kraken.md +++ b/xample-malware/kraken.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0010**| -|**Aliases**|Bobax| -|**Platforms**|Windows| -|**Year**|2008| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0010
AliasesBobax
PlatformsWindows
Year2008
Associated ATT&CK SoftwareNone
Kraken diff --git a/xample-malware/locky-bart.md b/xample-malware/locky-bart.md index 15ed17e..6992935 100644 --- a/xample-malware/locky-bart.md +++ b/xample-malware/locky-bart.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0011**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2017| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0011
AliasesNone
PlatformsWindows
Year2017
Associated ATT&CK SoftwareNone
Locky Bart diff --git a/xample-malware/mazarbot.md b/xample-malware/mazarbot.md index f9bc879..d29d314 100644 --- a/xample-malware/mazarbot.md +++ b/xample-malware/mazarbot.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0012**| -|**Aliases**|None| -|**Platforms**|Android| -|**Year**|2016| -|**Associated ATT&CK Software**|[MazarBOT](https://attack.mitre.org/software/S0303/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0012
AliasesNone
PlatformsAndroid
Year2016
Associated ATT&CK SoftwareMazarBOT
MazarBot diff --git a/xample-malware/mebromi.md b/xample-malware/mebromi.md index 87ed03a..103aa27 100644 --- a/xample-malware/mebromi.md +++ b/xample-malware/mebromi.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0013**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2011| -|**Associated ATT&CK Software**|[Mebromi](https://attack.mitre.org/software/S0001/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0013
AliasesNone
PlatformsWindows
Year2011
Associated ATT&CK SoftwareMebromi
Mebromi diff --git a/xample-malware/poison-ivy.md b/xample-malware/poison-ivy.md index 97f08d6..0ab215a 100644 --- a/xample-malware/poison-ivy.md +++ b/xample-malware/poison-ivy.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0014**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2005| -|**Associated ATT&CK Software**|[PoisonIvy](https://attack.mitre.org/software/S0012/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0014
AliasesNone
PlatformsWindows
Year2005
Associated ATT&CK SoftwarePoisonIvy
Poison-Ivy diff --git a/xample-malware/redhip.md b/xample-malware/redhip.md index 9866b63..4c5df90 100644 --- a/xample-malware/redhip.md +++ b/xample-malware/redhip.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0015**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2011| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0015
AliasesNone
PlatformsWindows
Year2011
Associated ATT&CK SoftwareNone
Redhip diff --git a/xample-malware/rombertik.md b/xample-malware/rombertik.md index 7b21cd3..1897480 100644 --- a/xample-malware/rombertik.md +++ b/xample-malware/rombertik.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0031**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2015| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0031
AliasesNone
PlatformsWindows
Year2015
Associated ATT&CK SoftwareNone
Rombertik diff --git a/xample-malware/samsam.md b/xample-malware/samsam.md index a3c4a40..56342b7 100644 --- a/xample-malware/samsam.md +++ b/xample-malware/samsam.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0016**| -|**Aliases**|MSIL/Samas.A, Samas, Samsa| -|**Platforms**|Windows| -|**Year**|2015| -|**Associated ATT&CK Software**|[SamSam](https://attack.mitre.org/software/S0370/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0016
AliasesMSIL/Samas.A, Samas, Samsa
PlatformsWindows
Year2015
Associated ATT&CK SoftwareSamSam
SamSam diff --git a/xample-malware/searchawesome.md b/xample-malware/searchawesome.md index d12ba9f..cb6b565 100644 --- a/xample-malware/searchawesome.md +++ b/xample-malware/searchawesome.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0017**| -|**Aliases**|| -|**Platforms**|Mac OSX| -|**Year**|2018| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0017
AliasesNone
PlatformsMac OSX
Year2018
Associated ATT&CK SoftwareNone
SearchAwesome diff --git a/xample-malware/shamoon.md b/xample-malware/shamoon.md index 00801e1..f5f99fc 100644 --- a/xample-malware/shamoon.md +++ b/xample-malware/shamoon.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0018**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2012| -|**Associated ATT&CK Software**|[Shamoon](https://attack.mitre.org/software/S0140/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0018
AliasesNone
PlatformsWindows
Year2012
Associated ATT&CK SoftwareShamoon
Shamoon diff --git a/xample-malware/stuxnet.md b/xample-malware/stuxnet.md index 8d64bf3..8b6e0a5 100644 --- a/xample-malware/stuxnet.md +++ b/xample-malware/stuxnet.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0019**| -|**Aliases**|Rootkit.Tmphider, W32.Temphid| -|**Platforms**|Windows| -|**Year**|2010| -|**Associated ATT&CK Software**|[Stuxnet](https://attack.mitre.org/software/S0603/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0019
AliasesRootkit.Tmphider, W32.Temphid
PlatformsWindows
Year2010
Associated ATT&CK SoftwareStuxnet
Stuxnet diff --git a/xample-malware/synful-knock.md b/xample-malware/synful-knock.md index 4f3cc83..dad54c3 100644 --- a/xample-malware/synful-knock.md +++ b/xample-malware/synful-knock.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0020**| -|**Aliases**|None| -|**Platforms**|Cisco| -|**Year**|2015| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0020
AliasesNone
PlatformsCisco
Year2015
Associated ATT&CK SoftwareNone
SYNful Knock diff --git a/xample-malware/terminator.md b/xample-malware/terminator.md index 463e73c..08d5c08 100644 --- a/xample-malware/terminator.md +++ b/xample-malware/terminator.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0021**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2013| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0021
AliasesNone
PlatformsWindows
Year2013
Associated ATT&CK SoftwareNone
Terminator diff --git a/xample-malware/trickbot.md b/xample-malware/trickbot.md index f0563bf..de72a11 100644 --- a/xample-malware/trickbot.md +++ b/xample-malware/trickbot.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0025**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2016| -|**Associated ATT&CK Software**|[TrickBot](https://attack.mitre.org/software/S0266/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0025
AliasesNone
PlatformsWindows
Year2016
Associated ATT&CK SoftwareTrickBot
TrickBot diff --git a/xample-malware/up007.md b/xample-malware/up007.md index 064e778..ec30745 100644 --- a/xample-malware/up007.md +++ b/xample-malware/up007.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0033**| -|**Aliases**|None| -|**Platforms**|Windows| -|**Year**|2016| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0033
AliasesNone
PlatformsWindows
Year2016
Associated ATT&CK SoftwareNone
UP007 Malware Family diff --git a/xample-malware/ursnif.md b/xample-malware/ursnif.md index 21bd85f..8bb61cc 100644 --- a/xample-malware/ursnif.md +++ b/xample-malware/ursnif.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0022**| -|**Aliases**|Dreambot, Gozi| -|**Platforms**|Windows| -|**Year**|2016| -|**Associated ATT&CK Software**|[Ursnif](https://attack.mitre.org/software/S0386/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0022
AliasesDreambot, Gozi
PlatformsWindows
Year2016
Associated ATT&CK SoftwareUrsnif
Ursnif diff --git a/xample-malware/webcobra.md b/xample-malware/webcobra.md index b669877..10cf025 100644 --- a/xample-malware/webcobra.md +++ b/xample-malware/webcobra.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0023**| -|**Aliases**|| -|**Platforms**|Windows| -|**Year**|2018| -|**Associated ATT&CK Software**|None| + + + + + + + + + + + + + + + + + + + + + + +
IDX0023
AliasesNone
PlatformsWindows
Year2018
Associated ATT&CK SoftwareNone
WebCobra diff --git a/xample-malware/yispecter.md b/xample-malware/yispecter.md index ea9f73e..2389ce0 100644 --- a/xample-malware/yispecter.md +++ b/xample-malware/yispecter.md @@ -1,10 +1,26 @@ -||| -|---|---| -|**ID**|**X0024**| -|**Aliases**|None| -|**Platforms**|iOS| -|**Year**|2015| -|**Associated ATT&CK Software**|[YiSpecter](https://attack.mitre.org/software/S0311/)| + + + + + + + + + + + + + + + + + + + + + + +
IDX0024
AliasesNone
PlatformsiOS
Year2015
Associated ATT&CK SoftwareYiSpecter
YiSpecter