MITRE ATT&CK

Adversary Tactics, Techniques & Mitigations

Tactics Adversary goals Techniques How attacks work Mitigations Countermeasures

Lateral Tool Transfer

ESXi Linux macOS

Non-Standard Port

ESXi Linux macOS

Protocol Tunneling

ESXi Linux macOS

Encrypted Channel

ESXi Linux macOS

Hijack Execution Flow

Linux macOS Windows

Modify Cloud Compute Infrastructure

Cloud Infrastructure Discovery

Acquire Infrastructure

Compromise Infrastructure

Establish Accounts

Compromise Accounts

Develop Capabilities

Obtain Capabilities

Gather Victim Identity Information

Gather Victim Network Information

Gather Victim Org Information

Gather Victim Host Information

Search Open Websites/Domains

Search Victim-Owned Websites

Active Scanning

Search Open Technical Databases

Search Closed Sources

Phishing for Information

Network Boundary Bridging

Network Devices

Weaken Encryption

Network Devices

Modify System Image

Network Devices

Data from Configuration Repository

Network Devices

Forge Web Credentials

SaaS Windows macOS

Stage Capabilities

Container Administration Command

Deploy Container

Windows Linux Containers

Build Image on Host

Container and Resource Discovery

System Location Discovery

IaaS Linux macOS

Group Policy Discovery

Cloud Storage Object Discovery

Reflective Code Loading

Linux macOS Windows

Multi-Factor Authentication Request Generation

Windows Linux macOS

Debugger Evasion

Linux macOS Windows

Plist File Modification

Serverless Execution

SaaS IaaS Office Suite

Steal or Forge Authentication Certificates

Windows Linux macOS

Cloud Administration Command

Device Driver Discovery

Linux macOS Windows

Windows Linux macOS

Log Enumeration

ESXi IaaS Linux

Linux macOS Office Suite

Financial Theft

Linux macOS Office Suite

Prev 1 2 3 4 5 Next