CSURFACE
THREAT SENSOR
Home
Analytics
News
About
Tools
Constellation
Libraries
CWE
CAPEC
MITRE ATT&CK
MITRE D3FEND
OWASP Top 10
Ransomware Groups
References
Support
EN
|
PT
MITRE ATT&CK
Adversary Tactics, Techniques & Mitigations
Tactics
Adversary goals
Techniques
How attacks work
Mitigations
Countermeasures
Platform
Containers
ESXi
IaaS
Identity Provider
Linux
Network Devices
Office Suite
PRE
SaaS
Windows
macOS
Threat Actor
safepay (150)
sicarii (146)
ransomhub (83)
thegentlemen (56)
qilin (55)
0apt (48)
nightspire (35)
stormous (34)
donex (33)
alphv (32)
play (31)
clop (31)
rhysida (28)
8base (28)
akira (26)
sinobi (25)
lockbit (25)
sarcoma (23)
conti (23)
cuba (23)
cactus (21)
darkside (20)
pear (20)
medusa (19)
nitrogen (19)
royal (19)
coinbasecartel (18)
devman (18)
everest (17)
blacksuit (17)
maze (16)
vicesociety (16)
revil (16)
hive (15)
bluelocker (15)
blackmatter (14)
ragnarlocker (13)
lynx (13)
trigona (13)
hunters (11)
payload (11)
threeam (11)
bianlian (11)
tengu (10)
crosslock (10)
blackbasta (9)
shinyhunters (7)
0mega (7)
braincipher (5)
dragonforce (5)
alphalocker (4)
medusalocker (1)
T1001
Data Obfuscation
ESXi
Linux
macOS
T1003
OS Credential Dumping
Linux
macOS
Windows
T1005
Data from Local System
ESXi
Linux
macOS
T1006
Direct Volume Access
Network Devices
Windows
T1007
System Service Discovery
Linux
macOS
Windows
T1008
Fallback Channels
Linux
Windows
macOS
T1010
Application Window Discovery
Linux
Windows
macOS
T1011
Exfiltration Over Other Network Medium
Linux
macOS
Windows
T1012
Query Registry
Windows
T1014
Rootkit
Linux
macOS
Windows
T1016
System Network Configuration Discovery
ESXi
Linux
macOS
T1018
Remote System Discovery
ESXi
Linux
macOS
T1020
Automated Exfiltration
Linux
macOS
Network Devices
T1021
Remote Services
Linux
macOS
Windows
T1025
Data from Removable Media
Linux
macOS
Windows
T1027
Obfuscated Files or Information
ESXi
Linux
macOS
T1029
Scheduled Transfer
Linux
macOS
Windows
T1030
Data Transfer Size Limits
Linux
macOS
Windows
T1033
System Owner/User Discovery
Linux
macOS
Network Devices
T1036
Masquerading
Containers
ESXi
Linux
T1037
Boot or Logon Initialization Scripts
macOS
Windows
Linux
T1039
Data from Network Shared Drive
Linux
macOS
Windows
T1040
Network Sniffing
Linux
macOS
Windows
T1041
Exfiltration Over C2 Channel
ESXi
Linux
macOS
T1046
Network Service Discovery
Containers
IaaS
Linux
T1047
Windows Management Instrumentation
Windows
T1048
Exfiltration Over Alternative Protocol
ESXi
IaaS
Linux
T1049
System Network Connections Discovery
Windows
IaaS
Linux
T1052
Exfiltration Over Physical Medium
Linux
macOS
Windows
T1053
Scheduled Task/Job
Windows
Linux
macOS
T1055
Process Injection
Linux
macOS
Windows
T1056
Input Capture
Linux
macOS
Network Devices
T1057
Process Discovery
ESXi
Linux
macOS
T1059
Command and Scripting Interpreter
ESXi
IaaS
Identity Provider
T1068
Exploitation for Privilege Escalation
Containers
Linux
macOS
T1069
Permission Groups Discovery
Containers
IaaS
Identity Provider
T1070
Indicator Removal
Containers
ESXi
Linux
T1071
Application Layer Protocol
Linux
macOS
Windows
T1072
Software Deployment Tools
Linux
macOS
Network Devices
T1074
Data Staged
Windows
IaaS
Linux
T1078
Valid Accounts
Containers
ESXi
IaaS
T1080
Taint Shared Content
Windows
SaaS
Linux
T1082
System Information Discovery
ESXi
IaaS
Linux
T1083
File and Directory Discovery
ESXi
Linux
macOS
T1087
Account Discovery
ESXi
IaaS
Identity Provider
T1090
Proxy
ESXi
Linux
macOS
T1091
Replication Through Removable Media
Windows
T1092
Communication Through Removable Media
Linux
macOS
Windows
T1095
Non-Application Layer Protocol
ESXi
Linux
macOS
T1098
Account Manipulation
Containers
ESXi
IaaS
1
2
3
4
5
Next
