T1016.001_internet-connection-discovery
Adversaries may check for Internet connectivity on compromised systems.
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1016.002_wi-fi-discovery
Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1016_system-network-configuration-discovery
Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1018_remote-system-discovery
Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1020.001_traffic-duplication
Adversaries may leverage traffic mirroring in order to automate data exfiltration over compromised infrastructure.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1020_automated-exfiltration
Adversaries may exfiltrate data, such as sensitive documents, through the use of automated processing after being gathered during Collection.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1021.001_remote-desktop-protocol
Adversaries may use Valid Accounts to log into a computer using the Remote Desktop Protocol (RDP).
1.21k repo starsObserved in 1 repos
DevOps & Security
T1021.002_smbwindows-admin-shares
Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
1.21k repo starsObserved in 1 repos
DevOps & Security
T1021.003_distributed-component-object-model
Adversaries may use Valid Accounts to interact with remote machines by taking advantage of Distributed Component Object Model (DCOM).
1.21k repo starsObserved in 1 repos
DevOps & Security
T1021.004_ssh
Adversaries may use Valid Accounts to log into remote machines using Secure Shell (SSH).
1.21k repo starsObserved in 1 repos
DevOps & Security