T1037.004_rc-scripts
Adversaries may establish persistence by modifying RC scripts, which are executed during a Unix-like system’s startup.
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1037.005_startup-items
Adversaries may use startup items automatically executed at boot initialization to establish persistence.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1037_boot-or-logon-initialization-scripts
Adversaries may use scripts automatically executed at boot or logon initialization to establish persistence.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1039_data-from-network-shared-drive
Adversaries may search network shares on computers they have compromised to find files of interest.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1040_network-sniffing
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1041_exfiltration-over-c2-channel
Adversaries may steal data by exfiltrating it over an existing command and control channel.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1046_network-service-discovery
Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1047_windows-management-instrumentation
Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1048.001_exfiltration-over-symmetric-encrypted-non-c2-protocol
Adversaries may steal data by exfiltrating it over a symmetrically encrypted network protocol other than that of the existing command and control channel.
1.21k repo starsObserved in 1 repos
DevOps & Security
T1048.002_exfiltration-over-asymmetric-encrypted-non-c2-protocol
Adversaries may steal data by exfiltrating it over an asymmetrically encrypted network protocol other than that of the existing command and control channel.
1.21k repo starsObserved in 1 repos
DevOps & Security