T1134.005_sid-history-injection
Adversaries may use SID-History Injection to escalate privileges and bypass access controls.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1134_access-token-manipulation
Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1135_network-share-discovery
Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of in...
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1136.001_local-account
Adversaries may create a local account to maintain access to victim systems.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1136.002_domain-account
Adversaries may create a domain account to maintain access to victim systems.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1136.003_cloud-account
Adversaries may create a cloud account to maintain access to victim systems.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1136_create-account
Adversaries may create an account to maintain access to victim systems.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1137.001_office-template-macros
Adversaries may abuse Microsoft Office templates to obtain persistence on a compromised system.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1137.002_office-test
Adversaries may abuse the Microsoft Office "Office Test" Registry key to obtain persistence on a compromised system.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1137.003_outlook-forms
Adversaries may abuse Microsoft Outlook forms to obtain persistence on a compromised system.
☆1.21k repo stars⑂201 repo forks
DevOps & Security