T1204.001_malicious-link
An adversary may rely upon a user clicking a malicious link in order to gain execution.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1204.002_malicious-file
An adversary may rely upon a user opening a malicious file in order to gain execution.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1204.003_malicious-image
Adversaries may rely on a user running a malicious image to facilitate execution.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1204.004_malicious-copy-and-paste
An adversary may rely upon a user copying and pasting code in order to gain execution.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1204.005_malicious-library
Adversaries may rely on a user installing a malicious library to facilitate execution.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1204_user-execution
An adversary may rely upon specific actions by a user in order to gain execution.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1205.001_port-knocking
Adversaries may use port knocking to hide open ports used for persistence or command and control.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1205.002_socket-filters
Adversaries may attach filters to a network socket to monitor then activate backdoors used for persistence or command and control.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1205_traffic-signaling
Adversaries may use traffic signaling to hide open ports or other malicious functionality used for persistence or command and control.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1207_rogue-domain-controller
Adversaries may register a rogue Domain Controller to enable manipulation of Active Directory data.
☆1.21k repo stars⑂201 repo forks
DevOps & Security