T1219_remote-access-tools
An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T1220_xsl-script-processing
Adversaries may bypass application control and obscure execution of code by embedding scripts inside XSL files.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1221_template-injection
Adversaries may create or modify references in user document templates to conceal malicious code or force authentication attempts.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1222.001_windows-file-and-directory-permissions-modification
Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1222.002_linux-and-mac-file-and-directory-permissions-modification
Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1222_file-and-directory-permissions-modification
Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1406.001_steganography
Adversaries may use steganography techniques in order to prevent the detection of hidden information.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1406_obfuscated-files-or-information
Adversaries may attempt to make a payload or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the device or in transit.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1407_download-new-code-at-runtime
Adversaries may download and execute dynamic code not included in the original application package after installation.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
T1417.001_keylogging
Adversaries may log user keystrokes to intercept credentials or other information from the user as the user types them.
☆1.21k repo stars⑂201 repo forks
DevOps & Security