technique: T1059 Command and Scripting Interpreter

tactics: Execution


technique: T1083 File and Directory Discovery

tactics: Discovery


technique: T1082 System Information Discovery


technique: T1098 Account Manipulation

tactics: Persistence; Privilege Escalation


technique: T1222 File and Directory Permissions Modification

tactics: Defense Evasion


technique: T1053 Scheduled Task/Job


technique: T1105 Ingress Tool Transfer

tactics: Command and Control


technique: T1027 Obfuscated Files or Information


technique: T1548 Abuse Elevation Control Mechanism

tactics: Defense Evasion; Privilege Escalation


technique: T1016 System Network Configuration Discovery


technique: T1037 Boot or Logon Initialization Scripts

tactics: Unmapped


technique: T1120 Peripheral Device Discovery


technique: T1003 OS Credential Dumping

tactics: Credential Access


technique: T1069 Permission Groups Discovery


technique: T1082: System Information Discovery


technique: T1590 Gather Victim Network Information


technique: T1071 Application Layer Protocol


technique: T1033 System Owner/User Discovery