Created
February 16, 2024 21:33
-
-
Save dandye/17f541d27d3a47c1e155a2075cf8b71b to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"name": "GCP_Detections", | |
"versions": { | |
"attack": "14", | |
"navigator": "4.9.1", | |
"layer": "4.5" | |
}, | |
"domain": "enterprise-attack", | |
"description": "", | |
"filters": { | |
"platforms": [ | |
"Linux", | |
"Network", | |
"SaaS", | |
"Google Workspace", | |
"IaaS" | |
] | |
}, | |
"sorting": 0, | |
"layout": { | |
"layout": "side", | |
"aggregateFunction": "average", | |
"showID": false, | |
"showName": true, | |
"showAggregateScores": false, | |
"countUnscored": false, | |
"expandedSubtechniques": "annotated" | |
}, | |
"hideDisabled": true, | |
"techniques": [ | |
{ | |
"techniqueID": "T1113", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1037", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1037", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1037.004", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1037.004", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1557", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1557", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1557.003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1557.003", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1557.002", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1557.002", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1033", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1003.007", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1003.008", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1129", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1602", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1602.002", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1602.001", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1014", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1123", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1543", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1543", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1543.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1543.002", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1133", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1133", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1539", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1578", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1578.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1578.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1578.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1578.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1578.005", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1069", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1069.003", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1069.002", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1069.001", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1114", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1114.002", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1114.003", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1561", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1561.002", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1561.001", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1025", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1547", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1547", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1547.006", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1547.006", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1547.013", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1547.013", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1600", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1600.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1600.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1652", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1564.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.011", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.008", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.007", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1564.005", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1080", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1119", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1115", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1007", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1040", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1040", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1530", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1135", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1120", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1082", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1071", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1071.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1071.004", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1071.003", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1071.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1053", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1053", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1053.003", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.003", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.003", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.006", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.006", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.006", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.002", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1053.002", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1176", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1106", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1005", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1140", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1562.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.012", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.011", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.010", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1562.007", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1195", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1195.001", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1195.002", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1195.003", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1190", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1558", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1555", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1555.005", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1555.006", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1555.003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1555.002", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1567", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1567.001", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1567.003", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1567.002", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1567.004", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1219", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1036.008", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036.005", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1036.009", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1552", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1552.001", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1552.003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1552.008", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1552.005", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1659", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1659", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1055", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1055", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1055.009", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1055.009", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1055.014", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1055.014", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1055.008", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1055.008", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1205", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1205", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1205", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1205.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1205.001", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1205.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1205.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1205.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1205.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1218", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1620", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1611", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1010", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1029", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1525", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1572", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1550", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1550", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1550.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1550.004", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1550.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1550.001", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1011", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1011.001", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1560", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1560.002", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1560.001", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1560.003", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1021", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1021.005", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1021.007", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1021.008", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1021.004", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1491", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1491.002", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1491.001", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1535", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1563", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1563.001", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1217", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1092", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1222", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1222.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1548", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1548", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1548.001", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1548.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1548.005", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1548.005", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1548.003", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1548.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1125", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1016", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1016.002", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1016.001", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1087", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1087.003", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1087.004", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1087.002", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1087.001", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1090", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1090.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1090.003", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1090.004", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1090.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1059", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1059.005", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1059.004", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1059.008", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1059.006", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1059.009", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1059.007", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1020", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1020.001", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1070.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070.008", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070.009", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1070.007", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1083", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1568", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1568.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1568.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1568.003", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1074", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1074.001", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1074.002", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1649", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1049", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1542", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1542.003", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.005", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.005", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1542.004", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1497", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1497", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1497.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1497.002", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1497.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1497.001", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1497.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1497.003", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1102", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1102.003", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1102.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1102.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1104", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1657", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1480", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1480.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1619", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1654", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1528", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1204", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1204.002", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1204.003", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1204.001", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1057", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1072", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1072", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1041", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1606", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1606.001", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1606.002", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1621", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1554", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1212", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1210", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1534", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1199", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1098", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1098.001", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.001", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.002", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.003", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.003", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.005", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.005", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.004", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1098.004", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1048", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1048.002", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1048.003", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1048.001", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1566", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1566.002", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1566.001", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1566.004", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1566.003", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1110", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1110.004", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1110.002", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1110.001", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1110.003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1565", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1565.002", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1565.003", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1565.001", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1559", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1001.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1001.003", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1001.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1039", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1601", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1601.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1601.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1574", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1574", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1574", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1574.007", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1574.007", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1574.007", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1574.006", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1574.006", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1574.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1078.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.002", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.002", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.003", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.003", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.003", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.001", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.001", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1078.001", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1571", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1068", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1027.005", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.009", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.010", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.008", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.002", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1027.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1201", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1546", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1546", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1546.016", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1546.016", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1546.004", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1546.004", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1546.005", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1546.005", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1599", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1599.001", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1486", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1553", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1553.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1573", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1573.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1573.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1056", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1056", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1056.001", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1056.001", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1056.002", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1056.002", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1056.003", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1056.003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1203", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1570", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1095", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1030", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1499", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1499.003", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1499.002", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1499.004", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1499.001", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1614", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1614.001", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1656", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1132", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1132.001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1132.002", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1496", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1569", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1213", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1213.003", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1213.001", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1200", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1505", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1505.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1505.003", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1505.001", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1485", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1189", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1498", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1498.002", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1498.001", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1651", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1111", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1136", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1136.001", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1136.002", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1526", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1018", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1046", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1518", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1518.001", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1538", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1622", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1622", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1052", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1052.001", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1105", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1648", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1653", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1008", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1124", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1556", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1556", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": true | |
}, | |
{ | |
"techniqueID": "T1556.004", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.004", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.004", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.006", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.006", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.007", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.007", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.007", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.003", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.003", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1556.003", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1495", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1490", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1211", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
}, | |
{ | |
"techniqueID": "T1529", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [], | |
"links": [], | |
"showSubtechniques": false | |
} | |
], | |
"gradient": { | |
"colors": [ | |
"#ff6666ff", | |
"#ffe766ff", | |
"#8ec843ff" | |
], | |
"minValue": 0, | |
"maxValue": 100 | |
}, | |
"legendItems": [], | |
"metadata": [], | |
"links": [], | |
"showTacticRowBackground": false, | |
"tacticRowBackground": "#dddddd", | |
"selectTechniquesAcrossTactics": false, | |
"selectSubtechniquesWithParent": false, | |
"selectVisibleTechniques": true | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment