Technique List

Technique Name Technique ID's Categories Snippet(s) Rules(s) OS Creation Date
Obfuscated Files or Information: Compile After Delivery T1027.004 Defense Evasion [Mitre] 1 year, 8 months
Obfuscated Files or Information: Steganography T1027.003 Defense Evasion [Mitre] 1 year, 8 months
Obfuscated Files or Information: Software Packing T1027.002 Defense Evasion [Mitre] 1 year, 8 months
Obfuscated Files or Information: Binary Padding T1027.001 Defense Evasion [Mitre] 1 year, 8 months
Modify Registry T1112 Defense Evasion [Mitre] 1 year, 8 months
Modify Authentication Process: Hybrid Identity T1556.007 Defense Evasion [Mitre] 1 year, 8 months
Modify Authentication Process: Multi-Factor Authentication T1556.006 Defense Evasion [Mitre] 1 year, 8 months
Modify Authentication Process: Reversible Encryption T1556.005 Defense Evasion [Mitre] 1 year, 8 months
Modify Authentication Process: Password Filter DLL T1556.002 Defense Evasion [Mitre] 1 year, 8 months
Modify Authentication Process: Domain Controller Authentication T1556.001 Defense Evasion [Mitre] 1 year, 8 months
Modify Authentication Process T1556 Defense Evasion [Mitre] 1 year, 8 months
Masquerading: Double File Extension T1036.007 Defense Evasion [Mitre] 1 year, 8 months
Masquerading: Match Legitimate Name or Location T1036.005 Defense Evasion [Mitre] 1 year, 8 months
Masquerading: Masquerade Task or Service T1036.004 Defense Evasion [Mitre] 1 year, 8 months
Masquerading: Rename System Utilities T1036.003 Defense Evasion [Mitre] 1 year, 8 months
Masquerading: Right-to-Left Override T1036.002 Defense Evasion [Mitre] 1 year, 8 months
Masquerading: Invalid Code Signature T1036.001 Defense Evasion [Mitre] 1 year, 8 months
Indirect Command Execution T1202 Defense Evasion [Mitre] 1 year, 8 months
Indicator Removal: Clear Persistence T1070.009 Defense Evasion [Mitre] 1 year, 8 months
Indicator Removal: Clear Mailbox Data T1070.008 Defense Evasion [Mitre] 1 year, 8 months
Indicator Removal: Clear Network Connection History and Configurations T1070.007 Defense Evasion [Mitre] 1 year, 8 months
Indicator Removal: Network Share Connection Removal T1070.005 Defense Evasion [Mitre] 1 year, 8 months
Indicator Removal: File Deletion T1070.004 Defense Evasion [Mitre] 1 year, 8 months
Indicator Removal: Clear Command History T1070.003 Defense Evasion [Mitre] 1 year, 8 months
Impair Defenses: Downgrade Attack T1562.010 Defense Evasion [Mitre] 1 year, 8 months
Impair Defenses: Safe Mode Boot T1562.009 Defense Evasion [Mitre] 1 year, 8 months
Impair Defenses: Indicator Blocking T1562.006 Defense Evasion [Mitre] 1 year, 8 months
Impair Defenses: Disable or Modify System Firewall T1562.004 Defense Evasion [Mitre] 1 year, 8 months
Impair Defenses: Impair Command History Logging T1562.003 Defense Evasion [Mitre] 1 year, 8 months
Impair Defenses: Disable Windows Event Logging T1562.002 Defense Evasion [Mitre] 1 year, 8 months
Filter
Clear