ATT&CK 技术
技术 / 子技术数据查询与核对。
| ID | 名称 | 类型 | 领域 | 状态 | 操作 |
|---|---|---|---|---|---|
| T1039 | Data from Network Shared Drive | 技术 | enterprise | 启用 | |
| T1040 | Network Sniffing | 技术 | enterprise | 启用 | |
| T1041 | Exfiltration Over C2 Channel | 技术 | enterprise | 启用 | |
| T1046 | Network Service Discovery | 技术 | enterprise | 启用 | |
| T1047 | Windows Management Instrumentation | 技术 | enterprise | 启用 | |
| T1048 | Exfiltration Over Alternative Protocol | 技术 | enterprise | 启用 | |
| T1048.001 | Exfiltration Over Symmetric Encrypted Non-C2 Protocol | 子技术 | enterprise | 启用 | |
| T1048.002 | Exfiltration Over Asymmetric Encrypted Non-C2 Protocol | 子技术 | enterprise | 启用 | |
| T1048.003 | Exfiltration Over Unencrypted Non-C2 Protocol | 子技术 | enterprise | 启用 | |
| T1049 | System Network Connections Discovery | 技术 | enterprise | 启用 | |
| T1052 | Exfiltration Over Physical Medium | 技术 | enterprise | 启用 | |
| T1052.001 | Exfiltration over USB | 子技术 | enterprise | 启用 | |
| T1053 | Scheduled Task/Job | 技术 | enterprise | 启用 | |
| T1053.002 | At | 子技术 | enterprise | 启用 | |
| T1053.003 | Cron | 子技术 | enterprise | 启用 | |
| T1053.004 | Launchd | 子技术 | enterprise | 启用 | |
| T1053.005 | Scheduled Task | 子技术 | enterprise | 启用 | |
| T1053.006 | Systemd Timers | 子技术 | enterprise | 启用 | |
| T1053.007 | Container Orchestration Job | 子技术 | enterprise | 启用 | |
| T1055 | Process Injection | 技术 | enterprise | 启用 |