Skip to content

Instantly share code, notes, and snippets.

@7h3rAm
Last active May 5, 2020 21:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save 7h3rAm/f73741a86e34ecaab6ef64041498e832 to your computer and use it in GitHub Desktop.
Save 7h3rAm/f73741a86e34ecaab6ef64041498e832 to your computer and use it in GitHub Desktop.
{
"name": "CIS MITRE ATT&CK Controls v1",
"version": "2.1",
"domain": "mitre-enterprise",
"description": "",
"filters": {
"stages": [
"act"
],
"platforms": [
"windows",
"linux",
"mac"
]
},
"sorting": 0,
"viewMode": 0,
"hideDisabled": false,
"techniques": [
{
"techniqueID": "T1015",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1015",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1087",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1182",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1182",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1103",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1103",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1010",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1123",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1131",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1119",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1020",
"tactic": "exfiltration",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1009",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1176",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1042",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1115",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1116",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1059",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1122",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1122",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1136",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1003",
"tactic": "credential-access",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1038",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1038",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1038",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1073",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1002",
"tactic": "exfiltration",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1022",
"tactic": "exfiltration",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1074",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1005",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1039",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1025",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1140",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1114",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1106",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1181",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1181",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1107",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1006",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1083",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1062",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1183",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1183",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1183",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1066",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1056",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1056",
"tactic": "credential-access",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1118",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1118",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1177",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1177",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1037",
"tactic": "lateral-movement",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1037",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1036",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1031",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1112",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1170",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1170",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1096",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1128",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1046",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1126",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1135",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1040",
"tactic": "credential-access",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1040",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1050",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1050",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1137",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1097",
"tactic": "lateral-movement",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1034",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1034",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1120",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1069",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1013",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1013",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1086",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1057",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1186",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1093",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1055",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1055",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1012",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1108",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1108",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1060",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1121",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1121",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1117",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1117",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1018",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1091",
"tactic": "lateral-movement",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1091",
"tactic": "initial-access",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1014",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1178",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1053",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1053",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1053",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1113",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1180",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1064",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1064",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1063",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1035",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1058",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1058",
"tactic": "privilege-escalation",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1023",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1045",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1082",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1016",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1049",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1033",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1007",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1124",
"tactic": "discovery",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1099",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1127",
"tactic": "defense-evasion",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1127",
"tactic": "execution",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1111",
"tactic": "credential-access",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1125",
"tactic": "collection",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1004",
"tactic": "persistence",
"color": "#c6dbef",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1073",
"tactic": "defense-evasion",
"color": "#c7e9c0",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1068",
"tactic": "privilege-escalation",
"color": "#c7e9c0",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1046",
"tactic": "discovery",
"color": "#c7e9c0",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1080",
"tactic": "lateral-movement",
"color": "#c7e9c0",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1100",
"tactic": "persistence",
"color": "#c7e9c0",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1100",
"tactic": "privilege-escalation",
"color": "#c7e9c0",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1134",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1134",
"tactic": "privilege-escalation",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1098",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1098",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1110",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1088",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1088",
"tactic": "privilege-escalation",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1136",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1003",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1089",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1133",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1133",
"tactic": "initial-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1107",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1187",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1061",
"tactic": "execution",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1062",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1070",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1056",
"tactic": "collection",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1056",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1031",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1112",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1126",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1050",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1050",
"tactic": "privilege-escalation",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1075",
"tactic": "lateral-movement",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1097",
"tactic": "lateral-movement",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1145",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1076",
"tactic": "lateral-movement",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1021",
"tactic": "lateral-movement",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1064",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1064",
"tactic": "execution",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1035",
"tactic": "execution",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1007",
"tactic": "discovery",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1111",
"tactic": "credential-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "defense-evasion",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "privilege-escalation",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "initial-access",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1100",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1100",
"tactic": "privilege-escalation",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1077",
"tactic": "lateral-movement",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1084",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1004",
"tactic": "persistence",
"color": "#fcf3a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1087",
"tactic": "discovery",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1098",
"tactic": "credential-access",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1098",
"tactic": "persistence",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1110",
"tactic": "credential-access",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1088",
"tactic": "defense-evasion",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1088",
"tactic": "privilege-escalation",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1070",
"tactic": "defense-evasion",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1171",
"tactic": "credential-access",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1075",
"tactic": "lateral-movement",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1091",
"tactic": "lateral-movement",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1091",
"tactic": "initial-access",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1063",
"tactic": "discovery",
"color": "#dadaeb",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1134",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1134",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1087",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1098",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1098",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1182",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1182",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1103",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1103",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1017",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1138",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1138",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1010",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1131",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1020",
"tactic": "exfiltration",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1110",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1042",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1059",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1043",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1092",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1090",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1136",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1003",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1094",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1024",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1038",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1038",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1038",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1132",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1001",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1074",
"tactic": "collection",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1030",
"tactic": "exfiltration",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1005",
"tactic": "collection",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1039",
"tactic": "collection",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1025",
"tactic": "collection",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1089",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1173",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1114",
"tactic": "collection",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1048",
"tactic": "exfiltration",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1041",
"tactic": "exfiltration",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1008",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1107",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1006",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1044",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1044",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1083",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1158",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1158",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1179",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1179",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1179",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1054",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1066",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1070",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1118",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1118",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1177",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1177",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1031",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1112",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1170",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1170",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1104",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1188",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1026",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1079",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1128",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1046",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1126",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1040",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1040",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1050",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1050",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1075",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1097",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1174",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1069",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1013",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1013",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1086",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1145",
"tactic": "credential-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1057",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1093",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1055",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1055",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1012",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1108",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1108",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1060",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1121",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1121",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1117",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1117",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1076",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1105",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1105",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1018",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1091",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1091",
"tactic": "initial-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1085",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1085",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1053",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1053",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1053",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1029",
"tactic": "exfiltration",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1064",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1064",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1101",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1035",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1051",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1071",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1032",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1095",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1007",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1124",
"tactic": "discovery",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1080",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1127",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1127",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1065",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1078",
"tactic": "initial-access",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1102",
"tactic": "command-and-control",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1102",
"tactic": "defense-evasion",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1100",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1100",
"tactic": "privilege-escalation",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1077",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1028",
"tactic": "execution",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1028",
"tactic": "lateral-movement",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
},
{
"techniqueID": "T1004",
"tactic": "persistence",
"color": "#fca2a2",
"comment": "",
"enabled": true,
"metadata": []
}
],
"gradient": {
"colors": [
"#ff6666",
"#ffe766",
"#8ec843"
],
"minValue": 0,
"maxValue": 100
},
"legendItems": [],
"metadata": [],
"showTacticRowBackground": false,
"tacticRowBackground": "#dddddd",
"selectTechniquesAcrossTactics": true
}
{
"name": "CIS MITRE ATT&CK Controls v2",
"version": "2.2",
"domain": "mitre-enterprise",
"description": "",
"filters": {
"stages": [
"act"
],
"platforms": [
"Windows",
"Linux",
"macOS"
]
},
"sorting": 0,
"viewMode": 0,
"hideDisabled": false,
"techniques": [
{ "techniqueID": "T1001", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1002", "tactic": "exfiltration", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1003", "tactic": "credential-access", "color": "#233f5c", "comment": "TSS: 35, CISC: 5, CISSC: 5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1004", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;109;110;125;129;130;131;132;134;135;171, CISC: 2;14;16;20, CISSC: 2.7;2.8;2.9;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1008", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1011", "tactic": "exfiltration", "color": "#233f5c", "comment": "TSS: 35;76, CISC: 5;11, CISSC: 5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1015", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 15;16;17;35;67;76;84;91;93;94;96;98;104;106;109, CISC: 2;5;9;11;12;13;14, CISSC: 2.7;2.8;2.9;5.1;9.2;11.1;12.11;12.12;12.2;12.9;13.2;13.4;14.1;14.3;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1017", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 15;16;17;22;23;27;28;29;30;31;33;34;35;59;80;81;92;93;120;122;125, CISC: 2;3;4;5;8;11;12;15;16, CISSC: 2.7;2.8;2.9;3.4;3.5;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;8.2;11.5;11.6;12.1;12.11;15.1;15.8;16.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1019", "tactic": "persistence", "color": "#eebbe9", "comment": "TSS: 22;23;27;28;29;31;33;34;35;59;76, CISC: 3;4;5;8;11, CISSC: 3.4;3.5;4.2;4.3;4.4;4.6;4.8;4.9;5.1;8.2;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1021", "tactic": "lateral-movement", "color": "#d3b98e", "comment": "TSS: 30;80;93;109;110;120;125;129;130;131;132;134;135;171, CISC: 4;11;12;14;15;16;20, CISSC: 4.5;11.5;12.11;14.6;14.7;15.8;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1023", "tactic": "persistence", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1024", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1026", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1027", "tactic": "defense-evasion", "color": "#777777", "comment": "TSS: 58;59;61;63, CISC: 8, CISSC: 8.1;8.2;8.4;8.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1028", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;27;28;29;30;31;33;34;35;49;81;92;96;122, CISC: 2;3;4;5;7;11;12;13;15, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;7.2;11.6;12.1;13.2;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1029", "tactic": "exfiltration", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1030", "tactic": "exfiltration", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1031", "tactic": "persistence", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;39;78;109;110;118;125;129;130;131;132;133;134;135;164;165;166;167;169;170;171, CISC: 3;5;11;14;15;16;20, CISSC: 3.1;3.2;3.3;3.5;5.5;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1032", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1034", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 15;16;17;19;20;21;23;33;34;35;39;78;109;110;118;125;129;130;131;132;133;134;135;164;165;166;167;169;170;171, CISC: 2;3;4;5;11;14;15;16;20, CISSC: 2.7;2.8;2.9;3.1;3.2;3.3;3.5;4.8;4.9;5.1;5.5;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1035", "tactic": "execution", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;109, CISC: 4;5;14, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1036", "tactic": "defense-evasion", "color": "#729ab7", "comment": "TSS: 15;16;17;33;34;35;109, CISC: 2;4;5;14, CISSC: 2.7;2.8;2.9;4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1037", "tactic": "persistence", "color": "#d3b98e", "comment": "TSS: 33;34;35;109, CISC: 4;5;14, CISSC: 4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1040", "tactic": "discovery", "color": "#d3b98e", "comment": "TSS: 30;74;80;93;100;103;107;111;120;125;149, CISC: 4;10;11;12;13;14;15;16;18, CISSC: 4.5;10.4;11.5;12.11;13.6;13.9;14.4;14.8;15.8;16.3;18.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1041", "tactic": "exfiltration", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1043", "tactic": "command-and-control", "color": "#d3b98e", "comment": "TSS: 31;81;89;92;122, CISC: 4;11;12;15, CISSC: 4.6;11.6;12.1;12.7;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1044", "tactic": "privilege-escalation", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;35;39;78;109;110;118;125;129;130;131;132;133;134;135;164;165;166;167;169;170;171, CISC: 3;5;11;14;15;16;20, CISSC: 3.1;3.2;3.3;3.5;5.1;5.5;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1046", "tactic": "discovery", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;31;49;81;89;92;96;122, CISC: 2;3;4;7;11;12;13;15, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;4.6;7.2;11.6;12.1;12.7;13.2;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1047", "tactic": "execution", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;109;110;125;129;130;131;132;134;135;171, CISC: 4;5;14;16;20, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1048", "tactic": "exfiltration", "color": "#d3b98e", "comment": "TSS: 31;81;86;89;92;122, CISC: 4;11;12;15, CISSC: 4.6;11.6;12.1;12.4;12.7;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1050", "tactic": "privilege-escalation", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1051", "tactic": "lateral-movement", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;31;33;34;35;67;81;84;91;92;93;94;96;98;104;106;109;110;122;125;129;130;131;132;134;135;171, CISC: 4;5;9;11;12;13;14;15;16;20, CISSC: 4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;9.2;11.6;12.1;12.11;12.12;12.2;12.9;13.2;13.4;14.1;14.3;14.6;14.7;15.1;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1052", "tactic": "exfiltration", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1053", "tactic": "privilege-escalation", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;27;28;29;30;33;34;35;39;76;78;109;110;118;125;129;130;131;132;133;134;135;164;165;166;167;169;170;171, CISC: 3;4;5;11;14;15;16;20, CISSC: 3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;5.5;11.1;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1054", "tactic": "defense-evasion", "color": "#d3b98e", "comment": "TSS: 33;34;35;109;110;125;129;130;131;132;134;135;155;171, CISC: 4;5;14;16;18;20, CISSC: 4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;18.11;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1055", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35, CISC: 4;5, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1058", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 31;35, CISC: 4;5, CISSC: 4.6;5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1059", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1064", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;18;19;20;49;57;96, CISC: 2;3;7;13, CISSC: 2.1;2.6;2.7;2.8;2.9;3.1;3.2;7.1;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1065", "tactic": "command-and-control", "color": "#d3b98e", "comment": "TSS: 31;81;89;92;122, CISC: 4;11;12;15, CISSC: 4.6;11.6;12.1;12.7;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1067", "tactic": "persistence", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;76, CISC: 4;5;11, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1068", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 18;22;23;57;59;60, CISC: 2;3;7;8, CISSC: 2.1;3.4;3.5;7.1;8.2;8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1070", "tactic": "defense-evasion", "color": "#d3b98e", "comment": "TSS: 33;34;35;74;100;103;107;109;111;149, CISC: 4;5;10;13;14;18, CISSC: 4.8;4.9;5.1;10.4;13.6;13.9;14.4;14.6;14.8;18.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1071", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1072", "tactic": "lateral-movement", "color": "#eebbe9", "comment": "TSS: 22;23;27;28;29;30;31;33;34;35;59;74;80;81;92;93;109;110;111;120;122;125;129;130;131;132;134;135;136;137;138;139;140;141;142;143;144;171, CISC: 3;4;5;8;10;11;12;14;15;16;17;20, CISSC: 3.4;3.5;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;8.2;10.4;11.5;11.6;12.1;12.11;14.6;14.7;14.8;15.1;15.8;16.1;16.12;16.13;16.3;16.7;16.8;16.9;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1073", "tactic": "defense-evasion", "color": "#eebbe9", "comment": "TSS: 19;20;21;22;23;33;34;35;39;59;78;109;118;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 3;4;5;8;11;14;15;16;20, CISSC: 3.1;3.2;3.3;3.4;3.5;4.8;4.9;5.1;5.5;8.2;11.3;14.6;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1075", "tactic": "lateral-movement", "color": "#eebbe9", "comment": "TSS: 22;23;27;28;29;30;33;34;35;59;109;110;125;129;130;131;132;134;135;171, CISC: 3;4;5;8;14;16;20, CISSC: 3.4;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;8.2;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1076", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;21;23;27;28;29;30;31;33;34;35;39;49;67;76;78;80;81;84;91;92;93;94;96;98;104;106;109;110;118;120;122;125;129;130;131;132;133;134;135;164;165;166;167;169;170;171, CISC: 2;3;4;5;7;9;11;12;13;14;15;16;20, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;5.5;7.2;9.2;11.1;11.3;11.5;11.6;12.1;12.11;12.12;12.2;12.9;13.2;13.4;14.1;14.3;14.6;14.7;15.1;15.6;15.8;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1077", "tactic": "lateral-movement", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35, CISC: 4;5, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1078", "tactic": "initial-access", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;27;28;29;30;33;34;35;39;78;80;86;89;93;109;110;118;120;125;129;130;131;132;133;134;135;145;164;165;166;167;169;170;171, CISC: 3;4;5;11;12;14;15;16;18;20, CISSC: 3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;5.5;11.3;11.5;12.11;12.4;12.7;14.6;14.7;15.6;15.8;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;18.1;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1079", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1080", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 15;16;17;33;34;35;60;109, CISC: 2;4;5;8;14, CISSC: 2.7;2.8;2.9;4.8;4.9;5.1;8.3;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1081", "tactic": "credential-access", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;33;34;35;39;78;109;118;130;131;132;133;134;136;137;138;139;140;141;142;143;144;164;165;166;167;169;170;171, CISC: 3;4;5;11;14;15;16;17;20, CISSC: 3.1;3.2;3.3;3.5;4.8;4.9;5.1;5.5;11.3;14.6;15.6;16.1;16.11;16.12;16.8;16.9;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1084", "tactic": "persistence", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1085", "tactic": "execution", "color": "#777777", "comment": "TSS: 60, CISC: 8, CISSC: 8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1086", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;27;28;29;30;33;34;35;49;96, CISC: 2;3;4;5;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;4.2;4.3;4.4;4.5;4.8;4.9;5.1;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1087", "tactic": "discovery", "color": "#233f5c", "comment": "TSS: 35;76, CISC: 5;11, CISSC: 5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1088", "tactic": "privilege-escalation", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;27;28;29;30;33;34;35;39;78;118;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 3;4;5;11;15;16;20, CISSC: 3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;5.5;11.3;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1089", "tactic": "defense-evasion", "color": "#d3b98e", "comment": "TSS: 33;34;35;109;110;125;129;130;131;132;134;135;171, CISC: 4;5;14;16;20, CISSC: 4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1090", "tactic": "defense-evasion", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1091", "tactic": "initial-access", "color": "#e1001a", "comment": "TSS: 6;14;15;16;17;19;20;49;61;96;102, CISC: 1;2;3;7;8;13, CISSC: 1.6;2.6;2.7;2.8;2.9;3.1;3.2;7.2;8.4;13.2;13.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1092", "tactic": "command-and-control", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;35;49;76;96, CISC: 2;3;5;7;11;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;5.1;7.2;11.1;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1094", "tactic": "command-and-control", "color": "#d3b98e", "comment": "TSS: 31;81;86;89;92;122, CISC: 4;11;12;15, CISSC: 4.6;11.6;12.1;12.4;12.7;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1095", "tactic": "command-and-control", "color": "#d3b98e", "comment": "TSS: 31;81;86;89;92;122, CISC: 4;11;12;15, CISSC: 4.6;11.6;12.1;12.4;12.7;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1096", "tactic": "defense-evasion", "color": "#d3b98e", "comment": "TSS: 33;34;35;109, CISC: 4;5;14, CISSC: 4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1097", "tactic": "lateral-movement", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;109;110;125;129;130;131;132;134;135;171, CISC: 4;5;14;16;20, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1098", "tactic": "persistence", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;31;33;34;35;76;80;81;92;93;120;122;125, CISC: 4;5;11;12;15;16, CISSC: 4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;11.1;11.5;11.6;12.1;12.11;15.1;15.8;16.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1100", "tactic": "privilege-escalation", "color": "#eebbe9", "comment": "TSS: 22;23;27;28;29;30;33;34;35;59, CISC: 3;4;5;8, CISSC: 3.4;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;8.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1101", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;60, CISC: 2;8, CISSC: 2.7;2.8;2.9;8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1102", "tactic": "defense-evasion", "color": "#7cae0f", "comment": "TSS: 49;50;51;54;56;89, CISC: 7;12, CISSC: 7.2;7.3;7.4;7.7;7.9;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1103", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 15;16;17;22;23;59, CISC: 2;3;8, CISSC: 2.7;2.8;2.9;3.4;3.5;8.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1104", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1105", "tactic": "lateral-movement", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1106", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1108", "tactic": "persistence", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1110", "tactic": "credential-access", "color": "#d3b98e", "comment": "TSS: 30;34;35;76;80;93;120;125;132;133, CISC: 4;5;11;12;15;16, CISSC: 4.5;4.9;5.1;11.1;11.5;12.11;15.8;16.1;16.11;16.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1111", "tactic": "credential-access", "color": "#f9a799", "comment": "TSS: 136;137;138;139;140;141;142;143;144, CISC: 17, CISSC: 17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1112", "tactic": "defense-evasion", "color": "#d3b98e", "comment": "TSS: 31;35, CISC: 4;5, CISSC: 4.6;5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1114", "tactic": "collection", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;30;39;74;78;80;93;100;103;107;111;118;120;125;130;131;132;133;134;149;164;165;166;167;169;170;171, CISC: 3;4;5;10;11;12;13;14;15;16;18;20, CISSC: 3.1;3.2;3.3;3.5;4.5;5.5;10.4;11.3;11.5;12.11;13.6;13.9;14.4;14.8;15.6;15.8;16.1;16.11;16.12;16.3;16.8;16.9;18.5;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1117", "tactic": "execution", "color": "#777777", "comment": "TSS: 60, CISC: 8, CISSC: 8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1118", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1119", "tactic": "collection", "color": "#e88b4b", "comment": "TSS: 74;100;103;107;111;149, CISC: 10;13;14;18, CISSC: 10.4;13.6;13.9;14.4;14.8;18.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1121", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1127", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1129", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1130", "tactic": "defense-evasion", "color": "#233f5c", "comment": "TSS: 35;76;155, CISC: 5;11;18, CISSC: 5.1;11.1;18.11", "enabled": true, "metadata": [] },
{ "techniqueID": "T1131", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;60, CISC: 2;8, CISSC: 2.7;2.8;2.9;8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1132", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 89, CISC: 12, CISSC: 12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1133", "tactic": "initial-access", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;30;31;35;49;67;80;81;84;91;92;93;94;96;98;104;106;109;120;122;125, CISC: 2;3;4;5;7;9;11;12;13;14;15;16, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;4.5;4.6;5.1;7.2;9.2;11.5;11.6;12.1;12.11;12.12;12.2;12.9;13.2;13.4;14.1;14.3;14.6;15.1;15.8;16.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1134", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;109;110;125;129;130;131;132;134;135;171, CISC: 4;5;14;16;20, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1136", "tactic": "persistence", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;31;33;34;35;76;80;81;92;93;120;122;125, CISC: 4;5;11;12;15;16, CISSC: 4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;11.1;11.5;11.6;12.1;12.11;15.1;15.8;16.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1137", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;22;23;35;49;59;96;155, CISC: 2;3;5;7;8;13;18, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;3.4;3.5;5.1;7.2;8.2;13.2;18.11", "enabled": true, "metadata": [] },
{ "techniqueID": "T1138", "tactic": "privilege-escalation", "color": "#eebbe9", "comment": "TSS: 22;23;35;59, CISC: 3;5;8, CISSC: 3.4;3.5;5.1;8.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1139", "tactic": "credential-access", "color": "#233f5c", "comment": "TSS: 35;76, CISC: 5;11, CISSC: 5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1141", "tactic": "credential-access", "color": "#f9a799", "comment": "TSS: 136;137;138;139;140;141;142;143;144, CISC: 17, CISSC: 17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1142", "tactic": "credential-access", "color": "#233f5c", "comment": "TSS: 35, CISC: 5, CISSC: 5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1143", "tactic": "defense-evasion", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1144", "tactic": "defense-evasion", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1145", "tactic": "credential-access", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;31;33;34;35;39;74;78;81;92;100;103;107;109;111;118;122;130;131;132;133;134;149;164;165;166;167;169;170;171, CISC: 3;4;5;10;11;12;13;14;15;16;18;20, CISSC: 3.1;3.2;3.3;3.5;4.6;4.8;4.9;5.1;5.5;10.4;11.3;11.6;12.1;13.6;13.9;14.4;14.6;14.8;15.1;15.6;16.1;16.11;16.12;16.8;16.9;18.5;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1147", "tactic": "defense-evasion", "color": "#233f5c", "comment": "TSS: 35;76, CISC: 5;11, CISSC: 5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1148", "tactic": "defense-evasion", "color": "#233f5c", "comment": "TSS: 35;76;145, CISC: 5;11;18, CISSC: 5.1;11.1;18.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1149", "tactic": "defense-evasion", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1150", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 33;34;35;109, CISC: 4;5;14, CISSC: 4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1152", "tactic": "persistence", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1155", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1156", "tactic": "persistence", "color": "#d3b98e", "comment": "TSS: 33;34;35;109, CISC: 4;5;14, CISSC: 4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1157", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 33;34;35;109;110;125;129;130;131;132;134;135;171, CISC: 4;5;14;16;20, CISSC: 4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1159", "tactic": "persistence", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1160", "tactic": "privilege-escalation", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1161", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;19;20;21;23;39;78;118;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 2;3;5;11;15;16;20, CISSC: 2.7;2.8;2.9;3.1;3.2;3.3;3.5;5.5;11.3;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1162", "tactic": "persistence", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1163", "tactic": "persistence", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1164", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96;136;137;138;139;140;141;142;143;144, CISC: 2;3;7;13;17, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1165", "tactic": "privilege-escalation", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1166", "tactic": "persistence", "color": "#233f5c", "comment": "TSS: 35;76, CISC: 5;11, CISSC: 5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1168", "tactic": "execution", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1169", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;109, CISC: 4;5;14, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1170", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1171", "tactic": "credential-access", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;86;89;96, CISC: 2;3;7;12;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;12.4;12.7;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1172", "tactic": "command-and-control", "color": "#729ab7", "comment": "TSS: 15;16;17;83, CISC: 2;12, CISSC: 2.7;2.8;2.9;12.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1173", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;18;19;20;35;49;57;96;155, CISC: 2;3;5;7;13;18, CISSC: 2.1;2.6;2.7;2.8;2.9;3.1;3.2;5.1;7.1;7.2;13.2;18.11", "enabled": true, "metadata": [] },
{ "techniqueID": "T1174", "tactic": "credential-access", "color": "#233f5c", "comment": "TSS: 35;76, CISC: 5;11, CISSC: 5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1175", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;18;19;20;27;28;29;30;31;33;34;35;49;57;81;92;96;122, CISC: 2;3;4;5;7;11;12;13;15, CISSC: 2.1;2.6;2.7;2.8;2.9;3.1;3.2;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;7.1;7.2;11.6;12.1;13.2;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1176", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;19;20;21;23;28;30;35;39;78;118;130;131;132;133;134;136;137;138;139;140;141;142;143;144;164;165;166;167;169;170;171, CISC: 2;3;4;5;11;15;16;17;20, CISSC: 2.7;2.8;2.9;3.1;3.2;3.3;3.5;4.3;4.5;5.1;5.5;11.3;15.6;16.1;16.11;16.12;16.8;16.9;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1177", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;35, CISC: 2;5, CISSC: 2.7;2.8;2.9;5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1178", "tactic": "privilege-escalation", "color": "#233f5c", "comment": "TSS: 35, CISC: 5, CISSC: 5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1180", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1182", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1184", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;27;28;29;30;33;34;35;49;96;109, CISC: 2;3;4;5;7;13;14, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;4.2;4.3;4.4;4.5;4.8;4.9;5.1;7.2;13.2;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1185", "tactic": "collection", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;136;137;138;139;140;141;142;143;144;171, CISC: 14;16;17;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1187", "tactic": "credential-access", "color": "#233f5c", "comment": "TSS: 35;86;89, CISC: 5;12, CISSC: 5.1;12.4;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1188", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 86;89, CISC: 12, CISSC: 12.4;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1189", "tactic": "initial-access", "color": "#729ab7", "comment": "TSS: 18;22;23;49;50;51;54;56;57;59;60, CISC: 2;3;7;8, CISSC: 2.1;3.4;3.5;7.1;7.2;7.3;7.4;7.7;7.9;8.2;8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1190", "tactic": "initial-access", "color": "#729ab7", "comment": "TSS: 18;19;20;22;23;24;27;28;29;30;31;33;34;35;57;59;60;81;92;122;169, CISC: 2;3;4;5;7;8;11;12;15;20, CISSC: 2.1;3.1;3.2;3.4;3.5;3.6;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;7.1;8.2;8.3;11.6;12.1;15.1;20.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1191", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1193", "tactic": "initial-access", "color": "#7cae0f", "comment": "TSS: 49;50;51;54;56;58;59;61;63;89;136;137;138;139;140;141;142;143;144, CISC: 7;8;12;17, CISSC: 7.2;7.3;7.4;7.7;7.9;8.1;8.2;8.4;8.6;12.7;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1194", "tactic": "initial-access", "color": "#7cae0f", "comment": "TSS: 49;50;51;54;56;58;59;61;63;136;137;138;139;140;141;142;143;144, CISC: 7;8;17, CISSC: 7.2;7.3;7.4;7.7;7.9;8.1;8.2;8.4;8.6;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1195", "tactic": "initial-access", "color": "#eebbe9", "comment": "TSS: 19;20;22;23;24;59;169, CISC: 3;8;20, CISSC: 3.1;3.2;3.4;3.5;3.6;8.2;20.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1196", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17;33;34;35;109, CISC: 2;4;5;14, CISSC: 2.7;2.8;2.9;4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1197", "tactic": "persistence", "color": "#233f5c", "comment": "TSS: 35;76;86;89;109;110;125;129;130;131;132;134;135;171, CISC: 5;11;12;14;16;20, CISSC: 5.1;11.1;12.4;12.7;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1198", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;31;33;34;35;109, CISC: 2;4;5;14, CISSC: 2.7;2.8;2.9;4.6;4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1199", "tactic": "initial-access", "color": "#d3b98e", "comment": "TSS: 31;35;81;92;122, CISC: 4;5;11;12;15, CISSC: 4.6;5.1;11.6;12.1;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1200", "tactic": "initial-access", "color": "#e1001a", "comment": "TSS: 6;35;61;67;84;91;93;94;96;98;102;104;106;109, CISC: 1;5;8;9;12;13;14, CISSC: 1.6;5.1;8.4;9.2;12.11;12.12;12.2;12.9;13.2;13.4;13.8;14.1;14.3;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1203", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 18;57;60, CISC: 2;7;8, CISSC: 2.1;7.1;8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1204", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17;49;50;51;54;56;89;136;137;138;139;140;141;142;143;144, CISC: 2;7;12;17, CISSC: 2.7;2.8;2.9;7.2;7.3;7.4;7.7;7.9;12.7;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1205", "tactic": "command-and-control", "color": "#c84b4b", "comment": "TSS: 86;89, CISC: 12, CISSC: 12.4;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1206", "tactic": "privilege-escalation", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;76, CISC: 4;5;11, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1208", "tactic": "credential-access", "color": "#d3b98e", "comment": "TSS: 27;28;29;30;33;34;35;74;100;103;107;111;149, CISC: 4;5;10;13;14;18, CISSC: 4.2;4.3;4.4;4.5;4.8;4.9;5.1;10.4;13.6;13.9;14.4;14.8;18.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1209", "tactic": "persistence", "color": "#d3b98e", "comment": "TSS: 31;33;34;35;109, CISC: 4;5;14, CISSC: 4.6;4.8;4.9;5.1;14.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1210", "tactic": "lateral-movement", "color": "#729ab7", "comment": "TSS: 14;15;16;17;18;19;20;22;23;24;27;28;29;30;31;33;34;35;49;57;59;60;81;92;96;122;169, CISC: 2;3;4;5;7;8;11;12;13;15;20, CISSC: 2.1;2.6;2.7;2.8;2.9;3.1;3.2;3.4;3.5;3.6;4.2;4.3;4.4;4.5;4.6;4.8;4.9;5.1;7.1;7.2;8.2;8.3;11.6;12.1;13.2;15.1;20.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1211", "tactic": "defense-evasion", "color": "#777777", "comment": "TSS: 60, CISC: 8, CISSC: 8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1212", "tactic": "credential-access", "color": "#729ab7", "comment": "TSS: 18;22;23;57;59;60, CISC: 2;3;7;8, CISSC: 2.1;3.4;3.5;7.1;8.2;8.3", "enabled": true, "metadata": [] },
{ "techniqueID": "T1213", "tactic": "collection", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;39;78;109;110;118;125;129;130;131;132;133;134;135;136;137;138;139;140;141;142;143;144;164;165;166;167;169;170;171, CISC: 3;5;11;14;15;16;17;20, CISSC: 3.1;3.2;3.3;3.5;5.5;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1214", "tactic": "credential-access", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;27;28;29;30;33;34;35;39;78;118;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 3;4;5;11;15;16;20, CISSC: 3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;5.5;11.3;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1215", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;27;28;29;30;33;34;35;58;59;61;63, CISC: 2;4;5;8, CISSC: 2.7;2.8;2.9;4.2;4.3;4.4;4.5;4.8;4.9;5.1;8.1;8.2;8.4;8.6", "enabled": true, "metadata": [] },
{ "techniqueID": "T1216", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1218", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17;27;28;29;30;33;34;35, CISC: 2;4;5, CISSC: 2.7;2.8;2.9;4.2;4.3;4.4;4.5;4.8;4.9;5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1219", "tactic": "command-and-control", "color": "#729ab7", "comment": "TSS: 15;16;17;86;89, CISC: 2;12, CISSC: 2.7;2.8;2.9;12.4;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1220", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1221", "tactic": "defense-evasion", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;58;59;61;63;89;96;136;137;138;139;140;141;142;143;144, CISC: 2;3;7;8;12;13;17, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;8.1;8.2;8.4;8.6;12.7;13.2;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1223", "tactic": "execution", "color": "#729ab7", "comment": "TSS: 15;16;17;49;50;51;54;56, CISC: 2;7, CISSC: 2.7;2.8;2.9;7.2;7.3;7.4;7.7;7.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1482", "tactic": "discovery", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;31;39;78;81;92;118;122;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 3;4;5;11;12;15;16;20, CISSC: 3.1;3.2;3.3;3.5;4.6;5.5;11.3;11.6;12.1;15.1;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1483", "tactic": "command-and-control", "color": "#7cae0f", "comment": "TSS: 49;50;51;54;56;89, CISC: 7;12, CISSC: 7.2;7.3;7.4;7.7;7.9;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1484", "tactic": "defense-evasion", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;39;78;109;110;118;125;129;130;131;132;133;134;135;164;165;166;167;169;170;171, CISC: 3;5;11;14;15;16;20, CISSC: 3.1;3.2;3.3;3.5;5.5;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1485", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35;71;72;74;75, CISC: 5;10, CISSC: 5.1;10.1;10.2;10.4;10.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1486", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35;71;72;74;75, CISC: 5;10, CISSC: 5.1;10.1;10.2;10.4;10.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1487", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35;71;72;74;75, CISC: 5;10, CISSC: 5.1;10.1;10.2;10.4;10.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1488", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35;71;72;74;75, CISC: 5;10, CISSC: 5.1;10.1;10.2;10.4;10.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1489", "tactic": "impact", "color": "#d3b98e", "comment": "TSS: 31;33;34;35;81;92;109;110;122;125;129;130;131;132;134;135;171, CISC: 4;5;11;12;14;15;16;20, CISSC: 4.6;4.8;4.9;5.1;11.6;12.1;14.6;14.7;15.1;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1490", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35;71;72;74;75;76, CISC: 5;10;11, CISSC: 5.1;10.1;10.2;10.4;10.5;11.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1491", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35;71;72;74;75, CISC: 5;10, CISSC: 5.1;10.1;10.2;10.4;10.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1492", "tactic": "impact", "color": "#d3b98e", "comment": "TSS: 33;34;35;74;100;103;107;109;111;149, CISC: 4;5;10;13;14;18, CISSC: 4.8;4.9;5.1;10.4;13.6;13.9;14.4;14.6;14.8;18.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1493", "tactic": "impact", "color": "#e88b4b", "comment": "TSS: 74;100;103;107;111;149, CISC: 10;13;14;18, CISSC: 10.4;13.6;13.9;14.4;14.8;18.5", "enabled": true, "metadata": [] },
{ "techniqueID": "T1494", "tactic": "impact", "color": "#d3b98e", "comment": "TSS: 31;33;34;35;81;92;109;122, CISC: 4;5;11;12;14;15, CISSC: 4.6;4.8;4.9;5.1;11.6;12.1;14.6;15.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1495", "tactic": "impact", "color": "#233f5c", "comment": "TSS: 35, CISC: 5, CISSC: 5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1498", "tactic": "impact", "color": "#c84b4b", "comment": "TSS: 86;89, CISC: 12, CISSC: 12.4;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1499", "tactic": "impact", "color": "#c84b4b", "comment": "TSS: 86;89, CISC: 12, CISSC: 12.4;12.7", "enabled": true, "metadata": [] },
{ "techniqueID": "T1501", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;27;28;29;30;33;34;35;109;110;125;129;130;131;132;134;135;171, CISC: 2;4;5;14;16;20, CISSC: 2.7;2.8;2.9;4.2;4.3;4.4;4.5;4.8;4.9;5.1;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1503", "tactic": "credential-access", "color": "#233f5c", "comment": "TSS: 35, CISC: 5, CISSC: 5.1", "enabled": true, "metadata": [] },
{ "techniqueID": "T1504", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 15;16;17;33;34;35;109;155, CISC: 2;4;5;14;18, CISSC: 2.7;2.8;2.9;4.8;4.9;5.1;14.6;18.11", "enabled": true, "metadata": [] },
{ "techniqueID": "T1505", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;19;20;21;23;27;28;29;30;33;34;35;39;78;118;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 2;3;4;5;11;15;16;20, CISSC: 2.7;2.8;2.9;3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;5.5;11.3;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1506", "tactic": "lateral-movement", "color": "#233f5c", "comment": "TSS: 35;155, CISC: 5;18, CISSC: 5.1;18.11", "enabled": true, "metadata": [] },
{ "techniqueID": "T1514", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 15;16;17, CISC: 2, CISSC: 2.7;2.8;2.9", "enabled": true, "metadata": [] },
{ "techniqueID": "T1519", "tactic": "privilege-escalation", "color": "#729ab7", "comment": "TSS: 14;15;16;17;19;20;49;96, CISC: 2;3;7;13, CISSC: 2.6;2.7;2.8;2.9;3.1;3.2;7.2;13.2", "enabled": true, "metadata": [] },
{ "techniqueID": "T1522", "tactic": "credential-access", "color": "#c84b4b", "comment": "TSS: 86, CISC: 12, CISSC: 12.4", "enabled": true, "metadata": [] },
{ "techniqueID": "T1525", "tactic": "persistence", "color": "#729ab7", "comment": "TSS: 15;16;17;19;20;21;23;27;28;29;30;33;34;35;39;78;118;130;131;132;133;134;164;165;166;167;169;170;171, CISC: 2;3;4;5;11;15;16;20, CISSC: 2.7;2.8;2.9;3.1;3.2;3.3;3.5;4.2;4.3;4.4;4.5;4.8;4.9;5.1;5.5;11.3;15.6;16.1;16.11;16.12;16.8;16.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1527", "tactic": "lateral-movement", "color": "#eebbe9", "comment": "TSS: 19;20;39;49;50;51;54;56;74;78;100;103;107;118;130;131;132;133;134;149;164;165;166;167;169;170;171, CISC: 3;5;7;10;11;13;14;15;16;18;20, CISSC: 3.1;3.2;5.5;7.2;7.3;7.4;7.7;7.9;10.4;11.3;13.6;13.9;14.4;15.6;16.1;16.11;16.12;16.8;16.9;18.5;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1528", "tactic": "credential-access", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;39;49;50;51;54;56;78;109;110;118;125;129;130;131;132;133;134;135;136;137;138;139;140;141;142;143;144;164;165;166;167;169;170;171, CISC: 3;5;7;11;14;15;16;17;20, CISSC: 3.1;3.2;3.3;3.5;5.5;7.2;7.3;7.4;7.7;7.9;11.3;14.6;14.7;15.6;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1530", "tactic": "collection", "color": "#eebbe9", "comment": "TSS: 19;20;21;23;30;33;34;35;39;74;78;80;86;89;93;100;103;107;109;110;111;118;120;125;129;130;131;132;133;134;135;149;164;165;166;167;169;170;171, CISC: 3;4;5;10;11;12;13;14;15;16;18;20, CISSC: 3.1;3.2;3.3;3.5;4.5;4.8;4.9;5.1;5.5;10.4;11.3;11.5;12.11;12.4;12.7;13.6;13.9;14.4;14.6;14.7;14.8;15.6;15.8;16.1;16.11;16.12;16.13;16.3;16.7;16.8;16.9;18.5;20.1;20.2;20.3;20.4;20.6;20.7;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1535", "tactic": "defense-evasion", "color": "#233f5c", "comment": "TSS: 35;155, CISC: 5;18, CISSC: 5.1;18.11", "enabled": true, "metadata": [] },
{ "techniqueID": "T1537", "tactic": "exfiltration", "color": "#233f5c", "comment": "TSS: 35;86;89;109;110;125;129;130;131;132;134;135;171, CISC: 5;12;14;16;20, CISSC: 5.1;12.4;12.7;14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1538", "tactic": "discovery", "color": "#a80b4b", "comment": "TSS: 109;110;125;129;130;131;132;134;135;171, CISC: 14;16;20, CISSC: 14.6;14.7;16.1;16.12;16.13;16.3;16.7;16.8;16.9;20.8", "enabled": true, "metadata": [] },
{ "techniqueID": "T1539", "tactic": "credential-access", "color": "#d3b98e", "comment": "TSS: 30;35;80;93;120;125;136;137;138;139;140;141;142;143;144;155, CISC: 4;5;11;12;15;16;17;18, CISSC: 4.5;5.1;11.5;12.11;15.8;16.3;17.1;17.2;17.3;17.4;17.5;17.6;17.7;17.8;17.9;18.11", "enabled": true, "metadata": [] }
],
"gradient": {
"colors": [
"#ff6666",
"#ffe766",
"#8ec843"
],
"minValue": 0,
"maxValue": 100
},
"legendItems": [],
"metadata": [],
"showTacticRowBackground": true,
"tacticRowBackground": "#dddddd",
"selectTechniquesAcrossTactics": false
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment