-
-
Save azkasadaf/e3c6e90b6099b3d1a105fbb443771150 to your computer and use it in GitHub Desktop.
MITRE layer JSON file used to generate SVG
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "layer", | |
| "versions": { | |
| "attack": "10", | |
| "navigator": "4.6.6", | |
| "layer": "4.3" | |
| }, | |
| "domain": "enterprise-attack", | |
| "description": "", | |
| "filters": { | |
| "platforms": [ | |
| "Linux", | |
| "macOS", | |
| "Windows", | |
| "Azure AD", | |
| "Office 365", | |
| "SaaS", | |
| "IaaS", | |
| "Google Workspace", | |
| "PRE", | |
| "Network", | |
| "Containers" | |
| ] | |
| }, | |
| "sorting": 0, | |
| "layout": { | |
| "layout": "side", | |
| "aggregateFunction": "average", | |
| "showID": false, | |
| "showName": true, | |
| "showAggregateScores": false, | |
| "countUnscored": false | |
| }, | |
| "hideDisabled": true, | |
| "techniques": [ | |
| { | |
| "techniqueID": "T1548", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1548", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1548.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1548.002", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1548.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1134", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1134.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.005", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1134.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1531", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1087", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1087.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1087.002", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1087.003", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1087.004", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1098.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1583.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.006", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1595", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1595.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1595.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1557", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1557.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1071", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1071.001", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1071.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1071.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1071.004", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1010", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1560", | |
| "tactic": "collection", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1560.001", | |
| "tactic": "collection", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1560.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1560.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1123", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1119", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1020", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1020.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1197", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1197", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.001", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.003", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.004", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.008", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.009", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.010", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.010", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.011", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.012", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.013", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.013", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.014", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.014", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.015", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.015", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1037", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1037.001", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1037.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1037.002", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1037.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1037.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1217", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1176", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1185", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1110.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1612", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1115", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1580", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1538", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1526", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1619", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1059.001", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1059.002", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.003", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1059.004", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.005", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1059.006", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1059.007", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.008", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1092", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1586", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1586.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1586.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1554", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1584.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.006", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1609", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1613", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1136", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1136.001", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1136.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1136.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1543", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1543.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.002", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1543.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1543.003", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1543.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1543.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1555.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.005", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1485", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1132", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1132.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1132.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1486", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1565.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565.003", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1001.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1074", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1074.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1074.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1030", | |
| "tactic": "exfiltration", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1530", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1602", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1602.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1602.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1213.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1005", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1039", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1025", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1491", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1491.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1491.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1140", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1610", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1610", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1587.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1561", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1561.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1561.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1484", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1484.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1482", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1189", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1568.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1114.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1573", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1573.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1573.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1499.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.003", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.004", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1611", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1585", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1585.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1585.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.002", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.003", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.008", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.009", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.010", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.010", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.011", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.012", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.013", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.013", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.014", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.014", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.015", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.015", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1480", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1480.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1048.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048.002", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048.003", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1041", | |
| "tactic": "exfiltration", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1011", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1011.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1052", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1052.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1567", | |
| "tactic": "exfiltration", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1567.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1567.002", | |
| "tactic": "exfiltration", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1190", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1203", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1212", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1211", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1068", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1210", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1133", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1133", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1008", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1083", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1222", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1222.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1222.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1495", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1187", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1606", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1606.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1606.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1592.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1589.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1590.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.005", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.006", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1591.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1615", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1200", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1564.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.002", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1564.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.004", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1564.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.010", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.010", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.010", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.011", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.011", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.009", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.008", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.001", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.002", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.002", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.012", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.012", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1562.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1562.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.010", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1525", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1070.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1070.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.004", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1070.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1202", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1105", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1490", | |
| "tactic": "impact", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1056", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1056", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1056.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.004", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1559", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1559.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1559.002", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1534", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1570", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1036.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.003", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1036.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.005", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1036.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1556", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1556", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1556.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1578.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1112", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1601", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1601.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1601.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1104", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1106", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1599", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1599.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1498", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1498.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1498.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1046", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1135", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1040", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1040", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1095", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1571", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1003.001", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1003.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.003", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1003.006", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.007", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1003.008", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.005", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1027.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1588.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.006", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1137.006", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1137.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1201", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1120", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1069", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1069.002", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1069.003", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1069.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1566", | |
| "tactic": "initial-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1566.001", | |
| "tactic": "initial-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1566.002", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1566.003", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1598.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1542", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1542.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1057", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1055", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1055.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.011", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.013", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.013", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.012", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.014", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.014", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1572", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1090", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1090.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.004", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1012", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1620", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1219", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1563", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1563.001", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1563.002", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1021.001", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.002", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.003", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1021.004", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.005", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1021.006", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1018", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1091", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1091", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1496", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1207", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1014", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053", | |
| "tactic": "execution", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.002", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.005", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.005", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.003", | |
| "tactic": "execution", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.003", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.006", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.007", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1029", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1113", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1597", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1597.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1597.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1596.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.005", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1593", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1593.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1593.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1594", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1505.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1489", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1129", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.011", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.005", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.010", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.012", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.013", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.014", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1216", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1216.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1072", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1072", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1518", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1518.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1608.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1528", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1539", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1558.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1553.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1195.001", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195.002", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195.003", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1082", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1614", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1614.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1016", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1016.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1049", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1033", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1007", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1569", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1569.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1569.002", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1529", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1124", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1080", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1221", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1205", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1205", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1205.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1537", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1127", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1127.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1199", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1111", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1552", | |
| "tactic": "credential-access", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1552.001", | |
| "tactic": "credential-access", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1552.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.005", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.006", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.007", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1535", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.002", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.002", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.003", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.003", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550.001", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550.004", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1204", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1204.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1204.002", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1204.003", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1125", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1497", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1497.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.002", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.003", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1600", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1600.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1600.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1102.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1047", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1220", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| } | |
| ], | |
| "gradient": { | |
| "colors": [ | |
| "#ff6666ff", | |
| "#ffe766ff", | |
| "#8ec843ff" | |
| ], | |
| "minValue": 0, | |
| "maxValue": 100 | |
| }, | |
| "legendItems": [ | |
| { | |
| "color": "#c6dbef", | |
| "label": "All TTPs" | |
| }, | |
| { | |
| "color": "#fdae6b", | |
| "label": "False Positive" | |
| } | |
| ], | |
| "metadata": [], | |
| "links": [], | |
| "showTacticRowBackground": false, | |
| "tacticRowBackground": "#dddddd", | |
| "selectTechniquesAcrossTactics": true, | |
| "selectSubtechniquesWithParent": false | |
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "layer", | |
| "versions": | |
| { | |
| "attack": "10", | |
| "navigator": "4.5.5", | |
| "layer": "4.3" | |
| }, | |
| "domain": "enterprise-attack", | |
| "description": "", | |
| "filters": | |
| { | |
| "platforms": ["Linux", | |
| "macOS", | |
| "Windows", | |
| "Azure AD", | |
| "Office 365", | |
| "SaaS", | |
| "IaaS", | |
| "Google Workspace", | |
| "PRE", | |
| "Network", | |
| "Containers"] | |
| }, | |
| "sorting": 0, | |
| "layout": | |
| { | |
| "layout": "side", | |
| "aggregateFunction": "average", | |
| "showID": false, | |
| "showName": true, | |
| "showAggregateScores": false, | |
| "countUnscored": false | |
| }, | |
| "hideDisabled": true, | |
| "techniques": [ | |
| { | |
| "techniqueID": "T1548", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1548", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1548.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1548.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1134.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1531", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1087", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1087.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1087.002", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1087.003", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1087.004", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1098.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1583.006", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1595", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1595.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1595.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1557.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1071", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1071.001", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1071.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1071.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1071.004", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1010", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1560", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1560.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1560.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1560.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1123", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1119", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1020", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1020.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1197", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1197", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.001", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.004", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1547.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.008", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.009", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.010", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.010", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.011", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.012", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.013", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.013", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.014", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.014", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.015", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1547.015", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1037.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1217", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1176", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1185", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1110.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1612", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1115", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1580", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1538", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1526", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1619", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1059.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.002", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.003", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.004", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.005", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.006", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.007", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1059.008", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1092", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1586", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1586.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1586.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1554", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1584.006", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1609", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1613", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1136", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1136.001", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1136.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1136.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1543.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1555.005", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1485", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1132", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1132.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1132.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1486", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1565.003", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1001.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1074", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1074.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1074.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1030", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1530", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1602", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1602.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1602.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1213.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1005", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1039", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1025", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1491", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1491.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1491.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1140", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1610", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1610", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1587.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1561", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1561.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1561.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1484.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1482", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1189", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1568.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1114.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1573", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1573.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1573.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.003", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1499.004", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1611", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1585", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1585.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1585.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.002", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.003", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1546.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.008", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.009", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.010", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.010", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.011", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.012", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.013", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.013", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.014", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.014", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.015", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1546.015", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1480", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1480.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048.002", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1048.003", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1041", | |
| "tactic": "exfiltration", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1011", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1011.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1052", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1052.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1567", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1567.001", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1567.002", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1190", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1203", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1212", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1211", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1068", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1210", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1133", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1133", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1008", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1083", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1222", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1222.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1222.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1495", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1187", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1606", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1606.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1606.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1592.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1589.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.005", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1590.006", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1591.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1615", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1200", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1564.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1574.010", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.010", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.010", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.011", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.011", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.009", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.008", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.001", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.002", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.002", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.012", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1574.012", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1562.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1562.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1562.010", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1525", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1070.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1070.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1070.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1202", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1105", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1490", | |
| "tactic": "impact", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1056", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.001", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.002", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.003", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.004", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1056.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1559", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1559.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1559.002", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1534", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1570", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1036.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.003", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1036.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1036.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1556.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1578.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1112", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1601", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1601.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1601.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1104", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1106", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1599", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1599.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1498", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1498.001", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1498.002", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1046", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1135", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1040", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1040", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1095", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1571", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1003.001", | |
| "tactic": "credential-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1003.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.006", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.007", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.008", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.005", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1003.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1027.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1588.006", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1137.006", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1137.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1201", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1120", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1069", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1069.002", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1069.003", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1069.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1566", | |
| "tactic": "initial-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1566.001", | |
| "tactic": "initial-access", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1566.002", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1566.003", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1598.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1542.005", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1057", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.008", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.009", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.011", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.011", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.013", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.013", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.012", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.012", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.014", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1055.014", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1572", | |
| "tactic": "command-and-control", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1090", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1090.004", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1012", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1620", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1219", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1563", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1563.001", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1563.002", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.001", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.002", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.003", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.004", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.005", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1021.006", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1018", | |
| "tactic": "discovery", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1091", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1091", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1496", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1207", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1014", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053", | |
| "tactic": "privilege-escalation", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.002", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.005", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.005", | |
| "tactic": "persistence", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.005", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.003", | |
| "tactic": "execution", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.003", | |
| "tactic": "persistence", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#fdae6b", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1053.006", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.006", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.006", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.007", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.007", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1053.007", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1029", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1113", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1597", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1597.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1597.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.003", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.004", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1596.005", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1593", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1593.001", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1593.002", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1594", | |
| "tactic": "reconnaissance", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1505.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1489", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1129", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.011", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.001", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1218.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.009", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.010", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.007", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.008", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.012", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.013", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1218.014", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1216", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1216.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1072", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1072", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1518", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1518.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.001", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.002", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.003", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.004", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1608.005", | |
| "tactic": "resource-development", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1528", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1539", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1558.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.005", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1553.006", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195.001", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195.002", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1195.003", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1082", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1614", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1614.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1016", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1016.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1049", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1033", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1007", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1569", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1569.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1569.002", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1529", | |
| "tactic": "impact", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1124", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1080", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1221", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1205.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1537", | |
| "tactic": "exfiltration", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1127", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1127.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1199", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1111", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.001", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.002", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.003", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.004", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.005", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.006", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1552.007", | |
| "tactic": "credential-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1535", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.002", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.002", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.003", | |
| "tactic": "defense-evasion", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.003", | |
| "tactic": "lateral-movement", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1550.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550.001", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1550.004", | |
| "tactic": "lateral-movement", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1204", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1204.001", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1204.002", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1204.003", | |
| "tactic": "execution", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.001", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.002", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.003", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "persistence", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "privilege-escalation", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1078.004", | |
| "tactic": "initial-access", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1125", | |
| "tactic": "collection", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.001", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.002", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.003", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1497.003", | |
| "tactic": "discovery", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1600", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1600.001", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1600.002", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102.001", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102.002", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1102.003", | |
| "tactic": "command-and-control", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }, | |
| { | |
| "techniqueID": "T1047", | |
| "tactic": "execution", | |
| "color": "#c6dbef", | |
| "comment": "", | |
| "enabled": true, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": true | |
| }, | |
| { | |
| "techniqueID": "T1220", | |
| "tactic": "defense-evasion", | |
| "color": "#FFFFFF00", | |
| "comment": "", | |
| "enabled": false, | |
| "metadata": [], | |
| "links": [], | |
| "showSubtechniques": false | |
| }], | |
| "gradient": | |
| { | |
| "colors": ["#ff6666ff", | |
| "#ffe766ff", | |
| "#8ec843ff"], | |
| "minValue": 0, | |
| "maxValue": 100 | |
| }, | |
| "legendItems": [ | |
| { | |
| "color": "#c6dbef", | |
| "label": "All TTPs" | |
| }, | |
| { | |
| "color": "#fdae6b", | |
| "label": "False Positive" | |
| }], | |
| "metadata": [], | |
| "links": [], | |
| "showTacticRowBackground": false, | |
| "tacticRowBackground": "#dddddd", | |
| "selectTechniquesAcrossTactics": true, | |
| "selectSubtechniquesWithParent": false | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment