MAZE Tactics and Techniques for ATT&CK Navigator

MAZE_Group_1.json

{
	"name": "MAZE Group 1",
	"version": "2.2",
	"domain": "mitre-enterprise",
	"description": "",
	"filters": {
		"stages": [
			"act"
		],
		"platforms": [
			"Windows",
			"Linux",
			"macOS"
		]
	},
	"sorting": 0,
	"viewMode": 0,
	"hideDisabled": false,
	"techniques": [
		{
			"techniqueID": "T1087",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1110",
			"tactic": "credential-access",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1059",
			"tactic": "execution",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1043",
			"tactic": "command-and-control",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1003",
			"tactic": "credential-access",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1002",
			"tactic": "exfiltration",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1486",
			"tactic": "impact",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1005",
			"tactic": "collection",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1482",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1048",
			"tactic": "exfiltration",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1133",
			"tactic": "persistence",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1133",
			"tactic": "initial-access",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1083",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1036",
			"tactic": "defense-evasion",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1135",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1050",
			"tactic": "persistence",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1050",
			"tactic": "privilege-escalation",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1027",
			"tactic": "defense-evasion",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1069",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1086",
			"tactic": "execution",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1076",
			"tactic": "lateral-movement",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1105",
			"tactic": "command-and-control",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1105",
			"tactic": "lateral-movement",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1018",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1064",
			"tactic": "defense-evasion",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1064",
			"tactic": "execution",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1035",
			"tactic": "execution",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1489",
			"tactic": "impact",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1071",
			"tactic": "command-and-control",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1016",
			"tactic": "discovery",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "defense-evasion",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "persistence",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "privilege-escalation",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "initial-access",
			"color": "#6baed6",
			"comment": "",
			"enabled": true,
			"metadata": []
		}
	],
	"gradient": {
		"colors": [
			"#ff6666",
			"#ffe766",
			"#8ec843"
		],
		"minValue": 0,
		"maxValue": 100
	},
	"legendItems": [],
	"metadata": [],
	"showTacticRowBackground": false,
	"tacticRowBackground": "#dddddd",
	"selectTechniquesAcrossTactics": true
}

MAZE_Group_2.json

{
	"name": "MAZE Group 2",
	"version": "2.2",
	"domain": "mitre-enterprise",
	"description": "",
	"filters": {
		"stages": [
			"act"
		],
		"platforms": [
			"Windows",
			"Linux",
			"macOS"
		]
	},
	"sorting": 0,
	"viewMode": 0,
	"hideDisabled": false,
	"techniques": [
		{
			"techniqueID": "T1087",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1020",
			"tactic": "exfiltration",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1059",
			"tactic": "execution",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1043",
			"tactic": "command-and-control",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1136",
			"tactic": "persistence",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1003",
			"tactic": "credential-access",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1081",
			"tactic": "credential-access",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1002",
			"tactic": "exfiltration",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1486",
			"tactic": "impact",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1074",
			"tactic": "collection",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1005",
			"tactic": "collection",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1039",
			"tactic": "collection",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1140",
			"tactic": "defense-evasion",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1482",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1048",
			"tactic": "exfiltration",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1107",
			"tactic": "defense-evasion",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1083",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1171",
			"tactic": "credential-access",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1036",
			"tactic": "defense-evasion",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1135",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1050",
			"tactic": "persistence",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1050",
			"tactic": "privilege-escalation",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1069",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1086",
			"tactic": "execution",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1219",
			"tactic": "command-and-control",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1076",
			"tactic": "lateral-movement",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1105",
			"tactic": "command-and-control",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1105",
			"tactic": "lateral-movement",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1018",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1085",
			"tactic": "defense-evasion",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1085",
			"tactic": "execution",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1064",
			"tactic": "defense-evasion",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1064",
			"tactic": "execution",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1193",
			"tactic": "initial-access",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1071",
			"tactic": "command-and-control",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1032",
			"tactic": "command-and-control",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1033",
			"tactic": "discovery",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1204",
			"tactic": "execution",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "defense-evasion",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "persistence",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "privilege-escalation",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "initial-access",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1028",
			"tactic": "execution",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1028",
			"tactic": "lateral-movement",
			"color": "#a1d99b",
			"comment": "",
			"enabled": true,
			"metadata": []
		}
	],
	"gradient": {
		"colors": [
			"#ff6666",
			"#ffe766",
			"#8ec843"
		],
		"minValue": 0,
		"maxValue": 100
	},
	"legendItems": [],
	"metadata": [],
	"showTacticRowBackground": false,
	"tacticRowBackground": "#dddddd",
	"selectTechniquesAcrossTactics": true
}

MAZE_Group_3_FIN6.json

{
	"name": "MAZE Group 3 (FIN6)",
	"version": "2.2",
	"domain": "mitre-enterprise",
	"description": "",
	"filters": {
		"stages": [
			"act"
		],
		"platforms": [
			"Windows",
			"Linux",
			"macOS"
		]
	},
	"sorting": 0,
	"viewMode": 0,
	"hideDisabled": false,
	"techniques": [
		{
			"techniqueID": "T1087",
			"tactic": "discovery",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1116",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1059",
			"tactic": "execution",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1043",
			"tactic": "command-and-control",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1003",
			"tactic": "credential-access",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1002",
			"tactic": "exfiltration",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1486",
			"tactic": "impact",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1074",
			"tactic": "collection",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1039",
			"tactic": "collection",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1089",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1482",
			"tactic": "discovery",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1133",
			"tactic": "persistence",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1133",
			"tactic": "initial-access",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1083",
			"tactic": "discovery",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1202",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1490",
			"tactic": "impact",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1031",
			"tactic": "persistence",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1112",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1027",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1097",
			"tactic": "lateral-movement",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1069",
			"tactic": "discovery",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1086",
			"tactic": "execution",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1055",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1055",
			"tactic": "privilege-escalation",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1108",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1108",
			"tactic": "persistence",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1219",
			"tactic": "command-and-control",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1076",
			"tactic": "lateral-movement",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1105",
			"tactic": "command-and-control",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1105",
			"tactic": "lateral-movement",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1018",
			"tactic": "discovery",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1064",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1064",
			"tactic": "execution",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1035",
			"tactic": "execution",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1489",
			"tactic": "impact",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1071",
			"tactic": "command-and-control",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1032",
			"tactic": "command-and-control",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "defense-evasion",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "persistence",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "privilege-escalation",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1078",
			"tactic": "initial-access",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		},
		{
			"techniqueID": "T1077",
			"tactic": "lateral-movement",
			"color": "#bcbddc",
			"comment": "",
			"enabled": true,
			"metadata": []
		}
	],
	"gradient": {
		"colors": [
			"#ff6666",
			"#ffe766",
			"#8ec843"
		],
		"minValue": 0,
		"maxValue": 100
	},
	"legendItems": [],
	"metadata": [],
	"showTacticRowBackground": false,
	"tacticRowBackground": "#dddddd",
	"selectTechniquesAcrossTactics": true
}