From 6093f106919928cd053495338dc8f9d66cdb4e40 Mon Sep 17 00:00:00 2001 From: Rogier Dijkman <40334679+azurekid@users.noreply.github.com> Date: Fri, 10 Jun 2022 14:22:09 +0200 Subject: [PATCH] Update mitre.csv --- mitre.csv | 385 ------------------------------------------------------ 1 file changed, 385 deletions(-) diff --git a/mitre.csv b/mitre.csv index 24c9c4c..f5f9901 100644 --- a/mitre.csv +++ b/mitre.csv @@ -1,86 +1,25 @@ ID,tactics T1548,"DefenseEvasion,PrivilegeEscalation" -T1548.002,"DefenseEvasion,PrivilegeEscalation" -T1548.004,"DefenseEvasion,PrivilegeEscalation" -T1548.001,"DefenseEvasion,PrivilegeEscalation" -T1548.003,"DefenseEvasion,PrivilegeEscalation" T1134,"DefenseEvasion,PrivilegeEscalation" -T1134.002,"DefenseEvasion,PrivilegeEscalation" -T1134.003,"DefenseEvasion,PrivilegeEscalation" -T1134.004,"DefenseEvasion,PrivilegeEscalation" -T1134.005,"DefenseEvasion,PrivilegeEscalation" -T1134.001,"DefenseEvasion,PrivilegeEscalation" T1531,Impact T1087,Discovery -T1087.004,Discovery -T1087.002,Discovery -T1087.003,Discovery -T1087.001,Discovery T1098,Persistence -T1098.001,Persistence -T1098.003,Persistence -T1098.002,Persistence -T1098.005,Persistence -T1098.004,Persistence T1583,ResourceDevelopment -T1583.005,ResourceDevelopment -T1583.002,ResourceDevelopment -T1583.001,ResourceDevelopment -T1583.004,ResourceDevelopment -T1583.003,ResourceDevelopment -T1583.006,ResourceDevelopment T1595,Reconnaissance -T1595.001,Reconnaissance -T1595.002,Reconnaissance -T1595.003,Reconnaissance T1557,"Collection,CredentialAccess" -T1557.002,"Collection,CredentialAccess" -T1557.003,"Collection,CredentialAccess" -T1557.001,"Collection,CredentialAccess" T1071,CommandandControl -T1071.004,CommandandControl -T1071.002,CommandandControl -T1071.003,CommandandControl -T1071.001,CommandandControl T1010,Discovery T1560,Collection -T1560.003,Collection -T1560.002,Collection -T1560.001,Collection T1123,Collection T1119,Collection T1020,Exfiltration -T1020.001,Exfiltration T1197,"DefenseEvasion,Persistence" T1547,"Persistence,PrivilegeEscalation" -T1547.014,"Persistence,PrivilegeEscalation" -T1547.002,"Persistence,PrivilegeEscalation" -T1547.006,"Persistence,PrivilegeEscalation" -T1547.008,"Persistence,PrivilegeEscalation" -T1547.015,"Persistence,PrivilegeEscalation" -T1547.010,"Persistence,PrivilegeEscalation" -T1547.012,"Persistence,PrivilegeEscalation" -T1547.007,"Persistence,PrivilegeEscalation" -T1547.001,"Persistence,PrivilegeEscalation" -T1547.005,"Persistence,PrivilegeEscalation" -T1547.009,"Persistence,PrivilegeEscalation" -T1547.003,"Persistence,PrivilegeEscalation" -T1547.004,"Persistence,PrivilegeEscalation" -T1547.013,"Persistence,PrivilegeEscalation" T1037,"Persistence,PrivilegeEscalation" -T1037.002,"Persistence,PrivilegeEscalation" -T1037.001,"Persistence,PrivilegeEscalation" -T1037.003,"Persistence,PrivilegeEscalation" -T1037.004,"Persistence,PrivilegeEscalation" -T1037.005,"Persistence,PrivilegeEscalation" T1217,Discovery T1176,Persistence T1185,Collection T1110,CredentialAccess -T1110.004,CredentialAccess -T1110.002,CredentialAccess -T1110.001,CredentialAccess -T1110.003,CredentialAccess T1612,DefenseEvasion T1115,Collection T1580,Discovery @@ -88,141 +27,51 @@ T1538,Discovery T1526,Discovery T1619,Discovery T1059,Execution -T1059.002,Execution -T1059.007,Execution -T1059.008,Execution -T1059.001,Execution -T1059.006,Execution -T1059.004,Execution -T1059.005,Execution -T1059.003,Execution T1092,CommandandControl T1586,ResourceDevelopment -T1586.002,ResourceDevelopment -T1586.001,ResourceDevelopment T1554,Persistence T1584,ResourceDevelopment -T1584.005,ResourceDevelopment -T1584.002,ResourceDevelopment -T1584.001,ResourceDevelopment -T1584.004,ResourceDevelopment -T1584.003,ResourceDevelopment -T1584.006,ResourceDevelopment T1609,Execution T1613,Discovery T1136,Persistence -T1136.003,Persistence -T1136.002,Persistence -T1136.001,Persistence T1543,"Persistence,PrivilegeEscalation" -T1543.001,"Persistence,PrivilegeEscalation" -T1543.004,"Persistence,PrivilegeEscalation" -T1543.002,"Persistence,PrivilegeEscalation" -T1543.003,"Persistence,PrivilegeEscalation" T1555,CredentialAccess -T1555.003,CredentialAccess -T1555.001,CredentialAccess -T1555.005,CredentialAccess -T1555.002,CredentialAccess -T1555.004,CredentialAccess T1485,Impact T1132,CommandandControl -T1132.002,CommandandControl -T1132.001,CommandandControl T1486,Impact T1565,Impact -T1565.003,Impact -T1565.001,Impact -T1565.002,Impact T1001,CommandandControl -T1001.001,CommandandControl -T1001.003,CommandandControl -T1001.002,CommandandControl T1074,Collection -T1074.001,Collection -T1074.002,Collection T1030,Exfiltration T1530,Collection T1602,Collection -T1602.002,Collection -T1602.001,Collection T1213,Collection -T1213.003,Collection -T1213.001,Collection -T1213.002,Collection T1005,Collection T1039,Collection T1025,Collection T1622,"DefenseEvasion,Discovery" T1491,Impact -T1491.002,Impact -T1491.001,Impact T1140,DefenseEvasion T1610,"DefenseEvasion,Execution" T1587,ResourceDevelopment -T1587.002,ResourceDevelopment -T1587.003,ResourceDevelopment -T1587.004,ResourceDevelopment -T1587.001,ResourceDevelopment T1006,DefenseEvasion T1561,Impact -T1561.001,Impact -T1561.002,Impact T1484,"DefenseEvasion,PrivilegeEscalation" -T1484.002,"DefenseEvasion,PrivilegeEscalation" -T1484.001,"DefenseEvasion,PrivilegeEscalation" T1482,Discovery T1189,InitialAccess T1568,CommandandControl -T1568.003,CommandandControl -T1568.002,CommandandControl -T1568.001,CommandandControl T1114,Collection -T1114.003,Collection -T1114.001,Collection -T1114.002,Collection T1573,CommandandControl -T1573.002,CommandandControl -T1573.001,CommandandControl T1499,Impact -T1499.003,Impact -T1499.004,Impact -T1499.001,Impact -T1499.002,Impact T1611,PrivilegeEscalation T1585,ResourceDevelopment -T1585.002,ResourceDevelopment -T1585.001,ResourceDevelopment T1546,"Persistence,PrivilegeEscalation" -T1546.008,"Persistence,PrivilegeEscalation" -T1546.009,"Persistence,PrivilegeEscalation" -T1546.010,"Persistence,PrivilegeEscalation" -T1546.011,"Persistence,PrivilegeEscalation" -T1546.001,"Persistence,PrivilegeEscalation" -T1546.015,"Persistence,PrivilegeEscalation" -T1546.014,"Persistence,PrivilegeEscalation" -T1546.012,"Persistence,PrivilegeEscalation" -T1546.006,"Persistence,PrivilegeEscalation" -T1546.007,"Persistence,PrivilegeEscalation" -T1546.013,"Persistence,PrivilegeEscalation" -T1546.002,"Persistence,PrivilegeEscalation" -T1546.005,"Persistence,PrivilegeEscalation" -T1546.004,"Persistence,PrivilegeEscalation" -T1546.003,"Persistence,PrivilegeEscalation" T1480,DefenseEvasion -T1480.001,DefenseEvasion T1048,Exfiltration -T1048.002,Exfiltration -T1048.001,Exfiltration -T1048.003,Exfiltration T1041,Exfiltration T1011,Exfiltration -T1011.001,Exfiltration T1052,Exfiltration -T1052.001,Exfiltration T1567,Exfiltration -T1567.002,Exfiltration -T1567.001,Exfiltration T1190,InitialAccess T1203,Execution T1212,CredentialAccess @@ -233,346 +82,112 @@ T1133,"InitialAccess,Persistence" T1008,CommandandControl T1083,Discovery T1222,DefenseEvasion -T1222.002,DefenseEvasion -T1222.001,DefenseEvasion T1495,Impact T1187,CredentialAccess T1606,CredentialAccess -T1606.002,CredentialAccess -T1606.001,CredentialAccess T1592,Reconnaissance -T1592.004,Reconnaissance -T1592.003,Reconnaissance -T1592.001,Reconnaissance -T1592.002,Reconnaissance T1589,Reconnaissance -T1589.001,Reconnaissance -T1589.002,Reconnaissance -T1589.003,Reconnaissance T1590,Reconnaissance -T1590.002,Reconnaissance -T1590.001,Reconnaissance -T1590.005,Reconnaissance -T1590.006,Reconnaissance -T1590.004,Reconnaissance -T1590.003,Reconnaissance T1591,Reconnaissance -T1591.002,Reconnaissance -T1591.001,Reconnaissance -T1591.003,Reconnaissance -T1591.004,Reconnaissance T1615,Discovery T1200,InitialAccess T1564,DefenseEvasion -T1564.008,DefenseEvasion -T1564.005,DefenseEvasion -T1564.001,DefenseEvasion -T1564.002,DefenseEvasion -T1564.003,DefenseEvasion -T1564.004,DefenseEvasion -T1564.010,DefenseEvasion -T1564.009,DefenseEvasion -T1564.006,DefenseEvasion -T1564.007,DefenseEvasion T1574,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.012,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.001,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.002,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.004,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.006,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.005,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.013,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.007,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.008,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.009,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.010,"DefenseEvasion,Persistence,PrivilegeEscalation" -T1574.011,"DefenseEvasion,Persistence,PrivilegeEscalation" T1562,DefenseEvasion -T1562.008,DefenseEvasion -T1562.002,DefenseEvasion -T1562.007,DefenseEvasion -T1562.004,DefenseEvasion -T1562.001,DefenseEvasion -T1562.010,DefenseEvasion -T1562.003,DefenseEvasion -T1562.006,DefenseEvasion -T1562.009,DefenseEvasion T1525,Persistence T1070,DefenseEvasion -T1070.003,DefenseEvasion -T1070.002,DefenseEvasion -T1070.001,DefenseEvasion -T1070.004,DefenseEvasion -T1070.005,DefenseEvasion -T1070.006,DefenseEvasion T1202,DefenseEvasion T1105,CommandandControl T1490,Impact T1056,"Collection,CredentialAccess" -T1056.004,"Collection,CredentialAccess" -T1056.002,"Collection,CredentialAccess" -T1056.001,"Collection,CredentialAccess" -T1056.003,"Collection,CredentialAccess" T1559,Execution -T1559.001,Execution -T1559.002,Execution -T1559.003,Execution T1534,LateralMovement T1570,LateralMovement T1036,DefenseEvasion -T1036.007,DefenseEvasion -T1036.001,DefenseEvasion -T1036.004,DefenseEvasion -T1036.005,DefenseEvasion -T1036.003,DefenseEvasion -T1036.002,DefenseEvasion -T1036.006,DefenseEvasion T1556,"CredentialAccess,DefenseEvasion,Persistence" -T1556.001,"CredentialAccess,DefenseEvasion,Persistence" -T1556.004,"CredentialAccess,DefenseEvasion,Persistence" -T1556.002,"CredentialAccess,DefenseEvasion,Persistence" -T1556.003,"CredentialAccess,DefenseEvasion,Persistence" -T1556.005,"CredentialAccess,DefenseEvasion,Persistence" T1578,DefenseEvasion -T1578.002,DefenseEvasion -T1578.001,DefenseEvasion -T1578.003,DefenseEvasion -T1578.004,DefenseEvasion T1112,DefenseEvasion T1601,DefenseEvasion -T1601.002,DefenseEvasion -T1601.001,DefenseEvasion T1111,CredentialAccess T1621,CredentialAccess T1104,CommandandControl T1106,Execution T1599,DefenseEvasion -T1599.001,DefenseEvasion T1498,Impact -T1498.001,Impact -T1498.002,Impact T1046,Discovery T1135,Discovery T1040,"CredentialAccess,Discovery" T1095,CommandandControl T1571,CommandandControl T1003,CredentialAccess -T1003.008,CredentialAccess -T1003.005,CredentialAccess -T1003.006,CredentialAccess -T1003.004,CredentialAccess -T1003.001,CredentialAccess -T1003.003,CredentialAccess -T1003.007,CredentialAccess -T1003.002,CredentialAccess T1027,DefenseEvasion -T1027.001,DefenseEvasion -T1027.004,DefenseEvasion -T1027.006,DefenseEvasion -T1027.005,DefenseEvasion -T1027.002,DefenseEvasion -T1027.003,DefenseEvasion T1588,ResourceDevelopment -T1588.003,ResourceDevelopment -T1588.004,ResourceDevelopment -T1588.005,ResourceDevelopment -T1588.001,ResourceDevelopment -T1588.002,ResourceDevelopment -T1588.006,ResourceDevelopment T1137,Persistence -T1137.006,Persistence -T1137.001,Persistence -T1137.002,Persistence -T1137.003,Persistence -T1137.004,Persistence -T1137.005,Persistence T1201,Discovery T1120,Discovery T1069,Discovery -T1069.003,Discovery -T1069.002,Discovery -T1069.001,Discovery T1566,InitialAccess T1598,Reconnaissance -T1598.002,Reconnaissance -T1598.003,Reconnaissance -T1598.001,Reconnaissance -T1566.001,InitialAccess -T1566.002,InitialAccess -T1566.003,InitialAccess T1647,DefenseEvasion T1542,"DefenseEvasion,Persistence" -T1542.003,"DefenseEvasion,Persistence" -T1542.002,"DefenseEvasion,Persistence" -T1542.004,"DefenseEvasion,Persistence" -T1542.001,"DefenseEvasion,Persistence" -T1542.005,"DefenseEvasion,Persistence" T1057,Discovery T1055,"DefenseEvasion,PrivilegeEscalation" -T1055.004,"DefenseEvasion,PrivilegeEscalation" -T1055.001,"DefenseEvasion,PrivilegeEscalation" -T1055.011,"DefenseEvasion,PrivilegeEscalation" -T1055.015,"DefenseEvasion,PrivilegeEscalation" -T1055.002,"DefenseEvasion,PrivilegeEscalation" -T1055.009,"DefenseEvasion,PrivilegeEscalation" -T1055.013,"DefenseEvasion,PrivilegeEscalation" -T1055.012,"DefenseEvasion,PrivilegeEscalation" -T1055.008,"DefenseEvasion,PrivilegeEscalation" -T1055.003,"DefenseEvasion,PrivilegeEscalation" -T1055.005,"DefenseEvasion,PrivilegeEscalation" -T1055.014,"DefenseEvasion,PrivilegeEscalation" T1572,CommandandControl T1090,CommandandControl -T1090.004,CommandandControl -T1090.002,CommandandControl -T1090.001,CommandandControl -T1090.003,CommandandControl T1012,Discovery T1620,DefenseEvasion T1219,CommandandControl T1563,LateralMovement -T1563.002,LateralMovement -T1563.001,LateralMovement T1021,LateralMovement -T1021.003,LateralMovement -T1021.001,LateralMovement -T1021.002,LateralMovement -T1021.004,LateralMovement -T1021.005,LateralMovement -T1021.006,LateralMovement T1018,Discovery T1091,"InitialAccess,LateralMovement" T1496,Impact T1207,DefenseEvasion T1014,DefenseEvasion T1053,"Execution,Persistence,PrivilegeEscalation" -T1053.002,"Execution,Persistence,PrivilegeEscalation" -T1053.007,"Execution,Persistence,PrivilegeEscalation" -T1053.003,"Execution,Persistence,PrivilegeEscalation" -T1053.005,"Execution,Persistence,PrivilegeEscalation" -T1053.006,"Execution,Persistence,PrivilegeEscalation" T1029,Exfiltration T1113,Collection T1597,Reconnaissance -T1597.002,Reconnaissance -T1597.001,Reconnaissance T1596,Reconnaissance -T1596.004,Reconnaissance -T1596.001,Reconnaissance -T1596.003,Reconnaissance -T1596.005,Reconnaissance -T1596.002,Reconnaissance T1593,Reconnaissance -T1593.002,Reconnaissance -T1593.001,Reconnaissance T1594,Reconnaissance T1505,Persistence -T1505.004,Persistence -T1505.001,Persistence -T1505.005,Persistence -T1505.002,Persistence -T1505.003,Persistence T1489,Impact T1129,Execution T1072,"Execution,LateralMovement" T1518,Discovery -T1518.001,Discovery T1608,ResourceDevelopment -T1608.004,ResourceDevelopment -T1608.003,ResourceDevelopment -T1608.005,ResourceDevelopment -T1608.001,ResourceDevelopment -T1608.002,ResourceDevelopment T1528,CredentialAccess T1539,CredentialAccess T1558,CredentialAccess -T1558.004,CredentialAccess -T1558.001,CredentialAccess -T1558.003,CredentialAccess -T1558.002,CredentialAccess T1553,DefenseEvasion -T1553.002,DefenseEvasion -T1553.006,DefenseEvasion -T1553.001,DefenseEvasion -T1553.004,DefenseEvasion -T1553.005,DefenseEvasion -T1553.003,DefenseEvasion T1195,InitialAccess -T1195.003,InitialAccess -T1195.001,InitialAccess -T1195.002,InitialAccess T1218,DefenseEvasion -T1218.003,DefenseEvasion -T1218.001,DefenseEvasion -T1218.002,DefenseEvasion -T1218.004,DefenseEvasion -T1218.014,DefenseEvasion -T1218.013,DefenseEvasion -T1218.005,DefenseEvasion -T1218.007,DefenseEvasion -T1218.008,DefenseEvasion -T1218.009,DefenseEvasion -T1218.010,DefenseEvasion -T1218.011,DefenseEvasion -T1218.012,DefenseEvasion T1082,Discovery T1614,Discovery -T1614.001,Discovery T1016,Discovery -T1016.001,Discovery T1049,Discovery T1033,Discovery T1216,DefenseEvasion -T1216.001,DefenseEvasion T1007,Discovery T1569,Execution -T1569.001,Execution -T1569.002,Execution T1529,Impact T1124,Discovery T1080,LateralMovement T1221,DefenseEvasion T1205,"CommandandControl,DefenseEvasion,Persistence" -T1205.001,"CommandandControl,DefenseEvasion,Persistence" T1537,Exfiltration T1127,DefenseEvasion -T1127.001,DefenseEvasion T1199,InitialAccess T1552,CredentialAccess -T1552.003,CredentialAccess -T1552.005,CredentialAccess -T1552.007,CredentialAccess -T1552.001,CredentialAccess -T1552.002,CredentialAccess -T1552.006,CredentialAccess -T1552.004,CredentialAccess T1535,DefenseEvasion T1550,"DefenseEvasion,LateralMovement" -T1550.001,"DefenseEvasion,LateralMovement" -T1550.002,"DefenseEvasion,LateralMovement" -T1550.003,"DefenseEvasion,LateralMovement" -T1550.004,"DefenseEvasion,LateralMovement" T1204,Execution -T1204.002,Execution -T1204.003,Execution -T1204.001,Execution T1078,"DefenseEvasion,InitialAccess,Persistence,PrivilegeEscalation" -T1078.004,"DefenseEvasion,InitialAccess,Persistence,PrivilegeEscalation" -T1078.001,"DefenseEvasion,InitialAccess,Persistence,PrivilegeEscalation" -T1078.002,"DefenseEvasion,InitialAccess,Persistence,PrivilegeEscalation" -T1078.003,"DefenseEvasion,InitialAccess,Persistence,PrivilegeEscalation" T1125,Collection T1497,"DefenseEvasion,Discovery" -T1497.001,"DefenseEvasion,Discovery" -T1497.003,"DefenseEvasion,Discovery" -T1497.002,"DefenseEvasion,Discovery" T1600,DefenseEvasion -T1600.002,DefenseEvasion -T1600.001,DefenseEvasion T1102,CommandandControl -T1102.002,CommandandControl -T1102.001,CommandandControl -T1102.003,CommandandControl T1047,Execution T1220,DefenseEvasion T0800,InhibitResponseFunction