TA0001 2
Initial Access
T1078.003Valid Accounts: Local Accounts
T1133External Remote Services
TA0002 5
Execution
T1059.001Command and Scripting Interpreter: PowerShell
T1059.003Command and Scripting Interpreter: Windows Command Shell
T1106Native API
T1204.002User Execution: Malicious File
T1569.002System Services: Service Execution
TA0004 0
Privilege Escalation
TA0005 2
Defense Evasion
T1036.005Masquerading: Match Legitimate Name or Location
T1068Exploitation for Privilege Escalation
TA0006 2
Credential Access
T1021.002Remote Services: External Remote Services
T1212Exploitation for Credential Access
TA0007 6
Discovery
T1016.001Network Configuration Discovery: Network Connection Enumeration
T1018Remote System Discovery
T1057Process Discovery
T1083File and Directory Discovery
T1124Time Discovery
T1135Network Share Discovery
TA0008 2
Lateral Movement
T1333External Remote Services
T1570Tool Transfer
TA0011 4
Command & Control
T1071.001Application Layer Protocol: Web Protocols
T1071.004Application Layer Protocol: DNS
T1090.003Multi-hop Proxy
T1219Remote Desktop Protocol