Assessor_2.0/src/assets/data/mitre-enterprise-v18.1.json

{"version":"18.1","tacticOrder":["Reconnaissance","Resource Development","Initial Access","Execution","Persistence","Privilege Escalation","Defense Evasion","Credential Access","Discovery","Lateral Movement","Collection","Command and Control","Exfiltration","Impact"],"techniques":[{"id":"T1001","name":"Data Obfuscation","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1001","sourceCount":13},{"id":"T1001.001","name":"Data Obfuscation: Junk Data","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1001","url":"https://attack.mitre.org/techniques/T1001/001","sourceCount":17},{"id":"T1001.002","name":"Data Obfuscation: Steganography","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1001","url":"https://attack.mitre.org/techniques/T1001/002","sourceCount":13},{"id":"T1001.003","name":"Data Obfuscation: Protocol or Service Impersonation","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1001","url":"https://attack.mitre.org/techniques/T1001/003","sourceCount":22},{"id":"T1003","name":"OS Credential Dumping","tactics":["Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1003","sourceCount":20},{"id":"T1003.001","name":"OS Credential Dumping: LSASS Memory","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/001","sourceCount":75},{"id":"T1003.002","name":"OS Credential Dumping: Security Account Manager","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/002","sourceCount":33},{"id":"T1003.003","name":"OS Credential Dumping: NTDS","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/003","sourceCount":24},{"id":"T1003.004","name":"OS Credential Dumping: LSA Secrets","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/004","sourceCount":19},{"id":"T1003.005","name":"OS Credential Dumping: Cached Domain Credentials","tactics":["Credential Access"],"platforms":["Linux","Windows"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/005","sourceCount":8},{"id":"T1003.006","name":"OS Credential Dumping: DCSync","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/006","sourceCount":8},{"id":"T1003.007","name":"OS Credential Dumping: Proc Filesystem","tactics":["Credential Access"],"platforms":["Linux"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/007","sourceCount":3},{"id":"T1003.008","name":"OS Credential Dumping: /etc/passwd and /etc/shadow","tactics":["Credential Access"],"platforms":["Linux"],"parent":"T1003","url":"https://attack.mitre.org/techniques/T1003/008","sourceCount":2},{"id":"T1005","name":"Data from Local System","tactics":["Collection"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1005","sourceCount":218},{"id":"T1006","name":"Direct Volume Access","tactics":["Defense Evasion"],"platforms":["Network Devices","Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1006","sourceCount":4},{"id":"T1007","name":"System Service Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1007","sourceCount":67},{"id":"T1008","name":"Fallback Channels","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1008","sourceCount":53},{"id":"T1010","name":"Application Window Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1010","sourceCount":35},{"id":"T1011","name":"Exfiltration Over Other Network Medium","tactics":["Exfiltration"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1011","sourceCount":0},{"id":"T1011.001","name":"Exfiltration Over Other Network Medium: Exfiltration Over Bluetooth","tactics":["Exfiltration"],"platforms":["Linux","Windows","macOS"],"parent":"T1011","url":"https://attack.mitre.org/techniques/T1011/001","sourceCount":1},{"id":"T1012","name":"Query Registry","tactics":["Discovery"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1012","sourceCount":118},{"id":"T1014","name":"Rootkit","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1014","sourceCount":32},{"id":"T1016","name":"System Network Configuration Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1016","sourceCount":277},{"id":"T1016.001","name":"System Network Configuration Discovery: Internet Connection Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1016","url":"https://attack.mitre.org/techniques/T1016/001","sourceCount":26},{"id":"T1016.002","name":"System Network Configuration Discovery: Wi-Fi Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1016","url":"https://attack.mitre.org/techniques/T1016/002","sourceCount":7},{"id":"T1018","name":"Remote System Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1018","sourceCount":99},{"id":"T1020","name":"Automated Exfiltration","tactics":["Exfiltration"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1020","sourceCount":29},{"id":"T1020.001","name":"Automated Exfiltration: Traffic Duplication","tactics":["Exfiltration"],"platforms":["IaaS","Network Devices"],"parent":"T1020","url":"https://attack.mitre.org/techniques/T1020/001","sourceCount":0},{"id":"T1021","name":"Remote Services","tactics":["Lateral Movement"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1021","sourceCount":7},{"id":"T1021.001","name":"Remote Services: Remote Desktop Protocol","tactics":["Lateral Movement"],"platforms":["Windows"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/001","sourceCount":59},{"id":"T1021.002","name":"Remote Services: SMB/Windows Admin Shares","tactics":["Lateral Movement"],"platforms":["Windows"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/002","sourceCount":64},{"id":"T1021.003","name":"Remote Services: Distributed Component Object Model","tactics":["Lateral Movement"],"platforms":["Windows"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/003","sourceCount":3},{"id":"T1021.004","name":"Remote Services: SSH","tactics":["Lateral Movement"],"platforms":["ESXi","Linux","macOS"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/004","sourceCount":26},{"id":"T1021.005","name":"Remote Services: VNC","tactics":["Lateral Movement"],"platforms":["Linux","Windows","macOS"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/005","sourceCount":11},{"id":"T1021.006","name":"Remote Services: Windows Remote Management","tactics":["Lateral Movement"],"platforms":["Windows"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/006","sourceCount":10},{"id":"T1021.007","name":"Remote Services: Cloud Services","tactics":["Lateral Movement"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/007","sourceCount":4},{"id":"T1021.008","name":"Remote Services: Direct Cloud VM Connections","tactics":["Lateral Movement"],"platforms":["IaaS"],"parent":"T1021","url":"https://attack.mitre.org/techniques/T1021/008","sourceCount":0},{"id":"T1025","name":"Data from Removable Media","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1025","sourceCount":24},{"id":"T1027","name":"Obfuscated Files or Information","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1027","sourceCount":152},{"id":"T1027.001","name":"Obfuscated Files or Information: Binary Padding","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/001","sourceCount":28},{"id":"T1027.002","name":"Obfuscated Files or Information: Software Packing","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/002","sourceCount":102},{"id":"T1027.003","name":"Obfuscated Files or Information: Steganography","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/003","sourceCount":29},{"id":"T1027.004","name":"Obfuscated Files or Information: Compile After Delivery","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/004","sourceCount":10},{"id":"T1027.005","name":"Obfuscated Files or Information: Indicator Removal from Tools","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/005","sourceCount":18},{"id":"T1027.006","name":"Obfuscated Files or Information: HTML Smuggling","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/006","sourceCount":3},{"id":"T1027.007","name":"Obfuscated Files or Information: Dynamic API Resolution","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/007","sourceCount":15},{"id":"T1027.008","name":"Obfuscated Files or Information: Stripped Payloads","tactics":["Defense Evasion"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/008","sourceCount":2},{"id":"T1027.009","name":"Obfuscated Files or Information: Embedded Payloads","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/009","sourceCount":23},{"id":"T1027.010","name":"Obfuscated Files or Information: Command Obfuscation","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/010","sourceCount":65},{"id":"T1027.011","name":"Obfuscated Files or Information: Fileless Storage","tactics":["Defense Evasion"],"platforms":["Linux","Windows"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/011","sourceCount":31},{"id":"T1027.012","name":"Obfuscated Files or Information: LNK Icon Smuggling","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/012","sourceCount":4},{"id":"T1027.013","name":"Obfuscated Files or Information: Encrypted/Encoded File","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/013","sourceCount":221},{"id":"T1027.014","name":"Obfuscated Files or Information: Polymorphic Code","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/014","sourceCount":1},{"id":"T1027.015","name":"Obfuscated Files or Information: Compression","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/015","sourceCount":31},{"id":"T1027.016","name":"Obfuscated Files or Information: Junk Code Insertion","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/016","sourceCount":19},{"id":"T1027.017","name":"Obfuscated Files or Information: SVG Smuggling","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1027","url":"https://attack.mitre.org/techniques/T1027/017","sourceCount":0},{"id":"T1029","name":"Scheduled Transfer","tactics":["Exfiltration"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1029","sourceCount":18},{"id":"T1030","name":"Data Transfer Size Limits","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1030","sourceCount":21},{"id":"T1033","name":"System Owner/User Discovery","tactics":["Discovery"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1033","sourceCount":231},{"id":"T1036","name":"Masquerading","tactics":["Defense Evasion"],"platforms":["Containers","ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1036","sourceCount":58},{"id":"T1036.001","name":"Masquerading: Invalid Code Signature","tactics":["Defense Evasion"],"platforms":["Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/001","sourceCount":9},{"id":"T1036.002","name":"Masquerading: Right-to-Left Override","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/002","sourceCount":5},{"id":"T1036.003","name":"Masquerading: Rename Legitimate Utilities","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/003","sourceCount":10},{"id":"T1036.004","name":"Masquerading: Masquerade Task or Service","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/004","sourceCount":90},{"id":"T1036.005","name":"Masquerading: Match Legitimate Resource Name or Location","tactics":["Defense Evasion"],"platforms":["Containers","ESXi","Linux","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/005","sourceCount":202},{"id":"T1036.006","name":"Masquerading: Space after Filename","tactics":["Defense Evasion"],"platforms":["Linux","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/006","sourceCount":2},{"id":"T1036.007","name":"Masquerading: Double File Extension","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/007","sourceCount":5},{"id":"T1036.008","name":"Masquerading: Masquerade File Type","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/008","sourceCount":16},{"id":"T1036.009","name":"Masquerading: Break Process Trees","tactics":["Defense Evasion"],"platforms":["Linux","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/009","sourceCount":1},{"id":"T1036.010","name":"Masquerading: Masquerade Account Name","tactics":["Defense Evasion"],"platforms":["Containers","IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/010","sourceCount":7},{"id":"T1036.011","name":"Masquerading: Overwrite Process Arguments","tactics":["Defense Evasion"],"platforms":["Linux"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/011","sourceCount":1},{"id":"T1036.012","name":"Masquerading: Browser Fingerprint","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1036","url":"https://attack.mitre.org/techniques/T1036/012","sourceCount":1},{"id":"T1037","name":"Boot or Logon Initialization Scripts","tactics":["Persistence","Privilege Escalation"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1037","sourceCount":7},{"id":"T1037.001","name":"Boot or Logon Initialization Scripts: Logon Script (Windows)","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1037","url":"https://attack.mitre.org/techniques/T1037/001","sourceCount":6},{"id":"T1037.002","name":"Boot or Logon Initialization Scripts: Login Hook","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1037","url":"https://attack.mitre.org/techniques/T1037/002","sourceCount":0},{"id":"T1037.003","name":"Boot or Logon Initialization Scripts: Network Logon Script","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1037","url":"https://attack.mitre.org/techniques/T1037/003","sourceCount":0},{"id":"T1037.004","name":"Boot or Logon Initialization Scripts: RC Scripts","tactics":["Persistence","Privilege Escalation"],"platforms":["ESXi","Linux","Network Devices","macOS"],"parent":"T1037","url":"https://attack.mitre.org/techniques/T1037/004","sourceCount":7},{"id":"T1037.005","name":"Boot or Logon Initialization Scripts: Startup Items","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1037","url":"https://attack.mitre.org/techniques/T1037/005","sourceCount":1},{"id":"T1039","name":"Data from Network Shared Drive","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1039","sourceCount":13},{"id":"T1040","name":"Network Sniffing","tactics":["Credential Access","Discovery"],"platforms":["IaaS","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1040","sourceCount":27},{"id":"T1041","name":"Exfiltration Over C2 Channel","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1041","sourceCount":191},{"id":"T1046","name":"Network Service Discovery","tactics":["Discovery"],"platforms":["Containers","IaaS","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1046","sourceCount":71},{"id":"T1047","name":"Windows Management Instrumentation","tactics":["Execution"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1047","sourceCount":138},{"id":"T1048","name":"Exfiltration Over Alternative Protocol","tactics":["Exfiltration"],"platforms":["ESXi","IaaS","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1048","sourceCount":9},{"id":"T1048.001","name":"Exfiltration Over Alternative Protocol: Exfiltration Over Symmetric Encrypted Non-C2 Protocol","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1048","url":"https://attack.mitre.org/techniques/T1048/001","sourceCount":0},{"id":"T1048.002","name":"Exfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non-C2 Protocol","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1048","url":"https://attack.mitre.org/techniques/T1048/002","sourceCount":6},{"id":"T1048.003","name":"Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted Non-C2 Protocol","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1048","url":"https://attack.mitre.org/techniques/T1048/003","sourceCount":34},{"id":"T1049","name":"System Network Connections Discovery","tactics":["Discovery"],"platforms":["ESXi","IaaS","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1049","sourceCount":95},{"id":"T1052","name":"Exfiltration Over Physical Medium","tactics":["Exfiltration"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1052","sourceCount":0},{"id":"T1052.001","name":"Exfiltration Over Physical Medium: Exfiltration over USB","tactics":["Exfiltration"],"platforms":["Linux","Windows","macOS"],"parent":"T1052","url":"https://attack.mitre.org/techniques/T1052/001","sourceCount":7},{"id":"T1053","name":"Scheduled Task/Job","tactics":["Execution","Persistence","Privilege Escalation"],"platforms":["Containers","ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1053","sourceCount":1},{"id":"T1053.002","name":"Scheduled Task/Job: At","tactics":["Execution","Persistence","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":"T1053","url":"https://attack.mitre.org/techniques/T1053/002","sourceCount":6},{"id":"T1053.003","name":"Scheduled Task/Job: Cron","tactics":["Execution","Persistence","Privilege Escalation"],"platforms":["ESXi","Linux","macOS"],"parent":"T1053","url":"https://attack.mitre.org/techniques/T1053/003","sourceCount":16},{"id":"T1053.005","name":"Scheduled Task/Job: Scheduled Task","tactics":["Execution","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1053","url":"https://attack.mitre.org/techniques/T1053/005","sourceCount":184},{"id":"T1053.006","name":"Scheduled Task/Job: Systemd Timers","tactics":["Execution","Persistence","Privilege Escalation"],"platforms":["Linux"],"parent":"T1053","url":"https://attack.mitre.org/techniques/T1053/006","sourceCount":0},{"id":"T1053.007","name":"Scheduled Task/Job: Container Orchestration Job","tactics":["Execution","Persistence","Privilege Escalation"],"platforms":["Containers"],"parent":"T1053","url":"https://attack.mitre.org/techniques/T1053/007","sourceCount":0},{"id":"T1055","name":"Process Injection","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1055","sourceCount":82},{"id":"T1055.001","name":"Process Injection: Dynamic-link Library Injection","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/001","sourceCount":66},{"id":"T1055.002","name":"Process Injection: Portable Executable Injection","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/002","sourceCount":13},{"id":"T1055.003","name":"Process Injection: Thread Execution Hijacking","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/003","sourceCount":4},{"id":"T1055.004","name":"Process Injection: Asynchronous Procedure Call","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/004","sourceCount":12},{"id":"T1055.005","name":"Process Injection: Thread Local Storage","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/005","sourceCount":2},{"id":"T1055.008","name":"Process Injection: Ptrace System Calls","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Linux"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/008","sourceCount":1},{"id":"T1055.009","name":"Process Injection: Proc Memory","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Linux"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/009","sourceCount":1},{"id":"T1055.011","name":"Process Injection: Extra Window Memory Injection","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/011","sourceCount":2},{"id":"T1055.012","name":"Process Injection: Process Hollowing","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/012","sourceCount":39},{"id":"T1055.013","name":"Process Injection: Process Doppelgänging","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/013","sourceCount":3},{"id":"T1055.014","name":"Process Injection: VDSO Hijacking","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Linux"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/014","sourceCount":0},{"id":"T1055.015","name":"Process Injection: ListPlanting","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1055","url":"https://attack.mitre.org/techniques/T1055/015","sourceCount":1},{"id":"T1056","name":"Input Capture","tactics":["Collection","Credential Access"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1056","sourceCount":12},{"id":"T1056.001","name":"Input Capture: Keylogging","tactics":["Collection","Credential Access"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1056","url":"https://attack.mitre.org/techniques/T1056/001","sourceCount":152},{"id":"T1056.002","name":"Input Capture: GUI Input Capture","tactics":["Collection","Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1056","url":"https://attack.mitre.org/techniques/T1056/002","sourceCount":13},{"id":"T1056.003","name":"Input Capture: Web Portal Capture","tactics":["Collection","Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1056","url":"https://attack.mitre.org/techniques/T1056/003","sourceCount":5},{"id":"T1056.004","name":"Input Capture: Credential API Hooking","tactics":["Collection","Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1056","url":"https://attack.mitre.org/techniques/T1056/004","sourceCount":12},{"id":"T1057","name":"Process Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1057","sourceCount":304},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["Execution"],"platforms":["ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1059","sourceCount":43},{"id":"T1059.001","name":"Command and Scripting Interpreter: PowerShell","tactics":["Execution"],"platforms":["Windows"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/001","sourceCount":223},{"id":"T1059.002","name":"Command and Scripting Interpreter: AppleScript","tactics":["Execution"],"platforms":["macOS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/002","sourceCount":5},{"id":"T1059.003","name":"Command and Scripting Interpreter: Windows Command Shell","tactics":["Execution"],"platforms":["Windows"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/003","sourceCount":372},{"id":"T1059.004","name":"Command and Scripting Interpreter: Unix Shell","tactics":["Execution"],"platforms":["ESXi","Linux","Network Devices","macOS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/004","sourceCount":60},{"id":"T1059.005","name":"Command and Scripting Interpreter: Visual Basic","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/005","sourceCount":127},{"id":"T1059.006","name":"Command and Scripting Interpreter: Python","tactics":["Execution"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/006","sourceCount":55},{"id":"T1059.007","name":"Command and Scripting Interpreter: JavaScript","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/007","sourceCount":62},{"id":"T1059.008","name":"Command and Scripting Interpreter: Network Device CLI","tactics":["Execution"],"platforms":["Network Devices"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/008","sourceCount":2},{"id":"T1059.009","name":"Command and Scripting Interpreter: Cloud API","tactics":["Execution"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/009","sourceCount":4},{"id":"T1059.010","name":"Command and Scripting Interpreter: AutoHotKey & AutoIT","tactics":["Execution"],"platforms":["Windows"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/010","sourceCount":6},{"id":"T1059.011","name":"Command and Scripting Interpreter: Lua","tactics":["Execution"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/011","sourceCount":5},{"id":"T1059.012","name":"Command and Scripting Interpreter: Hypervisor CLI","tactics":["Execution"],"platforms":["ESXi"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/012","sourceCount":4},{"id":"T1059.013","name":"Command and Scripting Interpreter: Container CLI/API","tactics":["Execution"],"platforms":["Containers"],"parent":"T1059","url":"https://attack.mitre.org/techniques/T1059/013","sourceCount":1},{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["Privilege Escalation"],"platforms":["Containers","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1068","sourceCount":43},{"id":"T1069","name":"Permission Groups Discovery","tactics":["Discovery"],"platforms":["Containers","IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1069","sourceCount":13},{"id":"T1069.001","name":"Permission Groups Discovery: Local Groups","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1069","url":"https://attack.mitre.org/techniques/T1069/001","sourceCount":31},{"id":"T1069.002","name":"Permission Groups Discovery: Domain Groups","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1069","url":"https://attack.mitre.org/techniques/T1069/002","sourceCount":36},{"id":"T1069.003","name":"Permission Groups Discovery: Cloud Groups","tactics":["Discovery"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1069","url":"https://attack.mitre.org/techniques/T1069/003","sourceCount":4},{"id":"T1070","name":"Indicator Removal","tactics":["Defense Evasion"],"platforms":["Containers","ESXi","Linux","Network Devices","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1070","sourceCount":31},{"id":"T1070.001","name":"Indicator Removal: Clear Windows Event Logs","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/001","sourceCount":40},{"id":"T1070.002","name":"Indicator Removal: Clear Linux or Mac System Logs","tactics":["Defense Evasion"],"platforms":["Linux","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/002","sourceCount":8},{"id":"T1070.003","name":"Indicator Removal: Clear Command History","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/003","sourceCount":11},{"id":"T1070.004","name":"Indicator Removal: File Deletion","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/004","sourceCount":296},{"id":"T1070.005","name":"Indicator Removal: Network Share Connection Removal","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/005","sourceCount":5},{"id":"T1070.006","name":"Indicator Removal: Timestomp","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/006","sourceCount":56},{"id":"T1070.007","name":"Indicator Removal: Clear Network Connection History and Configurations","tactics":["Defense Evasion"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/007","sourceCount":4},{"id":"T1070.008","name":"Indicator Removal: Clear Mailbox Data","tactics":["Defense Evasion"],"platforms":["Linux","Office Suite","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/008","sourceCount":5},{"id":"T1070.009","name":"Indicator Removal: Clear Persistence","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/009","sourceCount":15},{"id":"T1070.010","name":"Indicator Removal: Relocate Malware","tactics":["Defense Evasion"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1070","url":"https://attack.mitre.org/techniques/T1070/010","sourceCount":0},{"id":"T1071","name":"Application Layer Protocol","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1071","sourceCount":16},{"id":"T1071.001","name":"Application Layer Protocol: Web Protocols","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1071","url":"https://attack.mitre.org/techniques/T1071/001","sourceCount":406},{"id":"T1071.002","name":"Application Layer Protocol: File Transfer Protocols","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1071","url":"https://attack.mitre.org/techniques/T1071/002","sourceCount":25},{"id":"T1071.003","name":"Application Layer Protocol: Mail Protocols","tactics":["Command and Control"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1071","url":"https://attack.mitre.org/techniques/T1071/003","sourceCount":26},{"id":"T1071.004","name":"Application Layer Protocol: DNS","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1071","url":"https://attack.mitre.org/techniques/T1071/004","sourceCount":53},{"id":"T1071.005","name":"Application Layer Protocol: Publish/Subscribe Protocols","tactics":["Command and Control"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1071","url":"https://attack.mitre.org/techniques/T1071/005","sourceCount":1},{"id":"T1072","name":"Software Deployment Tools","tactics":["Execution","Lateral Movement"],"platforms":["Linux","Network Devices","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1072","sourceCount":8},{"id":"T1074","name":"Data Staged","tactics":["Collection"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1074","sourceCount":8},{"id":"T1074.001","name":"Data Staged: Local Data Staging","tactics":["Collection"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1074","url":"https://attack.mitre.org/techniques/T1074/001","sourceCount":126},{"id":"T1074.002","name":"Data Staged: Remote Data Staging","tactics":["Collection"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":"T1074","url":"https://attack.mitre.org/techniques/T1074/002","sourceCount":13},{"id":"T1078","name":"Valid Accounts","tactics":["Defense Evasion","Initial Access","Persistence","Privilege Escalation"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1078","sourceCount":60},{"id":"T1078.001","name":"Valid Accounts: Default Accounts","tactics":["Defense Evasion","Initial Access","Persistence","Privilege Escalation"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":"T1078","url":"https://attack.mitre.org/techniques/T1078/001","sourceCount":7},{"id":"T1078.002","name":"Valid Accounts: Domain Accounts","tactics":["Defense Evasion","Initial Access","Persistence","Privilege Escalation"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1078","url":"https://attack.mitre.org/techniques/T1078/002","sourceCount":32},{"id":"T1078.003","name":"Valid Accounts: Local Accounts","tactics":["Defense Evasion","Initial Access","Persistence","Privilege Escalation"],"platforms":["Containers","ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1078","url":"https://attack.mitre.org/techniques/T1078/003","sourceCount":20},{"id":"T1078.004","name":"Valid Accounts: Cloud Accounts","tactics":["Defense Evasion","Initial Access","Persistence","Privilege Escalation"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1078","url":"https://attack.mitre.org/techniques/T1078/004","sourceCount":14},{"id":"T1080","name":"Taint Shared Content","tactics":["Lateral Movement"],"platforms":["Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1080","sourceCount":12},{"id":"T1082","name":"System Information Discovery","tactics":["Discovery"],"platforms":["ESXi","IaaS","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1082","sourceCount":403},{"id":"T1083","name":"File and Directory Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1083","sourceCount":355},{"id":"T1087","name":"Account Discovery","tactics":["Discovery"],"platforms":["ESXi","IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1087","sourceCount":9},{"id":"T1087.001","name":"Account Discovery: Local Account","tactics":["Discovery"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1087","url":"https://attack.mitre.org/techniques/T1087/001","sourceCount":63},{"id":"T1087.002","name":"Account Discovery: Domain Account","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1087","url":"https://attack.mitre.org/techniques/T1087/002","sourceCount":56},{"id":"T1087.003","name":"Account Discovery: Email Account","tactics":["Discovery"],"platforms":["Office Suite","Windows"],"parent":"T1087","url":"https://attack.mitre.org/techniques/T1087/003","sourceCount":14},{"id":"T1087.004","name":"Account Discovery: Cloud Account","tactics":["Discovery"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1087","url":"https://attack.mitre.org/techniques/T1087/004","sourceCount":6},{"id":"T1090","name":"Proxy","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1090","sourceCount":72},{"id":"T1090.001","name":"Proxy: Internal Proxy","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1090","url":"https://attack.mitre.org/techniques/T1090/001","sourceCount":32},{"id":"T1090.002","name":"Proxy: External Proxy","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1090","url":"https://attack.mitre.org/techniques/T1090/002","sourceCount":22},{"id":"T1090.003","name":"Proxy: Multi-hop Proxy","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1090","url":"https://attack.mitre.org/techniques/T1090/003","sourceCount":38},{"id":"T1090.004","name":"Proxy: Domain Fronting","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1090","url":"https://attack.mitre.org/techniques/T1090/004","sourceCount":5},{"id":"T1091","name":"Replication Through Removable Media","tactics":["Initial Access","Lateral Movement"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1091","sourceCount":28},{"id":"T1092","name":"Communication Through Removable Media","tactics":["Command and Control"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1092","sourceCount":3},{"id":"T1095","name":"Non-Application Layer Protocol","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1095","sourceCount":106},{"id":"T1098","name":"Account Manipulation","tactics":["Persistence","Privilege Escalation"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1098","sourceCount":6},{"id":"T1098.001","name":"Account Manipulation: Additional Cloud Credentials","tactics":["Persistence","Privilege Escalation"],"platforms":["IaaS","Identity Provider","SaaS"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/001","sourceCount":4},{"id":"T1098.002","name":"Account Manipulation: Additional Email Delegate Permissions","tactics":["Persistence","Privilege Escalation"],"platforms":["Office Suite","Windows"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/002","sourceCount":5},{"id":"T1098.003","name":"Account Manipulation: Additional Cloud Roles","tactics":["Persistence","Privilege Escalation"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/003","sourceCount":5},{"id":"T1098.004","name":"Account Manipulation: SSH Authorized Keys","tactics":["Persistence","Privilege Escalation"],"platforms":["ESXi","IaaS","Linux","Network Devices","macOS"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/004","sourceCount":6},{"id":"T1098.005","name":"Account Manipulation: Device Registration","tactics":["Persistence","Privilege Escalation"],"platforms":["Identity Provider","Windows"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/005","sourceCount":4},{"id":"T1098.006","name":"Account Manipulation: Additional Container Cluster Roles","tactics":["Persistence","Privilege Escalation"],"platforms":["Containers"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/006","sourceCount":0},{"id":"T1098.007","name":"Account Manipulation: Additional Local or Domain Groups","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":"T1098","url":"https://attack.mitre.org/techniques/T1098/007","sourceCount":11},{"id":"T1102","name":"Web Service","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1102","sourceCount":45},{"id":"T1102.001","name":"Web Service: Dead Drop Resolver","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1102","url":"https://attack.mitre.org/techniques/T1102/001","sourceCount":23},{"id":"T1102.002","name":"Web Service: Bidirectional Communication","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1102","url":"https://attack.mitre.org/techniques/T1102/002","sourceCount":54},{"id":"T1102.003","name":"Web Service: One-Way Communication","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1102","url":"https://attack.mitre.org/techniques/T1102/003","sourceCount":9},{"id":"T1104","name":"Multi-Stage Channels","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1104","sourceCount":15},{"id":"T1105","name":"Ingress Tool Transfer","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1105","sourceCount":498},{"id":"T1106","name":"Native API","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1106","sourceCount":211},{"id":"T1110","name":"Brute Force","tactics":["Credential Access"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1110","sourceCount":23},{"id":"T1110.001","name":"Brute Force: Password Guessing","tactics":["Credential Access"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":"T1110","url":"https://attack.mitre.org/techniques/T1110/001","sourceCount":11},{"id":"T1110.002","name":"Brute Force: Password Cracking","tactics":["Credential Access"],"platforms":["Identity Provider","Linux","Network Devices","Office Suite","Windows","macOS"],"parent":"T1110","url":"https://attack.mitre.org/techniques/T1110/002","sourceCount":6},{"id":"T1110.003","name":"Brute Force: Password Spraying","tactics":["Credential Access"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":"T1110","url":"https://attack.mitre.org/techniques/T1110/003","sourceCount":17},{"id":"T1110.004","name":"Brute Force: Credential Stuffing","tactics":["Credential Access"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":"T1110","url":"https://attack.mitre.org/techniques/T1110/004","sourceCount":2},{"id":"T1111","name":"Multi-Factor Authentication Interception","tactics":["Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1111","sourceCount":8},{"id":"T1112","name":"Modify Registry","tactics":["Defense Evasion","Persistence"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1112","sourceCount":170},{"id":"T1113","name":"Screen Capture","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1113","sourceCount":166},{"id":"T1114","name":"Email Collection","tactics":["Collection"],"platforms":["Linux","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1114","sourceCount":6},{"id":"T1114.001","name":"Email Collection: Local Email Collection","tactics":["Collection"],"platforms":["Windows"],"parent":"T1114","url":"https://attack.mitre.org/techniques/T1114/001","sourceCount":18},{"id":"T1114.002","name":"Email Collection: Remote Email Collection","tactics":["Collection"],"platforms":["Office Suite","Windows"],"parent":"T1114","url":"https://attack.mitre.org/techniques/T1114/002","sourceCount":18},{"id":"T1114.003","name":"Email Collection: Email Forwarding Rule","tactics":["Collection"],"platforms":["Linux","Office Suite","Windows","macOS"],"parent":"T1114","url":"https://attack.mitre.org/techniques/T1114/003","sourceCount":5},{"id":"T1115","name":"Clipboard Data","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1115","sourceCount":45},{"id":"T1119","name":"Automated Collection","tactics":["Collection"],"platforms":["IaaS","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1119","sourceCount":69},{"id":"T1120","name":"Peripheral Device Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1120","sourceCount":57},{"id":"T1123","name":"Audio Capture","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1123","sourceCount":31},{"id":"T1124","name":"System Time Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1124","sourceCount":93},{"id":"T1125","name":"Video Capture","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1125","sourceCount":34},{"id":"T1127","name":"Trusted Developer Utilities Proxy Execution","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1127","sourceCount":0},{"id":"T1127.001","name":"Trusted Developer Utilities Proxy Execution: MSBuild","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1127","url":"https://attack.mitre.org/techniques/T1127/001","sourceCount":3},{"id":"T1127.002","name":"Trusted Developer Utilities Proxy Execution: ClickOnce","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1127","url":"https://attack.mitre.org/techniques/T1127/002","sourceCount":0},{"id":"T1127.003","name":"Trusted Developer Utilities Proxy Execution: JamPlus","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1127","url":"https://attack.mitre.org/techniques/T1127/003","sourceCount":0},{"id":"T1129","name":"Shared Modules","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1129","sourceCount":22},{"id":"T1132","name":"Data Encoding","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1132","sourceCount":6},{"id":"T1132.001","name":"Data Encoding: Standard Encoding","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1132","url":"https://attack.mitre.org/techniques/T1132/001","sourceCount":120},{"id":"T1132.002","name":"Data Encoding: Non-Standard Encoding","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1132","url":"https://attack.mitre.org/techniques/T1132/002","sourceCount":16},{"id":"T1133","name":"External Remote Services","tactics":["Initial Access","Persistence"],"platforms":["Containers","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1133","sourceCount":40},{"id":"T1134","name":"Access Token Manipulation","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1134","sourceCount":23},{"id":"T1134.001","name":"Access Token Manipulation: Token Impersonation/Theft","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1134","url":"https://attack.mitre.org/techniques/T1134/001","sourceCount":18},{"id":"T1134.002","name":"Access Token Manipulation: Create Process with Token","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1134","url":"https://attack.mitre.org/techniques/T1134/002","sourceCount":13},{"id":"T1134.003","name":"Access Token Manipulation: Make and Impersonate Token","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1134","url":"https://attack.mitre.org/techniques/T1134/003","sourceCount":5},{"id":"T1134.004","name":"Access Token Manipulation: Parent PID Spoofing","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1134","url":"https://attack.mitre.org/techniques/T1134/004","sourceCount":4},{"id":"T1134.005","name":"Access Token Manipulation: SID-History Injection","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1134","url":"https://attack.mitre.org/techniques/T1134/005","sourceCount":2},{"id":"T1135","name":"Network Share Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1135","sourceCount":77},{"id":"T1136","name":"Create Account","tactics":["Persistence"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1136","sourceCount":5},{"id":"T1136.001","name":"Create Account: Local Account","tactics":["Persistence"],"platforms":["Containers","ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1136","url":"https://attack.mitre.org/techniques/T1136/001","sourceCount":29},{"id":"T1136.002","name":"Create Account: Domain Account","tactics":["Persistence"],"platforms":["Linux","Windows","macOS"],"parent":"T1136","url":"https://attack.mitre.org/techniques/T1136/002","sourceCount":11},{"id":"T1136.003","name":"Create Account: Cloud Account","tactics":["Persistence"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1136","url":"https://attack.mitre.org/techniques/T1136/003","sourceCount":3},{"id":"T1137","name":"Office Application Startup","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1137","sourceCount":2},{"id":"T1137.001","name":"Office Application Startup: Office Template Macros","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":"T1137","url":"https://attack.mitre.org/techniques/T1137/001","sourceCount":3},{"id":"T1137.002","name":"Office Application Startup: Office Test","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":"T1137","url":"https://attack.mitre.org/techniques/T1137/002","sourceCount":1},{"id":"T1137.003","name":"Office Application Startup: Outlook Forms","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":"T1137","url":"https://attack.mitre.org/techniques/T1137/003","sourceCount":1},{"id":"T1137.004","name":"Office Application Startup: Outlook Home Page","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":"T1137","url":"https://attack.mitre.org/techniques/T1137/004","sourceCount":2},{"id":"T1137.005","name":"Office Application Startup: Outlook Rules","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":"T1137","url":"https://attack.mitre.org/techniques/T1137/005","sourceCount":1},{"id":"T1137.006","name":"Office Application Startup: Add-ins","tactics":["Persistence"],"platforms":["Office Suite","Windows"],"parent":"T1137","url":"https://attack.mitre.org/techniques/T1137/006","sourceCount":4},{"id":"T1140","name":"Deobfuscate/Decode Files or Information","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1140","sourceCount":325},{"id":"T1176","name":"Software Extensions","tactics":["Persistence"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1176","sourceCount":0},{"id":"T1176.001","name":"Software Extensions: Browser Extensions","tactics":["Persistence"],"platforms":["Linux","Windows","macOS"],"parent":"T1176","url":"https://attack.mitre.org/techniques/T1176/001","sourceCount":7},{"id":"T1176.002","name":"Software Extensions: IDE Extensions","tactics":["Persistence"],"platforms":["Linux","Windows","macOS"],"parent":"T1176","url":"https://attack.mitre.org/techniques/T1176/002","sourceCount":1},{"id":"T1185","name":"Browser Session Hijacking","tactics":["Collection"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1185","sourceCount":14},{"id":"T1187","name":"Forced Authentication","tactics":["Credential Access"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1187","sourceCount":3},{"id":"T1189","name":"Drive-by Compromise","tactics":["Initial Access"],"platforms":["Identity Provider","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1189","sourceCount":44},{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["Initial Access"],"platforms":["Containers","ESXi","IaaS","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1190","sourceCount":69},{"id":"T1195","name":"Supply Chain Compromise","tactics":["Initial Access"],"platforms":["Linux","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1195","sourceCount":5},{"id":"T1195.001","name":"Supply Chain Compromise: Compromise Software Dependencies and Development Tools","tactics":["Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1195","url":"https://attack.mitre.org/techniques/T1195/001","sourceCount":2},{"id":"T1195.002","name":"Supply Chain Compromise: Compromise Software Supply Chain","tactics":["Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1195","url":"https://attack.mitre.org/techniques/T1195/002","sourceCount":14},{"id":"T1195.003","name":"Supply Chain Compromise: Compromise Hardware Supply Chain","tactics":["Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1195","url":"https://attack.mitre.org/techniques/T1195/003","sourceCount":0},{"id":"T1197","name":"BITS Jobs","tactics":["Defense Evasion","Persistence"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1197","sourceCount":13},{"id":"T1199","name":"Trusted Relationship","tactics":["Initial Access"],"platforms":["IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1199","sourceCount":12},{"id":"T1200","name":"Hardware Additions","tactics":["Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1200","sourceCount":1},{"id":"T1201","name":"Password Policy Discovery","tactics":["Discovery"],"platforms":["IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1201","sourceCount":8},{"id":"T1202","name":"Indirect Command Execution","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1202","sourceCount":4},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1203","sourceCount":60},{"id":"T1204","name":"User Execution","tactics":["Execution"],"platforms":["Containers","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1204","sourceCount":5},{"id":"T1204.001","name":"User Execution: Malicious Link","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":"T1204","url":"https://attack.mitre.org/techniques/T1204/001","sourceCount":83},{"id":"T1204.002","name":"User Execution: Malicious File","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":"T1204","url":"https://attack.mitre.org/techniques/T1204/002","sourceCount":185},{"id":"T1204.003","name":"User Execution: Malicious Image","tactics":["Execution"],"platforms":["Containers","IaaS"],"parent":"T1204","url":"https://attack.mitre.org/techniques/T1204/003","sourceCount":1},{"id":"T1204.004","name":"User Execution: Malicious Copy and Paste","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":"T1204","url":"https://attack.mitre.org/techniques/T1204/004","sourceCount":2},{"id":"T1204.005","name":"User Execution: Malicious Library","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":"T1204","url":"https://attack.mitre.org/techniques/T1204/005","sourceCount":1},{"id":"T1205","name":"Traffic Signaling","tactics":["Command and Control","Defense Evasion","Persistence"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1205","sourceCount":21},{"id":"T1205.001","name":"Traffic Signaling: Port Knocking","tactics":["Command and Control","Defense Evasion","Persistence"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1205","url":"https://attack.mitre.org/techniques/T1205/001","sourceCount":6},{"id":"T1205.002","name":"Traffic Signaling: Socket Filters","tactics":["Command and Control","Defense Evasion","Persistence"],"platforms":["Linux","Windows","macOS"],"parent":"T1205","url":"https://attack.mitre.org/techniques/T1205/002","sourceCount":4},{"id":"T1207","name":"Rogue Domain Controller","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1207","sourceCount":1},{"id":"T1210","name":"Exploitation of Remote Services","tactics":["Lateral Movement"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1210","sourceCount":24},{"id":"T1211","name":"Exploitation for Defense Evasion","tactics":["Defense Evasion"],"platforms":["IaaS","Linux","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1211","sourceCount":2},{"id":"T1212","name":"Exploitation for Credential Access","tactics":["Credential Access"],"platforms":["Identity Provider","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1212","sourceCount":2},{"id":"T1213","name":"Data from Information Repositories","tactics":["Collection"],"platforms":["IaaS","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1213","sourceCount":4},{"id":"T1213.001","name":"Data from Information Repositories: Confluence","tactics":["Collection"],"platforms":["SaaS"],"parent":"T1213","url":"https://attack.mitre.org/techniques/T1213/001","sourceCount":1},{"id":"T1213.002","name":"Data from Information Repositories: Sharepoint","tactics":["Collection"],"platforms":["Office Suite","Windows"],"parent":"T1213","url":"https://attack.mitre.org/techniques/T1213/002","sourceCount":8},{"id":"T1213.003","name":"Data from Information Repositories: Code Repositories","tactics":["Collection"],"platforms":["SaaS"],"parent":"T1213","url":"https://attack.mitre.org/techniques/T1213/003","sourceCount":4},{"id":"T1213.004","name":"Data from Information Repositories: Customer Relationship Management Software","tactics":["Collection"],"platforms":["SaaS"],"parent":"T1213","url":"https://attack.mitre.org/techniques/T1213/004","sourceCount":1},{"id":"T1213.005","name":"Data from Information Repositories: Messaging Applications","tactics":["Collection"],"platforms":["Office Suite","SaaS"],"parent":"T1213","url":"https://attack.mitre.org/techniques/T1213/005","sourceCount":3},{"id":"T1213.006","name":"Data from Information Repositories: Databases","tactics":["Collection"],"platforms":["IaaS","Linux","SaaS","Windows","macOS"],"parent":"T1213","url":"https://attack.mitre.org/techniques/T1213/006","sourceCount":8},{"id":"T1216","name":"System Script Proxy Execution","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1216","sourceCount":0},{"id":"T1216.001","name":"System Script Proxy Execution: PubPrn","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1216","url":"https://attack.mitre.org/techniques/T1216/001","sourceCount":1},{"id":"T1216.002","name":"System Script Proxy Execution: SyncAppvPublishingServer","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1216","url":"https://attack.mitre.org/techniques/T1216/002","sourceCount":0},{"id":"T1217","name":"Browser Information Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1217","sourceCount":26},{"id":"T1218","name":"System Binary Proxy Execution","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1218","sourceCount":2},{"id":"T1218.001","name":"System Binary Proxy Execution: Compiled HTML File","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/001","sourceCount":6},{"id":"T1218.002","name":"System Binary Proxy Execution: Control Panel","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/002","sourceCount":2},{"id":"T1218.003","name":"System Binary Proxy Execution: CMSTP","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/003","sourceCount":4},{"id":"T1218.004","name":"System Binary Proxy Execution: InstallUtil","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/004","sourceCount":6},{"id":"T1218.005","name":"System Binary Proxy Execution: Mshta","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/005","sourceCount":30},{"id":"T1218.007","name":"System Binary Proxy Execution: Msiexec","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/007","sourceCount":29},{"id":"T1218.008","name":"System Binary Proxy Execution: Odbcconf","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/008","sourceCount":3},{"id":"T1218.009","name":"System Binary Proxy Execution: Regsvcs/Regasm","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/009","sourceCount":1},{"id":"T1218.010","name":"System Binary Proxy Execution: Regsvr32","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/010","sourceCount":36},{"id":"T1218.011","name":"System Binary Proxy Execution: Rundll32","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/011","sourceCount":103},{"id":"T1218.012","name":"System Binary Proxy Execution: Verclsid","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/012","sourceCount":1},{"id":"T1218.013","name":"System Binary Proxy Execution: Mavinject","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/013","sourceCount":1},{"id":"T1218.014","name":"System Binary Proxy Execution: MMC","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/014","sourceCount":2},{"id":"T1218.015","name":"System Binary Proxy Execution: Electron Applications","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1218","url":"https://attack.mitre.org/techniques/T1218/015","sourceCount":2},{"id":"T1219","name":"Remote Access Tools","tactics":["Command and Control"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1219","sourceCount":21},{"id":"T1219.001","name":"Remote Access Tools: IDE Tunneling","tactics":["Command and Control"],"platforms":["Linux","Windows","macOS"],"parent":"T1219","url":"https://attack.mitre.org/techniques/T1219/001","sourceCount":1},{"id":"T1219.002","name":"Remote Access Tools: Remote Desktop Software","tactics":["Command and Control"],"platforms":["Linux","Windows","macOS"],"parent":"T1219","url":"https://attack.mitre.org/techniques/T1219/002","sourceCount":12},{"id":"T1219.003","name":"Remote Access Tools: Remote Access Hardware","tactics":["Command and Control"],"platforms":["Linux","Windows","macOS"],"parent":"T1219","url":"https://attack.mitre.org/techniques/T1219/003","sourceCount":0},{"id":"T1220","name":"XSL Script Processing","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1220","sourceCount":4},{"id":"T1221","name":"Template Injection","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1221","sourceCount":11},{"id":"T1222","name":"File and Directory Permissions Modification","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1222","sourceCount":1},{"id":"T1222.001","name":"File and Directory Permissions Modification: Windows File and Directory Permissions Modification","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1222","url":"https://attack.mitre.org/techniques/T1222/001","sourceCount":11},{"id":"T1222.002","name":"File and Directory Permissions Modification: Linux and Mac File and Directory Permissions Modification","tactics":["Defense Evasion"],"platforms":["Linux","macOS"],"parent":"T1222","url":"https://attack.mitre.org/techniques/T1222/002","sourceCount":14},{"id":"T1480","name":"Execution Guardrails","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1480","sourceCount":37},{"id":"T1480.001","name":"Execution Guardrails: Environmental Keying","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1480","url":"https://attack.mitre.org/techniques/T1480/001","sourceCount":10},{"id":"T1480.002","name":"Execution Guardrails: Mutual Exclusion","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1480","url":"https://attack.mitre.org/techniques/T1480/002","sourceCount":16},{"id":"T1482","name":"Domain Trust Discovery","tactics":["Discovery"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1482","sourceCount":31},{"id":"T1484","name":"Domain or Tenant Policy Modification","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Identity Provider","Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1484","sourceCount":0},{"id":"T1484.001","name":"Domain or Tenant Policy Modification: Group Policy Modification","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1484","url":"https://attack.mitre.org/techniques/T1484/001","sourceCount":14},{"id":"T1484.002","name":"Domain or Tenant Policy Modification: Trust Modification","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Identity Provider","Windows"],"parent":"T1484","url":"https://attack.mitre.org/techniques/T1484/002","sourceCount":4},{"id":"T1485","name":"Data Destruction","tactics":["Impact"],"platforms":["Containers","ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1485","sourceCount":30},{"id":"T1485.001","name":"Data Destruction: Lifecycle-Triggered Deletion","tactics":["Impact"],"platforms":["IaaS"],"parent":"T1485","url":"https://attack.mitre.org/techniques/T1485/001","sourceCount":0},{"id":"T1486","name":"Data Encrypted for Impact","tactics":["Impact"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1486","sourceCount":82},{"id":"T1489","name":"Service Stop","tactics":["Impact"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1489","sourceCount":50},{"id":"T1490","name":"Inhibit System Recovery","tactics":["Impact"],"platforms":["Containers","ESXi","IaaS","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1490","sourceCount":54},{"id":"T1491","name":"Defacement","tactics":["Impact"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1491","sourceCount":0},{"id":"T1491.001","name":"Defacement: Internal Defacement","tactics":["Impact"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1491","url":"https://attack.mitre.org/techniques/T1491/001","sourceCount":12},{"id":"T1491.002","name":"Defacement: External Defacement","tactics":["Impact"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1491","url":"https://attack.mitre.org/techniques/T1491/002","sourceCount":2},{"id":"T1495","name":"Firmware Corruption","tactics":["Impact"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1495","sourceCount":2},{"id":"T1496","name":"Resource Hijacking","tactics":["Impact"],"platforms":["Containers","IaaS","Linux","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1496","sourceCount":0},{"id":"T1496.001","name":"Resource Hijacking: Compute Hijacking","tactics":["Impact"],"platforms":["Containers","IaaS","Linux","Windows","macOS"],"parent":"T1496","url":"https://attack.mitre.org/techniques/T1496/001","sourceCount":14},{"id":"T1496.002","name":"Resource Hijacking: Bandwidth Hijacking","tactics":["Impact"],"platforms":["Containers","IaaS","Linux","Windows","macOS"],"parent":"T1496","url":"https://attack.mitre.org/techniques/T1496/002","sourceCount":0},{"id":"T1496.003","name":"Resource Hijacking: SMS Pumping","tactics":["Impact"],"platforms":["SaaS"],"parent":"T1496","url":"https://attack.mitre.org/techniques/T1496/003","sourceCount":0},{"id":"T1496.004","name":"Resource Hijacking: Cloud Service Hijacking","tactics":["Impact"],"platforms":["SaaS"],"parent":"T1496","url":"https://attack.mitre.org/techniques/T1496/004","sourceCount":0},{"id":"T1497","name":"Virtualization/Sandbox Evasion","tactics":["Defense Evasion","Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1497","sourceCount":26},{"id":"T1497.001","name":"Virtualization/Sandbox Evasion: System Checks","tactics":["Defense Evasion","Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1497","url":"https://attack.mitre.org/techniques/T1497/001","sourceCount":66},{"id":"T1497.002","name":"Virtualization/Sandbox Evasion: User Activity Based Checks","tactics":["Defense Evasion","Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1497","url":"https://attack.mitre.org/techniques/T1497/002","sourceCount":5},{"id":"T1497.003","name":"Virtualization/Sandbox Evasion: Time Based Checks","tactics":["Defense Evasion","Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1497","url":"https://attack.mitre.org/techniques/T1497/003","sourceCount":46},{"id":"T1498","name":"Network Denial of Service","tactics":["Impact"],"platforms":["Containers","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1498","sourceCount":3},{"id":"T1498.001","name":"Network Denial of Service: Direct Network Flood","tactics":["Impact"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1498","url":"https://attack.mitre.org/techniques/T1498/001","sourceCount":0},{"id":"T1498.002","name":"Network Denial of Service: Reflection Amplification","tactics":["Impact"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1498","url":"https://attack.mitre.org/techniques/T1498/002","sourceCount":0},{"id":"T1499","name":"Endpoint Denial of Service","tactics":["Impact"],"platforms":["Containers","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1499","sourceCount":3},{"id":"T1499.001","name":"Endpoint Denial of Service: OS Exhaustion Flood","tactics":["Impact"],"platforms":["Linux","Windows","macOS"],"parent":"T1499","url":"https://attack.mitre.org/techniques/T1499/001","sourceCount":0},{"id":"T1499.002","name":"Endpoint Denial of Service: Service Exhaustion Flood","tactics":["Impact"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1499","url":"https://attack.mitre.org/techniques/T1499/002","sourceCount":0},{"id":"T1499.003","name":"Endpoint Denial of Service: Application Exhaustion Flood","tactics":["Impact"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1499","url":"https://attack.mitre.org/techniques/T1499/003","sourceCount":0},{"id":"T1499.004","name":"Endpoint Denial of Service: Application or System Exploitation","tactics":["Impact"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1499","url":"https://attack.mitre.org/techniques/T1499/004","sourceCount":1},{"id":"T1505","name":"Server Software Component","tactics":["Persistence"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1505","sourceCount":0},{"id":"T1505.001","name":"Server Software Component: SQL Stored Procedures","tactics":["Persistence"],"platforms":["Linux","Windows"],"parent":"T1505","url":"https://attack.mitre.org/techniques/T1505/001","sourceCount":2},{"id":"T1505.002","name":"Server Software Component: Transport Agent","tactics":["Persistence"],"platforms":["Linux","Windows"],"parent":"T1505","url":"https://attack.mitre.org/techniques/T1505/002","sourceCount":1},{"id":"T1505.003","name":"Server Software Component: Web Shell","tactics":["Persistence"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1505","url":"https://attack.mitre.org/techniques/T1505/003","sourceCount":62},{"id":"T1505.004","name":"Server Software Component: IIS Components","tactics":["Persistence"],"platforms":["Windows"],"parent":"T1505","url":"https://attack.mitre.org/techniques/T1505/004","sourceCount":5},{"id":"T1505.005","name":"Server Software Component: Terminal Services DLL","tactics":["Persistence"],"platforms":["Windows"],"parent":"T1505","url":"https://attack.mitre.org/techniques/T1505/005","sourceCount":0},{"id":"T1505.006","name":"Server Software Component: vSphere Installation Bundles","tactics":["Persistence"],"platforms":["ESXi"],"parent":"T1505","url":"https://attack.mitre.org/techniques/T1505/006","sourceCount":2},{"id":"T1518","name":"Software Discovery","tactics":["Discovery"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1518","sourceCount":50},{"id":"T1518.001","name":"Software Discovery: Security Software Discovery","tactics":["Discovery"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":"T1518","url":"https://attack.mitre.org/techniques/T1518/001","sourceCount":135},{"id":"T1518.002","name":"Software Discovery: Backup Software Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1518","url":"https://attack.mitre.org/techniques/T1518/002","sourceCount":1},{"id":"T1525","name":"Implant Internal Image","tactics":["Persistence"],"platforms":["Containers","IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1525","sourceCount":0},{"id":"T1526","name":"Cloud Service Discovery","tactics":["Discovery"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1526","sourceCount":4},{"id":"T1528","name":"Steal Application Access Token","tactics":["Credential Access"],"platforms":["Containers","IaaS","Identity Provider","Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1528","sourceCount":5},{"id":"T1529","name":"System Shutdown/Reboot","tactics":["Impact"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1529","sourceCount":27},{"id":"T1530","name":"Data from Cloud Storage","tactics":["Collection"],"platforms":["IaaS","Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1530","sourceCount":9},{"id":"T1531","name":"Account Access Removal","tactics":["Impact"],"platforms":["ESXi","IaaS","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1531","sourceCount":6},{"id":"T1534","name":"Internal Spearphishing","tactics":["Lateral Movement"],"platforms":["Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1534","sourceCount":5},{"id":"T1535","name":"Unused/Unsupported Cloud Regions","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1535","sourceCount":0},{"id":"T1537","name":"Transfer Data to Cloud Account","tactics":["Exfiltration"],"platforms":["IaaS","Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1537","sourceCount":3},{"id":"T1538","name":"Cloud Service Dashboard","tactics":["Discovery"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1538","sourceCount":1},{"id":"T1539","name":"Steal Web Session Cookie","tactics":["Credential Access"],"platforms":["Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1539","sourceCount":25},{"id":"T1542","name":"Pre-OS Boot","tactics":["Defense Evasion","Persistence"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1542","sourceCount":0},{"id":"T1542.001","name":"Pre-OS Boot: System Firmware","tactics":["Defense Evasion","Persistence"],"platforms":["Network Devices","Windows"],"parent":"T1542","url":"https://attack.mitre.org/techniques/T1542/001","sourceCount":3},{"id":"T1542.002","name":"Pre-OS Boot: Component Firmware","tactics":["Defense Evasion","Persistence"],"platforms":["Linux","Windows","macOS"],"parent":"T1542","url":"https://attack.mitre.org/techniques/T1542/002","sourceCount":2},{"id":"T1542.003","name":"Pre-OS Boot: Bootkit","tactics":["Defense Evasion","Persistence"],"platforms":["Linux","Windows"],"parent":"T1542","url":"https://attack.mitre.org/techniques/T1542/003","sourceCount":9},{"id":"T1542.004","name":"Pre-OS Boot: ROMMONkit","tactics":["Defense Evasion","Persistence"],"platforms":["Network Devices"],"parent":"T1542","url":"https://attack.mitre.org/techniques/T1542/004","sourceCount":0},{"id":"T1542.005","name":"Pre-OS Boot: TFTP Boot","tactics":["Defense Evasion","Persistence"],"platforms":["Network Devices"],"parent":"T1542","url":"https://attack.mitre.org/techniques/T1542/005","sourceCount":0},{"id":"T1543","name":"Create or Modify System Process","tactics":["Persistence","Privilege Escalation"],"platforms":["Containers","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1543","sourceCount":6},{"id":"T1543.001","name":"Create or Modify System Process: Launch Agent","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1543","url":"https://attack.mitre.org/techniques/T1543/001","sourceCount":21},{"id":"T1543.002","name":"Create or Modify System Process: Systemd Service","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux"],"parent":"T1543","url":"https://attack.mitre.org/techniques/T1543/002","sourceCount":12},{"id":"T1543.003","name":"Create or Modify System Process: Windows Service","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1543","url":"https://attack.mitre.org/techniques/T1543/003","sourceCount":138},{"id":"T1543.004","name":"Create or Modify System Process: Launch Daemon","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1543","url":"https://attack.mitre.org/techniques/T1543/004","sourceCount":11},{"id":"T1543.005","name":"Create or Modify System Process: Container Service","tactics":["Persistence","Privilege Escalation"],"platforms":["Containers"],"parent":"T1543","url":"https://attack.mitre.org/techniques/T1543/005","sourceCount":0},{"id":"T1546","name":"Event Triggered Execution","tactics":["Persistence","Privilege Escalation"],"platforms":["IaaS","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1546","sourceCount":4},{"id":"T1546.001","name":"Event Triggered Execution: Change Default File Association","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/001","sourceCount":2},{"id":"T1546.002","name":"Event Triggered Execution: Screensaver","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/002","sourceCount":1},{"id":"T1546.003","name":"Event Triggered Execution: Windows Management Instrumentation Event Subscription","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/003","sourceCount":25},{"id":"T1546.004","name":"Event Triggered Execution: Unix Shell Configuration Modification","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","macOS"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/004","sourceCount":6},{"id":"T1546.005","name":"Event Triggered Execution: Trap","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","macOS"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/005","sourceCount":0},{"id":"T1546.006","name":"Event Triggered Execution: LC_LOAD_DYLIB Addition","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/006","sourceCount":0},{"id":"T1546.007","name":"Event Triggered Execution: Netsh Helper DLL","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/007","sourceCount":1},{"id":"T1546.008","name":"Event Triggered Execution: Accessibility Features","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/008","sourceCount":7},{"id":"T1546.009","name":"Event Triggered Execution: AppCert DLLs","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/009","sourceCount":1},{"id":"T1546.010","name":"Event Triggered Execution: AppInit DLLs","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/010","sourceCount":4},{"id":"T1546.011","name":"Event Triggered Execution: Application Shimming","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/011","sourceCount":4},{"id":"T1546.012","name":"Event Triggered Execution: Image File Execution Options Injection","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/012","sourceCount":3},{"id":"T1546.013","name":"Event Triggered Execution: PowerShell Profile","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/013","sourceCount":1},{"id":"T1546.014","name":"Event Triggered Execution: Emond","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/014","sourceCount":0},{"id":"T1546.015","name":"Event Triggered Execution: Component Object Model Hijacking","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/015","sourceCount":12},{"id":"T1546.016","name":"Event Triggered Execution: Installer Packages","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/016","sourceCount":2},{"id":"T1546.017","name":"Event Triggered Execution: Udev Rules","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/017","sourceCount":1},{"id":"T1546.018","name":"Event Triggered Execution: Python Startup Hooks","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":"T1546","url":"https://attack.mitre.org/techniques/T1546/018","sourceCount":0},{"id":"T1547","name":"Boot or Logon Autostart Execution","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1547","sourceCount":6},{"id":"T1547.001","name":"Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/001","sourceCount":252},{"id":"T1547.002","name":"Boot or Logon Autostart Execution: Authentication Package","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/002","sourceCount":1},{"id":"T1547.003","name":"Boot or Logon Autostart Execution: Time Providers","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/003","sourceCount":0},{"id":"T1547.004","name":"Boot or Logon Autostart Execution: Winlogon Helper DLL","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/004","sourceCount":13},{"id":"T1547.005","name":"Boot or Logon Autostart Execution: Security Support Provider","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/005","sourceCount":3},{"id":"T1547.006","name":"Boot or Logon Autostart Execution: Kernel Modules and Extensions","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux","macOS"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/006","sourceCount":4},{"id":"T1547.007","name":"Boot or Logon Autostart Execution: Re-opened Applications","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/007","sourceCount":0},{"id":"T1547.008","name":"Boot or Logon Autostart Execution: LSASS Driver","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/008","sourceCount":2},{"id":"T1547.009","name":"Boot or Logon Autostart Execution: Shortcut Modification","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/009","sourceCount":29},{"id":"T1547.010","name":"Boot or Logon Autostart Execution: Port Monitors","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/010","sourceCount":0},{"id":"T1547.012","name":"Boot or Logon Autostart Execution: Print Processors","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/012","sourceCount":3},{"id":"T1547.013","name":"Boot or Logon Autostart Execution: XDG Autostart Entries","tactics":["Persistence","Privilege Escalation"],"platforms":["Linux"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/013","sourceCount":7},{"id":"T1547.014","name":"Boot or Logon Autostart Execution: Active Setup","tactics":["Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/014","sourceCount":1},{"id":"T1547.015","name":"Boot or Logon Autostart Execution: Login Items","tactics":["Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1547","url":"https://attack.mitre.org/techniques/T1547/015","sourceCount":3},{"id":"T1548","name":"Abuse Elevation Control Mechanism","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["IaaS","Identity Provider","Linux","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1548","sourceCount":2},{"id":"T1548.001","name":"Abuse Elevation Control Mechanism: Setuid and Setgid","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Linux","macOS"],"parent":"T1548","url":"https://attack.mitre.org/techniques/T1548/001","sourceCount":2},{"id":"T1548.002","name":"Abuse Elevation Control Mechanism: Bypass User Account Control","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Windows"],"parent":"T1548","url":"https://attack.mitre.org/techniques/T1548/002","sourceCount":61},{"id":"T1548.003","name":"Abuse Elevation Control Mechanism: Sudo and Sudo Caching","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["Linux","macOS"],"parent":"T1548","url":"https://attack.mitre.org/techniques/T1548/003","sourceCount":3},{"id":"T1548.004","name":"Abuse Elevation Control Mechanism: Elevated Execution with Prompt","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["macOS"],"parent":"T1548","url":"https://attack.mitre.org/techniques/T1548/004","sourceCount":1},{"id":"T1548.005","name":"Abuse Elevation Control Mechanism: Temporary Elevated Cloud Access","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["IaaS","Identity Provider","Office Suite"],"parent":"T1548","url":"https://attack.mitre.org/techniques/T1548/005","sourceCount":0},{"id":"T1548.006","name":"Abuse Elevation Control Mechanism: TCC Manipulation","tactics":["Defense Evasion","Privilege Escalation"],"platforms":["macOS"],"parent":"T1548","url":"https://attack.mitre.org/techniques/T1548/006","sourceCount":1},{"id":"T1550","name":"Use Alternate Authentication Material","tactics":["Defense Evasion","Lateral Movement"],"platforms":["Containers","IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1550","sourceCount":2},{"id":"T1550.001","name":"Use Alternate Authentication Material: Application Access Token","tactics":["Defense Evasion","Lateral Movement"],"platforms":["Containers","IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1550","url":"https://attack.mitre.org/techniques/T1550/001","sourceCount":5},{"id":"T1550.002","name":"Use Alternate Authentication Material: Pass the Hash","tactics":["Defense Evasion","Lateral Movement"],"platforms":["Windows"],"parent":"T1550","url":"https://attack.mitre.org/techniques/T1550/002","sourceCount":20},{"id":"T1550.003","name":"Use Alternate Authentication Material: Pass the Ticket","tactics":["Defense Evasion","Lateral Movement"],"platforms":["Windows"],"parent":"T1550","url":"https://attack.mitre.org/techniques/T1550/003","sourceCount":6},{"id":"T1550.004","name":"Use Alternate Authentication Material: Web Session Cookie","tactics":["Defense Evasion","Lateral Movement"],"platforms":["IaaS","Office Suite","SaaS"],"parent":"T1550","url":"https://attack.mitre.org/techniques/T1550/004","sourceCount":2},{"id":"T1552","name":"Unsecured Credentials","tactics":["Credential Access"],"platforms":["Containers","IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1552","sourceCount":6},{"id":"T1552.001","name":"Unsecured Credentials: Credentials In Files","tactics":["Credential Access"],"platforms":["Containers","IaaS","Linux","Windows","macOS"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/001","sourceCount":34},{"id":"T1552.002","name":"Unsecured Credentials: Credentials in Registry","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/002","sourceCount":9},{"id":"T1552.003","name":"Unsecured Credentials: Shell History","tactics":["Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/003","sourceCount":1},{"id":"T1552.004","name":"Unsecured Credentials: Private Keys","tactics":["Credential Access"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/004","sourceCount":18},{"id":"T1552.005","name":"Unsecured Credentials: Cloud Instance Metadata API","tactics":["Credential Access"],"platforms":["IaaS"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/005","sourceCount":3},{"id":"T1552.006","name":"Unsecured Credentials: Group Policy Preferences","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/006","sourceCount":4},{"id":"T1552.007","name":"Unsecured Credentials: Container API","tactics":["Credential Access"],"platforms":["Containers"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/007","sourceCount":1},{"id":"T1552.008","name":"Unsecured Credentials: Chat Messages","tactics":["Credential Access"],"platforms":["Office Suite","SaaS"],"parent":"T1552","url":"https://attack.mitre.org/techniques/T1552/008","sourceCount":1},{"id":"T1553","name":"Subvert Trust Controls","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1553","sourceCount":1},{"id":"T1553.001","name":"Subvert Trust Controls: Gatekeeper Bypass","tactics":["Defense Evasion"],"platforms":["macOS"],"parent":"T1553","url":"https://attack.mitre.org/techniques/T1553/001","sourceCount":6},{"id":"T1553.002","name":"Subvert Trust Controls: Code Signing","tactics":["Defense Evasion"],"platforms":["Windows","macOS"],"parent":"T1553","url":"https://attack.mitre.org/techniques/T1553/002","sourceCount":85},{"id":"T1553.003","name":"Subvert Trust Controls: SIP and Trust Provider Hijacking","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1553","url":"https://attack.mitre.org/techniques/T1553/003","sourceCount":0},{"id":"T1553.004","name":"Subvert Trust Controls: Install Root Certificate","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1553","url":"https://attack.mitre.org/techniques/T1553/004","sourceCount":4},{"id":"T1553.005","name":"Subvert Trust Controls: Mark-of-the-Web Bypass","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1553","url":"https://attack.mitre.org/techniques/T1553/005","sourceCount":5},{"id":"T1553.006","name":"Subvert Trust Controls: Code Signing Policy Modification","tactics":["Defense Evasion"],"platforms":["Windows","macOS"],"parent":"T1553","url":"https://attack.mitre.org/techniques/T1553/006","sourceCount":5},{"id":"T1554","name":"Compromise Host Software Binary","tactics":["Persistence"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1554","sourceCount":21},{"id":"T1555","name":"Credentials from Password Stores","tactics":["Credential Access"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1555","sourceCount":37},{"id":"T1555.001","name":"Credentials from Password Stores: Keychain","tactics":["Credential Access"],"platforms":["macOS"],"parent":"T1555","url":"https://attack.mitre.org/techniques/T1555/001","sourceCount":11},{"id":"T1555.002","name":"Credentials from Password Stores: Securityd Memory","tactics":["Credential Access"],"platforms":["Linux","macOS"],"parent":"T1555","url":"https://attack.mitre.org/techniques/T1555/002","sourceCount":1},{"id":"T1555.003","name":"Credentials from Password Stores: Credentials from Web Browsers","tactics":["Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1555","url":"https://attack.mitre.org/techniques/T1555/003","sourceCount":87},{"id":"T1555.004","name":"Credentials from Password Stores: Windows Credential Manager","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1555","url":"https://attack.mitre.org/techniques/T1555/004","sourceCount":14},{"id":"T1555.005","name":"Credentials from Password Stores: Password Managers","tactics":["Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1555","url":"https://attack.mitre.org/techniques/T1555/005","sourceCount":12},{"id":"T1555.006","name":"Credentials from Password Stores: Cloud Secrets Management Stores","tactics":["Credential Access"],"platforms":["IaaS"],"parent":"T1555","url":"https://attack.mitre.org/techniques/T1555/006","sourceCount":3},{"id":"T1556","name":"Modify Authentication Process","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["IaaS","Identity Provider","Linux","Network Devices","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1556","sourceCount":5},{"id":"T1556.001","name":"Modify Authentication Process: Domain Controller Authentication","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["Windows"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/001","sourceCount":2},{"id":"T1556.002","name":"Modify Authentication Process: Password Filter DLL","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["Windows"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/002","sourceCount":3},{"id":"T1556.003","name":"Modify Authentication Process: Pluggable Authentication Modules","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["Linux","macOS"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/003","sourceCount":2},{"id":"T1556.004","name":"Modify Authentication Process: Network Device Authentication","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["Network Devices"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/004","sourceCount":2},{"id":"T1556.005","name":"Modify Authentication Process: Reversible Encryption","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["Windows"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/005","sourceCount":0},{"id":"T1556.006","name":"Modify Authentication Process: Multi-Factor Authentication","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/006","sourceCount":3},{"id":"T1556.007","name":"Modify Authentication Process: Hybrid Identity","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS","Windows"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/007","sourceCount":2},{"id":"T1556.008","name":"Modify Authentication Process: Network Provider DLL","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["Windows"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/008","sourceCount":0},{"id":"T1556.009","name":"Modify Authentication Process: Conditional Access Policies","tactics":["Credential Access","Defense Evasion","Persistence"],"platforms":["IaaS","Identity Provider"],"parent":"T1556","url":"https://attack.mitre.org/techniques/T1556/009","sourceCount":2},{"id":"T1557","name":"Adversary-in-the-Middle","tactics":["Collection","Credential Access"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1557","sourceCount":7},{"id":"T1557.001","name":"Adversary-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay","tactics":["Collection","Credential Access"],"platforms":["Windows"],"parent":"T1557","url":"https://attack.mitre.org/techniques/T1557/001","sourceCount":7},{"id":"T1557.002","name":"Adversary-in-the-Middle: ARP Cache Poisoning","tactics":["Collection","Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1557","url":"https://attack.mitre.org/techniques/T1557/002","sourceCount":2},{"id":"T1557.003","name":"Adversary-in-the-Middle: DHCP Spoofing","tactics":["Collection","Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1557","url":"https://attack.mitre.org/techniques/T1557/003","sourceCount":0},{"id":"T1557.004","name":"Adversary-in-the-Middle: Evil Twin","tactics":["Collection","Credential Access"],"platforms":["Network Devices"],"parent":"T1557","url":"https://attack.mitre.org/techniques/T1557/004","sourceCount":1},{"id":"T1558","name":"Steal or Forge Kerberos Tickets","tactics":["Credential Access"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1558","sourceCount":1},{"id":"T1558.001","name":"Steal or Forge Kerberos Tickets: Golden Ticket","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1558","url":"https://attack.mitre.org/techniques/T1558/001","sourceCount":5},{"id":"T1558.002","name":"Steal or Forge Kerberos Tickets: Silver Ticket","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1558","url":"https://attack.mitre.org/techniques/T1558/002","sourceCount":4},{"id":"T1558.003","name":"Steal or Forge Kerberos Tickets: Kerberoasting","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1558","url":"https://attack.mitre.org/techniques/T1558/003","sourceCount":12},{"id":"T1558.004","name":"Steal or Forge Kerberos Tickets: AS-REP Roasting","tactics":["Credential Access"],"platforms":["Windows"],"parent":"T1558","url":"https://attack.mitre.org/techniques/T1558/004","sourceCount":1},{"id":"T1558.005","name":"Steal or Forge Kerberos Tickets: Ccache Files","tactics":["Credential Access"],"platforms":["Linux","macOS"],"parent":"T1558","url":"https://attack.mitre.org/techniques/T1558/005","sourceCount":1},{"id":"T1559","name":"Inter-Process Communication","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1559","sourceCount":16},{"id":"T1559.001","name":"Inter-Process Communication: Component Object Model","tactics":["Execution"],"platforms":["Windows"],"parent":"T1559","url":"https://attack.mitre.org/techniques/T1559/001","sourceCount":20},{"id":"T1559.002","name":"Inter-Process Communication: Dynamic Data Exchange","tactics":["Execution"],"platforms":["Windows"],"parent":"T1559","url":"https://attack.mitre.org/techniques/T1559/002","sourceCount":20},{"id":"T1559.003","name":"Inter-Process Communication: XPC Services","tactics":["Execution"],"platforms":["macOS"],"parent":"T1559","url":"https://attack.mitre.org/techniques/T1559/003","sourceCount":0},{"id":"T1560","name":"Archive Collected Data","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1560","sourceCount":54},{"id":"T1560.001","name":"Archive Collected Data: Archive via Utility","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":"T1560","url":"https://attack.mitre.org/techniques/T1560/001","sourceCount":78},{"id":"T1560.002","name":"Archive Collected Data: Archive via Library","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":"T1560","url":"https://attack.mitre.org/techniques/T1560/002","sourceCount":15},{"id":"T1560.003","name":"Archive Collected Data: Archive via Custom Method","tactics":["Collection"],"platforms":["Linux","Windows","macOS"],"parent":"T1560","url":"https://attack.mitre.org/techniques/T1560/003","sourceCount":39},{"id":"T1561","name":"Disk Wipe","tactics":["Impact"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1561","sourceCount":0},{"id":"T1561.001","name":"Disk Wipe: Disk Content Wipe","tactics":["Impact"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1561","url":"https://attack.mitre.org/techniques/T1561/001","sourceCount":16},{"id":"T1561.002","name":"Disk Wipe: Disk Structure Wipe","tactics":["Impact"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":"T1561","url":"https://attack.mitre.org/techniques/T1561/002","sourceCount":17},{"id":"T1562","name":"Impair Defenses","tactics":["Defense Evasion"],"platforms":["Containers","ESXi","IaaS","Identity Provider","Linux","Network Devices","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1562","sourceCount":5},{"id":"T1562.001","name":"Impair Defenses: Disable or Modify Tools","tactics":["Defense Evasion"],"platforms":["Containers","IaaS","Linux","Network Devices","Windows","macOS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/001","sourceCount":110},{"id":"T1562.002","name":"Impair Defenses: Disable Windows Event Logging","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/002","sourceCount":6},{"id":"T1562.003","name":"Impair Defenses: Impair Command History Logging","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/003","sourceCount":10},{"id":"T1562.004","name":"Impair Defenses: Disable or Modify System Firewall","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/004","sourceCount":45},{"id":"T1562.006","name":"Impair Defenses: Indicator Blocking","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/006","sourceCount":10},{"id":"T1562.007","name":"Impair Defenses: Disable or Modify Cloud Firewall","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/007","sourceCount":1},{"id":"T1562.008","name":"Impair Defenses: Disable or Modify Cloud Logs","tactics":["Defense Evasion"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/008","sourceCount":2},{"id":"T1562.009","name":"Impair Defenses: Safe Mode Boot","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/009","sourceCount":7},{"id":"T1562.010","name":"Impair Defenses: Downgrade Attack","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/010","sourceCount":3},{"id":"T1562.011","name":"Impair Defenses: Spoof Security Alerting","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/011","sourceCount":0},{"id":"T1562.012","name":"Impair Defenses: Disable or Modify Linux Audit System","tactics":["Defense Evasion"],"platforms":["Linux"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/012","sourceCount":1},{"id":"T1562.013","name":"Impair Defenses: Disable or Modify Network Device Firewall","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":"T1562","url":"https://attack.mitre.org/techniques/T1562/013","sourceCount":2},{"id":"T1563","name":"Remote Service Session Hijacking","tactics":["Lateral Movement"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1563","sourceCount":0},{"id":"T1563.001","name":"Remote Service Session Hijacking: SSH Hijacking","tactics":["Lateral Movement"],"platforms":["Linux","macOS"],"parent":"T1563","url":"https://attack.mitre.org/techniques/T1563/001","sourceCount":1},{"id":"T1563.002","name":"Remote Service Session Hijacking: RDP Hijacking","tactics":["Lateral Movement"],"platforms":["Windows"],"parent":"T1563","url":"https://attack.mitre.org/techniques/T1563/002","sourceCount":2},{"id":"T1564","name":"Hide Artifacts","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1564","sourceCount":5},{"id":"T1564.001","name":"Hide Artifacts: Hidden Files and Directories","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/001","sourceCount":58},{"id":"T1564.002","name":"Hide Artifacts: Hidden Users","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/002","sourceCount":3},{"id":"T1564.003","name":"Hide Artifacts: Hidden Window","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/003","sourceCount":54},{"id":"T1564.004","name":"Hide Artifacts: NTFS File Attributes","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/004","sourceCount":16},{"id":"T1564.005","name":"Hide Artifacts: Hidden File System","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/005","sourceCount":6},{"id":"T1564.006","name":"Hide Artifacts: Run Virtual Instance","tactics":["Defense Evasion"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/006","sourceCount":3},{"id":"T1564.007","name":"Hide Artifacts: VBA Stomping","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/007","sourceCount":0},{"id":"T1564.008","name":"Hide Artifacts: Email Hiding Rules","tactics":["Defense Evasion"],"platforms":["Linux","Office Suite","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/008","sourceCount":2},{"id":"T1564.009","name":"Hide Artifacts: Resource Forking","tactics":["Defense Evasion"],"platforms":["macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/009","sourceCount":2},{"id":"T1564.010","name":"Hide Artifacts: Process Argument Spoofing","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/010","sourceCount":2},{"id":"T1564.011","name":"Hide Artifacts: Ignore Process Interrupts","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/011","sourceCount":6},{"id":"T1564.012","name":"Hide Artifacts: File/Path Exclusions","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/012","sourceCount":1},{"id":"T1564.013","name":"Hide Artifacts: Bind Mounts","tactics":["Defense Evasion"],"platforms":["Linux"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/013","sourceCount":1},{"id":"T1564.014","name":"Hide Artifacts: Extended Attributes","tactics":["Defense Evasion"],"platforms":["Linux","macOS"],"parent":"T1564","url":"https://attack.mitre.org/techniques/T1564/014","sourceCount":0},{"id":"T1565","name":"Data Manipulation","tactics":["Impact"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1565","sourceCount":1},{"id":"T1565.001","name":"Data Manipulation: Stored Data Manipulation","tactics":["Impact"],"platforms":["Linux","Windows","macOS"],"parent":"T1565","url":"https://attack.mitre.org/techniques/T1565/001","sourceCount":3},{"id":"T1565.002","name":"Data Manipulation: Transmitted Data Manipulation","tactics":["Impact"],"platforms":["Linux","Windows","macOS"],"parent":"T1565","url":"https://attack.mitre.org/techniques/T1565/002","sourceCount":4},{"id":"T1565.003","name":"Data Manipulation: Runtime Data Manipulation","tactics":["Impact"],"platforms":["Linux","Windows","macOS"],"parent":"T1565","url":"https://attack.mitre.org/techniques/T1565/003","sourceCount":1},{"id":"T1566","name":"Phishing","tactics":["Initial Access"],"platforms":["Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1566","sourceCount":9},{"id":"T1566.001","name":"Phishing: Spearphishing Attachment","tactics":["Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1566","url":"https://attack.mitre.org/techniques/T1566/001","sourceCount":141},{"id":"T1566.002","name":"Phishing: Spearphishing Link","tactics":["Initial Access"],"platforms":["Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":"T1566","url":"https://attack.mitre.org/techniques/T1566/002","sourceCount":80},{"id":"T1566.003","name":"Phishing: Spearphishing via Service","tactics":["Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":"T1566","url":"https://attack.mitre.org/techniques/T1566/003","sourceCount":16},{"id":"T1566.004","name":"Phishing: Spearphishing Voice","tactics":["Initial Access"],"platforms":["Identity Provider","Linux","Windows","macOS"],"parent":"T1566","url":"https://attack.mitre.org/techniques/T1566/004","sourceCount":2},{"id":"T1567","name":"Exfiltration Over Web Service","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1567","sourceCount":14},{"id":"T1567.001","name":"Exfiltration Over Web Service: Exfiltration to Code Repository","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1567","url":"https://attack.mitre.org/techniques/T1567/001","sourceCount":1},{"id":"T1567.002","name":"Exfiltration Over Web Service: Exfiltration to Cloud Storage","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1567","url":"https://attack.mitre.org/techniques/T1567/002","sourceCount":42},{"id":"T1567.003","name":"Exfiltration Over Web Service: Exfiltration to Text Storage Sites","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1567","url":"https://attack.mitre.org/techniques/T1567/003","sourceCount":0},{"id":"T1567.004","name":"Exfiltration Over Web Service: Exfiltration Over Webhook","tactics":["Exfiltration"],"platforms":["ESXi","Linux","Office Suite","SaaS","Windows","macOS"],"parent":"T1567","url":"https://attack.mitre.org/techniques/T1567/004","sourceCount":0},{"id":"T1568","name":"Dynamic Resolution","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1568","sourceCount":20},{"id":"T1568.001","name":"Dynamic Resolution: Fast Flux DNS","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1568","url":"https://attack.mitre.org/techniques/T1568/001","sourceCount":6},{"id":"T1568.002","name":"Dynamic Resolution: Domain Generation Algorithms","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1568","url":"https://attack.mitre.org/techniques/T1568/002","sourceCount":22},{"id":"T1568.003","name":"Dynamic Resolution: DNS Calculation","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":"T1568","url":"https://attack.mitre.org/techniques/T1568/003","sourceCount":1},{"id":"T1569","name":"System Services","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1569","sourceCount":0},{"id":"T1569.001","name":"System Services: Launchctl","tactics":["Execution"],"platforms":["macOS"],"parent":"T1569","url":"https://attack.mitre.org/techniques/T1569/001","sourceCount":6},{"id":"T1569.002","name":"System Services: Service Execution","tactics":["Execution"],"platforms":["Windows"],"parent":"T1569","url":"https://attack.mitre.org/techniques/T1569/002","sourceCount":71},{"id":"T1569.003","name":"System Services: Systemctl","tactics":["Execution"],"platforms":["Linux"],"parent":"T1569","url":"https://attack.mitre.org/techniques/T1569/003","sourceCount":1},{"id":"T1570","name":"Lateral Tool Transfer","tactics":["Lateral Movement"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1570","sourceCount":52},{"id":"T1571","name":"Non-Standard Port","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1571","sourceCount":60},{"id":"T1572","name":"Protocol Tunneling","tactics":["Command and Control"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1572","sourceCount":38},{"id":"T1573","name":"Encrypted Channel","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1573","sourceCount":17},{"id":"T1573.001","name":"Encrypted Channel: Symmetric Cryptography","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1573","url":"https://attack.mitre.org/techniques/T1573/001","sourceCount":177},{"id":"T1573.002","name":"Encrypted Channel: Asymmetric Cryptography","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":"T1573","url":"https://attack.mitre.org/techniques/T1573/002","sourceCount":89},{"id":"T1574","name":"Hijack Execution Flow","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1574","sourceCount":10},{"id":"T1574.001","name":"Hijack Execution Flow: DLL","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/001","sourceCount":103},{"id":"T1574.004","name":"Hijack Execution Flow: Dylib Hijacking","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["macOS"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/004","sourceCount":1},{"id":"T1574.005","name":"Hijack Execution Flow: Executable Installer File Permissions Weakness","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/005","sourceCount":1},{"id":"T1574.006","name":"Hijack Execution Flow: Dynamic Linker Hijacking","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Linux","macOS"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/006","sourceCount":9},{"id":"T1574.007","name":"Hijack Execution Flow: Path Interception by PATH Environment Variable","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Linux","Windows","macOS"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/007","sourceCount":3},{"id":"T1574.008","name":"Hijack Execution Flow: Path Interception by Search Order Hijacking","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/008","sourceCount":2},{"id":"T1574.009","name":"Hijack Execution Flow: Path Interception by Unquoted Path","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/009","sourceCount":2},{"id":"T1574.010","name":"Hijack Execution Flow: Services File Permissions Weakness","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/010","sourceCount":1},{"id":"T1574.011","name":"Hijack Execution Flow: Services Registry Permissions Weakness","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/011","sourceCount":1},{"id":"T1574.012","name":"Hijack Execution Flow: COR_PROFILER","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/012","sourceCount":2},{"id":"T1574.013","name":"Hijack Execution Flow: KernelCallbackTable","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/013","sourceCount":2},{"id":"T1574.014","name":"Hijack Execution Flow: AppDomainManager","tactics":["Defense Evasion","Persistence","Privilege Escalation"],"platforms":["Windows"],"parent":"T1574","url":"https://attack.mitre.org/techniques/T1574/014","sourceCount":1},{"id":"T1578","name":"Modify Cloud Compute Infrastructure","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1578","sourceCount":0},{"id":"T1578.001","name":"Modify Cloud Compute Infrastructure: Create Snapshot","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":"T1578","url":"https://attack.mitre.org/techniques/T1578/001","sourceCount":1},{"id":"T1578.002","name":"Modify Cloud Compute Infrastructure: Create Cloud Instance","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":"T1578","url":"https://attack.mitre.org/techniques/T1578/002","sourceCount":3},{"id":"T1578.003","name":"Modify Cloud Compute Infrastructure: Delete Cloud Instance","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":"T1578","url":"https://attack.mitre.org/techniques/T1578/003","sourceCount":2},{"id":"T1578.004","name":"Modify Cloud Compute Infrastructure: Revert Cloud Instance","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":"T1578","url":"https://attack.mitre.org/techniques/T1578/004","sourceCount":0},{"id":"T1578.005","name":"Modify Cloud Compute Infrastructure: Modify Cloud Compute Configurations","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":"T1578","url":"https://attack.mitre.org/techniques/T1578/005","sourceCount":0},{"id":"T1580","name":"Cloud Infrastructure Discovery","tactics":["Discovery"],"platforms":["IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1580","sourceCount":3},{"id":"T1583","name":"Acquire Infrastructure","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1583","sourceCount":8},{"id":"T1583.001","name":"Acquire Infrastructure: Domains","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/001","sourceCount":58},{"id":"T1583.002","name":"Acquire Infrastructure: DNS Server","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/002","sourceCount":3},{"id":"T1583.003","name":"Acquire Infrastructure: Virtual Private Server","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/003","sourceCount":20},{"id":"T1583.004","name":"Acquire Infrastructure: Server","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/004","sourceCount":10},{"id":"T1583.005","name":"Acquire Infrastructure: Botnet","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/005","sourceCount":3},{"id":"T1583.006","name":"Acquire Infrastructure: Web Services","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/006","sourceCount":27},{"id":"T1583.007","name":"Acquire Infrastructure: Serverless","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/007","sourceCount":1},{"id":"T1583.008","name":"Acquire Infrastructure: Malvertising","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1583","url":"https://attack.mitre.org/techniques/T1583/008","sourceCount":2},{"id":"T1584","name":"Compromise Infrastructure","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1584","sourceCount":2},{"id":"T1584.001","name":"Compromise Infrastructure: Domains","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/001","sourceCount":11},{"id":"T1584.002","name":"Compromise Infrastructure: DNS Server","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/002","sourceCount":2},{"id":"T1584.003","name":"Compromise Infrastructure: Virtual Private Server","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/003","sourceCount":3},{"id":"T1584.004","name":"Compromise Infrastructure: Server","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/004","sourceCount":15},{"id":"T1584.005","name":"Compromise Infrastructure: Botnet","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/005","sourceCount":5},{"id":"T1584.006","name":"Compromise Infrastructure: Web Services","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/006","sourceCount":6},{"id":"T1584.007","name":"Compromise Infrastructure: Serverless","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/007","sourceCount":0},{"id":"T1584.008","name":"Compromise Infrastructure: Network Devices","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1584","url":"https://attack.mitre.org/techniques/T1584/008","sourceCount":9},{"id":"T1585","name":"Establish Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1585","sourceCount":6},{"id":"T1585.001","name":"Establish Accounts: Social Media Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1585","url":"https://attack.mitre.org/techniques/T1585/001","sourceCount":19},{"id":"T1585.002","name":"Establish Accounts: Email Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1585","url":"https://attack.mitre.org/techniques/T1585/002","sourceCount":25},{"id":"T1585.003","name":"Establish Accounts: Cloud Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1585","url":"https://attack.mitre.org/techniques/T1585/003","sourceCount":2},{"id":"T1586","name":"Compromise Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1586","sourceCount":0},{"id":"T1586.001","name":"Compromise Accounts: Social Media Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1586","url":"https://attack.mitre.org/techniques/T1586/001","sourceCount":2},{"id":"T1586.002","name":"Compromise Accounts: Email Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1586","url":"https://attack.mitre.org/techniques/T1586/002","sourceCount":13},{"id":"T1586.003","name":"Compromise Accounts: Cloud Accounts","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1586","url":"https://attack.mitre.org/techniques/T1586/003","sourceCount":2},{"id":"T1587","name":"Develop Capabilities","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1587","sourceCount":3},{"id":"T1587.001","name":"Develop Capabilities: Malware","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1587","url":"https://attack.mitre.org/techniques/T1587/001","sourceCount":36},{"id":"T1587.002","name":"Develop Capabilities: Code Signing Certificates","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1587","url":"https://attack.mitre.org/techniques/T1587/002","sourceCount":4},{"id":"T1587.003","name":"Develop Capabilities: Digital Certificates","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1587","url":"https://attack.mitre.org/techniques/T1587/003","sourceCount":7},{"id":"T1587.004","name":"Develop Capabilities: Exploits","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1587","url":"https://attack.mitre.org/techniques/T1587/004","sourceCount":3},{"id":"T1588","name":"Obtain Capabilities","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1588","sourceCount":0},{"id":"T1588.001","name":"Obtain Capabilities: Malware","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/001","sourceCount":20},{"id":"T1588.002","name":"Obtain Capabilities: Tool","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/002","sourceCount":103},{"id":"T1588.003","name":"Obtain Capabilities: Code Signing Certificates","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/003","sourceCount":11},{"id":"T1588.004","name":"Obtain Capabilities: Digital Certificates","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/004","sourceCount":10},{"id":"T1588.005","name":"Obtain Capabilities: Exploits","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/005","sourceCount":2},{"id":"T1588.006","name":"Obtain Capabilities: Vulnerabilities","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/006","sourceCount":4},{"id":"T1588.007","name":"Obtain Capabilities: Artificial Intelligence","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1588","url":"https://attack.mitre.org/techniques/T1588/007","sourceCount":1},{"id":"T1589","name":"Gather Victim Identity Information","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1589","sourceCount":11},{"id":"T1589.001","name":"Gather Victim Identity Information: Credentials","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1589","url":"https://attack.mitre.org/techniques/T1589/001","sourceCount":7},{"id":"T1589.002","name":"Gather Victim Identity Information: Email Addresses","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1589","url":"https://attack.mitre.org/techniques/T1589/002","sourceCount":17},{"id":"T1589.003","name":"Gather Victim Identity Information: Employee Names","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1589","url":"https://attack.mitre.org/techniques/T1589/003","sourceCount":3},{"id":"T1590","name":"Gather Victim Network Information","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1590","sourceCount":3},{"id":"T1590.001","name":"Gather Victim Network Information: Domain Properties","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1590","url":"https://attack.mitre.org/techniques/T1590/001","sourceCount":2},{"id":"T1590.002","name":"Gather Victim Network Information: DNS","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1590","url":"https://attack.mitre.org/techniques/T1590/002","sourceCount":0},{"id":"T1590.003","name":"Gather Victim Network Information: Network Trust Dependencies","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1590","url":"https://attack.mitre.org/techniques/T1590/003","sourceCount":0},{"id":"T1590.004","name":"Gather Victim Network Information: Network Topology","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1590","url":"https://attack.mitre.org/techniques/T1590/004","sourceCount":3},{"id":"T1590.005","name":"Gather Victim Network Information: IP Addresses","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1590","url":"https://attack.mitre.org/techniques/T1590/005","sourceCount":3},{"id":"T1590.006","name":"Gather Victim Network Information: Network Security Appliances","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1590","url":"https://attack.mitre.org/techniques/T1590/006","sourceCount":1},{"id":"T1591","name":"Gather Victim Org Information","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1591","sourceCount":7},{"id":"T1591.001","name":"Gather Victim Org Information: Determine Physical Locations","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1591","url":"https://attack.mitre.org/techniques/T1591/001","sourceCount":1},{"id":"T1591.002","name":"Gather Victim Org Information: Business Relationships","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1591","url":"https://attack.mitre.org/techniques/T1591/002","sourceCount":3},{"id":"T1591.003","name":"Gather Victim Org Information: Identify Business Tempo","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1591","url":"https://attack.mitre.org/techniques/T1591/003","sourceCount":0},{"id":"T1591.004","name":"Gather Victim Org Information: Identify Roles","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1591","url":"https://attack.mitre.org/techniques/T1591/004","sourceCount":5},{"id":"T1592","name":"Gather Victim Host Information","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1592","sourceCount":1},{"id":"T1592.001","name":"Gather Victim Host Information: Hardware","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1592","url":"https://attack.mitre.org/techniques/T1592/001","sourceCount":0},{"id":"T1592.002","name":"Gather Victim Host Information: Software","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1592","url":"https://attack.mitre.org/techniques/T1592/002","sourceCount":3},{"id":"T1592.003","name":"Gather Victim Host Information: Firmware","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1592","url":"https://attack.mitre.org/techniques/T1592/003","sourceCount":0},{"id":"T1592.004","name":"Gather Victim Host Information: Client Configurations","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1592","url":"https://attack.mitre.org/techniques/T1592/004","sourceCount":1},{"id":"T1593","name":"Search Open Websites/Domains","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1593","sourceCount":6},{"id":"T1593.001","name":"Search Open Websites/Domains: Social Media","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1593","url":"https://attack.mitre.org/techniques/T1593/001","sourceCount":4},{"id":"T1593.002","name":"Search Open Websites/Domains: Search Engines","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1593","url":"https://attack.mitre.org/techniques/T1593/002","sourceCount":2},{"id":"T1593.003","name":"Search Open Websites/Domains: Code Repositories","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1593","url":"https://attack.mitre.org/techniques/T1593/003","sourceCount":3},{"id":"T1594","name":"Search Victim-Owned Websites","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1594","sourceCount":9},{"id":"T1595","name":"Active Scanning","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1595","sourceCount":1},{"id":"T1595.001","name":"Active Scanning: Scanning IP Blocks","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1595","url":"https://attack.mitre.org/techniques/T1595/001","sourceCount":2},{"id":"T1595.002","name":"Active Scanning: Vulnerability Scanning","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1595","url":"https://attack.mitre.org/techniques/T1595/002","sourceCount":15},{"id":"T1595.003","name":"Active Scanning: Wordlist Scanning","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1595","url":"https://attack.mitre.org/techniques/T1595/003","sourceCount":2},{"id":"T1596","name":"Search Open Technical Databases","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1596","sourceCount":2},{"id":"T1596.001","name":"Search Open Technical Databases: DNS/Passive DNS","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1596","url":"https://attack.mitre.org/techniques/T1596/001","sourceCount":0},{"id":"T1596.002","name":"Search Open Technical Databases: WHOIS","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1596","url":"https://attack.mitre.org/techniques/T1596/002","sourceCount":0},{"id":"T1596.003","name":"Search Open Technical Databases: Digital Certificates","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1596","url":"https://attack.mitre.org/techniques/T1596/003","sourceCount":0},{"id":"T1596.004","name":"Search Open Technical Databases: CDNs","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1596","url":"https://attack.mitre.org/techniques/T1596/004","sourceCount":0},{"id":"T1596.005","name":"Search Open Technical Databases: Scan Databases","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1596","url":"https://attack.mitre.org/techniques/T1596/005","sourceCount":3},{"id":"T1597","name":"Search Closed Sources","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1597","sourceCount":1},{"id":"T1597.001","name":"Search Closed Sources: Threat Intel Vendors","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1597","url":"https://attack.mitre.org/techniques/T1597/001","sourceCount":0},{"id":"T1597.002","name":"Search Closed Sources: Purchase Technical Data","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1597","url":"https://attack.mitre.org/techniques/T1597/002","sourceCount":1},{"id":"T1598","name":"Phishing for Information","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1598","sourceCount":5},{"id":"T1598.001","name":"Phishing for Information: Spearphishing Service","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1598","url":"https://attack.mitre.org/techniques/T1598/001","sourceCount":1},{"id":"T1598.002","name":"Phishing for Information: Spearphishing Attachment","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1598","url":"https://attack.mitre.org/techniques/T1598/002","sourceCount":4},{"id":"T1598.003","name":"Phishing for Information: Spearphishing Link","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1598","url":"https://attack.mitre.org/techniques/T1598/003","sourceCount":17},{"id":"T1598.004","name":"Phishing for Information: Spearphishing Voice","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":"T1598","url":"https://attack.mitre.org/techniques/T1598/004","sourceCount":4},{"id":"T1599","name":"Network Boundary Bridging","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":null,"url":"https://attack.mitre.org/techniques/T1599","sourceCount":2},{"id":"T1599.001","name":"Network Boundary Bridging: Network Address Translation Traversal","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":"T1599","url":"https://attack.mitre.org/techniques/T1599/001","sourceCount":0},{"id":"T1600","name":"Weaken Encryption","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":null,"url":"https://attack.mitre.org/techniques/T1600","sourceCount":0},{"id":"T1600.001","name":"Weaken Encryption: Reduce Key Space","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":"T1600","url":"https://attack.mitre.org/techniques/T1600/001","sourceCount":0},{"id":"T1600.002","name":"Weaken Encryption: Disable Crypto Hardware","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":"T1600","url":"https://attack.mitre.org/techniques/T1600/002","sourceCount":0},{"id":"T1601","name":"Modify System Image","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":null,"url":"https://attack.mitre.org/techniques/T1601","sourceCount":0},{"id":"T1601.001","name":"Modify System Image: Patch System Image","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":"T1601","url":"https://attack.mitre.org/techniques/T1601/001","sourceCount":1},{"id":"T1601.002","name":"Modify System Image: Downgrade System Image","tactics":["Defense Evasion"],"platforms":["Network Devices"],"parent":"T1601","url":"https://attack.mitre.org/techniques/T1601/002","sourceCount":0},{"id":"T1602","name":"Data from Configuration Repository","tactics":["Collection"],"platforms":["Network Devices"],"parent":null,"url":"https://attack.mitre.org/techniques/T1602","sourceCount":0},{"id":"T1602.001","name":"Data from Configuration Repository: SNMP (MIB Dump)","tactics":["Collection"],"platforms":["Network Devices"],"parent":"T1602","url":"https://attack.mitre.org/techniques/T1602/001","sourceCount":0},{"id":"T1602.002","name":"Data from Configuration Repository: Network Device Configuration Dump","tactics":["Collection"],"platforms":["Network Devices"],"parent":"T1602","url":"https://attack.mitre.org/techniques/T1602/002","sourceCount":1},{"id":"T1606","name":"Forge Web Credentials","tactics":["Credential Access"],"platforms":["IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1606","sourceCount":0},{"id":"T1606.001","name":"Forge Web Credentials: Web Cookies","tactics":["Credential Access"],"platforms":["IaaS","Linux","SaaS","Windows","macOS"],"parent":"T1606","url":"https://attack.mitre.org/techniques/T1606/001","sourceCount":1},{"id":"T1606.002","name":"Forge Web Credentials: SAML Tokens","tactics":["Credential Access"],"platforms":["IaaS","Identity Provider","Office Suite","SaaS","Windows"],"parent":"T1606","url":"https://attack.mitre.org/techniques/T1606/002","sourceCount":2},{"id":"T1608","name":"Stage Capabilities","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1608","sourceCount":1},{"id":"T1608.001","name":"Stage Capabilities: Upload Malware","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1608","url":"https://attack.mitre.org/techniques/T1608/001","sourceCount":33},{"id":"T1608.002","name":"Stage Capabilities: Upload Tool","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1608","url":"https://attack.mitre.org/techniques/T1608/002","sourceCount":4},{"id":"T1608.003","name":"Stage Capabilities: Install Digital Certificate","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1608","url":"https://attack.mitre.org/techniques/T1608/003","sourceCount":1},{"id":"T1608.004","name":"Stage Capabilities: Drive-by Target","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1608","url":"https://attack.mitre.org/techniques/T1608/004","sourceCount":9},{"id":"T1608.005","name":"Stage Capabilities: Link Target","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1608","url":"https://attack.mitre.org/techniques/T1608/005","sourceCount":4},{"id":"T1608.006","name":"Stage Capabilities: SEO Poisoning","tactics":["Resource Development"],"platforms":["PRE"],"parent":"T1608","url":"https://attack.mitre.org/techniques/T1608/006","sourceCount":1},{"id":"T1609","name":"Container Administration Command","tactics":["Execution"],"platforms":["Containers"],"parent":null,"url":"https://attack.mitre.org/techniques/T1609","sourceCount":5},{"id":"T1610","name":"Deploy Container","tactics":["Defense Evasion","Execution"],"platforms":["Containers"],"parent":null,"url":"https://attack.mitre.org/techniques/T1610","sourceCount":4},{"id":"T1611","name":"Escape to Host","tactics":["Privilege Escalation"],"platforms":["Containers","ESXi","Linux","Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1611","sourceCount":5},{"id":"T1612","name":"Build Image on Host","tactics":["Defense Evasion"],"platforms":["Containers"],"parent":null,"url":"https://attack.mitre.org/techniques/T1612","sourceCount":0},{"id":"T1613","name":"Container and Resource Discovery","tactics":["Discovery"],"platforms":["Containers"],"parent":null,"url":"https://attack.mitre.org/techniques/T1613","sourceCount":3},{"id":"T1614","name":"System Location Discovery","tactics":["Discovery"],"platforms":["IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1614","sourceCount":20},{"id":"T1614.001","name":"System Location Discovery: System Language Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":"T1614","url":"https://attack.mitre.org/techniques/T1614/001","sourceCount":36},{"id":"T1615","name":"Group Policy Discovery","tactics":["Discovery"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1615","sourceCount":7},{"id":"T1619","name":"Cloud Storage Object Discovery","tactics":["Discovery"],"platforms":["IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1619","sourceCount":2},{"id":"T1620","name":"Reflective Code Loading","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1620","sourceCount":28},{"id":"T1621","name":"Multi-Factor Authentication Request Generation","tactics":["Credential Access"],"platforms":["IaaS","Identity Provider","Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1621","sourceCount":4},{"id":"T1622","name":"Debugger Evasion","tactics":["Defense Evasion","Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1622","sourceCount":23},{"id":"T1647","name":"Plist File Modification","tactics":["Defense Evasion"],"platforms":["macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1647","sourceCount":2},{"id":"T1648","name":"Serverless Execution","tactics":["Execution"],"platforms":["IaaS","Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1648","sourceCount":1},{"id":"T1649","name":"Steal or Forge Authentication Certificates","tactics":["Credential Access"],"platforms":["Identity Provider","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1649","sourceCount":3},{"id":"T1650","name":"Acquire Access","tactics":["Resource Development"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1650","sourceCount":1},{"id":"T1651","name":"Cloud Administration Command","tactics":["Execution"],"platforms":["IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1651","sourceCount":3},{"id":"T1652","name":"Device Driver Discovery","tactics":["Discovery"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1652","sourceCount":4},{"id":"T1653","name":"Power Settings","tactics":["Persistence"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1653","sourceCount":3},{"id":"T1654","name":"Log Enumeration","tactics":["Discovery"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1654","sourceCount":10},{"id":"T1656","name":"Impersonation","tactics":["Defense Evasion"],"platforms":["Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1656","sourceCount":12},{"id":"T1657","name":"Financial Theft","tactics":["Impact"],"platforms":["Linux","Office Suite","SaaS","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1657","sourceCount":20},{"id":"T1659","name":"Content Injection","tactics":["Command and Control","Initial Access"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1659","sourceCount":2},{"id":"T1665","name":"Hide Infrastructure","tactics":["Command and Control"],"platforms":["ESXi","Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1665","sourceCount":7},{"id":"T1666","name":"Modify Cloud Resource Hierarchy","tactics":["Defense Evasion"],"platforms":["IaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1666","sourceCount":0},{"id":"T1667","name":"Email Bombing","tactics":["Impact"],"platforms":["Linux","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1667","sourceCount":1},{"id":"T1668","name":"Exclusive Control","tactics":["Persistence"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1668","sourceCount":0},{"id":"T1669","name":"Wi-Fi Networks","tactics":["Initial Access"],"platforms":["Linux","Network Devices","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1669","sourceCount":2},{"id":"T1671","name":"Cloud Application Integration","tactics":["Persistence"],"platforms":["Office Suite","SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1671","sourceCount":1},{"id":"T1672","name":"Email Spoofing","tactics":["Defense Evasion"],"platforms":["Linux","Office Suite","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1672","sourceCount":0},{"id":"T1673","name":"Virtual Machine Discovery","tactics":["Discovery"],"platforms":["ESXi","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1673","sourceCount":4},{"id":"T1674","name":"Input Injection","tactics":["Execution"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1674","sourceCount":1},{"id":"T1675","name":"ESXi Administration Command","tactics":["Execution"],"platforms":["ESXi"],"parent":null,"url":"https://attack.mitre.org/techniques/T1675","sourceCount":2},{"id":"T1677","name":"Poisoned Pipeline Execution","tactics":["Execution"],"platforms":["SaaS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1677","sourceCount":0},{"id":"T1678","name":"Delay Execution","tactics":["Defense Evasion"],"platforms":["Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1678","sourceCount":4},{"id":"T1679","name":"Selective Exclusion","tactics":["Defense Evasion"],"platforms":["Windows"],"parent":null,"url":"https://attack.mitre.org/techniques/T1679","sourceCount":3},{"id":"T1680","name":"Local Storage Discovery","tactics":["Discovery"],"platforms":["ESXi","IaaS","Linux","Windows","macOS"],"parent":null,"url":"https://attack.mitre.org/techniques/T1680","sourceCount":99},{"id":"T1681","name":"Search Threat Vendor Data","tactics":["Reconnaissance"],"platforms":["PRE"],"parent":null,"url":"https://attack.mitre.org/techniques/T1681","sourceCount":2}],"entities":[{"id":"C0028","name":"2015 Ukraine Electric Power Attack","type":"campaign","techniques":["T1018","T1040","T1055","T1056.001","T1059.005","T1070.004","T1071.001","T1078","T1105","T1112","T1133","T1136.002","T1204.002","T1218.011","T1562.001","T1566.001","T1570"]},{"id":"C0025","name":"2016 Ukraine Electric Power Attack","type":"campaign","techniques":["T1003.001","T1018","T1021.002","T1027","T1027.002","T1036.005","T1036.008","T1036.010","T1047","T1059.001","T1059.003","T1059.005","T1098","T1110","T1136","T1136.002","T1505.001","T1543.003","T1554","T1562.002","T1570"]},{"id":"C0034","name":"2022 Ukraine Electric Power Attack","type":"campaign","techniques":["T1036.004","T1053.005","T1059.001","T1095","T1484.001","T1485","T1505.003","T1543.002","T1570","T1572"]},{"id":"C0057","name":"3CX Supply Chain Attack","type":"campaign","techniques":["T1027","T1027.009","T1027.013","T1055","T1055.002","T1071.001","T1078","T1102.001","T1189","T1195.002","T1203","T1217","T1218.007","T1218.015","T1543.004","T1546.016","T1553.002","T1559","T1573.001","T1574.001","T1620","T1678"]},{"id":"C0051","name":"APT28 Nearest Neighbor Campaign","type":"campaign","techniques":["T1003.002","T1003.003","T1006","T1016.002","T1021.001","T1021.002","T1059.001","T1059.003","T1074.001","T1090.001","T1110.003","T1140","T1560.001","T1561.001","T1562.004","T1567","T1584","T1669"]},{"id":"C0040","name":"APT41 DUST","type":"campaign","techniques":["T1027.013","T1036.004","T1070.004","T1071.001","T1074.001","T1102","T1105","T1119","T1213.006","T1505.003","T1543.003","T1553.002","T1560.001","T1567.002","T1569.002","T1573.002","T1574.001","T1583.007","T1586.003","T1588.003","T1593.002","T1594","T1596.005"]},{"id":"C0046","name":"ArcaneDoor","type":"campaign","techniques":["T1014","T1020","T1036","T1037","T1040","T1041","T1055","T1059","T1070.004","T1071.001","T1082","T1102.003","T1119","T1133","T1140","T1190","T1556","T1557","T1562.001","T1562.003","T1583.003","T1583.006","T1587.001","T1587.003","T1653"]},{"id":"C0010","name":"C0010","type":"campaign","techniques":["T1105","T1189","T1583.001","T1584.001","T1587.001","T1588.002","T1608.001","T1608.002","T1608.004"]},{"id":"C0011","name":"C0011","type":"campaign","techniques":["T1059.005","T1204.001","T1204.002","T1566.001","T1566.002","T1583.001","T1587.003","T1608.001"]},{"id":"C0015","name":"C0015","type":"campaign","techniques":["T1005","T1016","T1018","T1021.001","T1027","T1030","T1036","T1039","T1047","T1055.001","T1057","T1059.003","T1059.005","T1059.007","T1069.001","T1069.002","T1074.001","T1083","T1105","T1124","T1135","T1204.002","T1218.005","T1218.010","T1218.011","T1219.002","T1482","T1486","T1553.002","T1566.001","T1567.002","T1570","T1588.001","T1588.002"]},{"id":"C0017","name":"C0017","type":"campaign","techniques":["T1001.003","T1003.002","T1005","T1016","T1027","T1027.002","T1033","T1036.004","T1036.005","T1041","T1048.003","T1053.005","T1059.003","T1059.007","T1071.001","T1074.001","T1090","T1102","T1102.001","T1105","T1134","T1140","T1190","T1505.003","T1560.003","T1567","T1574","T1588.002","T1680"]},{"id":"C0018","name":"C0018","type":"campaign","techniques":["T1016","T1021.001","T1027.010","T1033","T1036","T1036.005","T1046","T1047","T1059.001","T1071.001","T1072","T1105","T1190","T1218.011","T1219.002","T1486","T1570","T1571","T1588.002"]},{"id":"C0021","name":"C0021","type":"campaign","techniques":["T1027.009","T1027.010","T1059.001","T1071.001","T1095","T1105","T1140","T1204.001","T1218.011","T1566.002","T1573.002","T1583.001","T1584.001","T1588.002","T1608.001"]},{"id":"C0026","name":"C0026","type":"campaign","techniques":["T1005","T1030","T1105","T1560.001","T1568","T1583.001"]},{"id":"C0027","name":"C0027","type":"campaign","techniques":["T1003.006","T1021.007","T1046","T1047","T1069.003","T1078.004","T1087.003","T1087.004","T1090","T1098.001","T1098.003","T1098.005","T1102","T1105","T1133","T1190","T1213.002","T1219.002","T1530","T1566.004","T1572","T1578.002","T1588.002","T1589.001","T1598.001","T1598.004","T1621","T1656"]},{"id":"C0032","name":"C0032","type":"campaign","techniques":["T1003.001","T1021.001","T1021.004","T1036.005","T1053.005","T1059.001","T1070.004","T1070.006","T1074.001","T1078","T1133","T1505.003","T1546.012","T1571","T1572","T1583.003","T1588.002"]},{"id":"C0004","name":"CostaRicto","type":"campaign","techniques":["T1005","T1046","T1053.005","T1090.003","T1105","T1133","T1572","T1583.001","T1587.001","T1588.002"]},{"id":"C0029","name":"Cutting Edge","type":"campaign","techniques":["T1003.001","T1003.003","T1005","T1021.001","T1021.002","T1021.004","T1027.013","T1055","T1056.001","T1056.003","T1059","T1059.006","T1070","T1070.004","T1070.006","T1071.004","T1078.002","T1082","T1095","T1105","T1190","T1205","T1505.003","T1554","T1560.001","T1562.001","T1572","T1584.008","T1588.002","T1594","T1595.002"]},{"id":"C0053","name":"FLORAHOX Activity","type":"campaign","techniques":["T1059","T1059.004","T1090.003","T1190","T1583.003","T1584.008"]},{"id":"C0001","name":"Frankenstein","type":"campaign","techniques":["T1005","T1016","T1020","T1027.010","T1033","T1036.004","T1041","T1047","T1053.005","T1057","T1059.001","T1059.003","T1059.005","T1071.001","T1082","T1105","T1119","T1127.001","T1140","T1203","T1204.002","T1221","T1497.001","T1518.001","T1566.001","T1573.001","T1588.002"]},{"id":"C0041","name":"FrostyGoop Incident","type":"campaign","techniques":["T1003.002","T1071","T1190","T1505.003","T1562.010"]},{"id":"C0007","name":"FunnyDream","type":"campaign","techniques":["T1016","T1018","T1047","T1049","T1057","T1059.003","T1059.005","T1082","T1105","T1560.001","T1583.001","T1585.002","T1588.001","T1588.002"]},{"id":"C0038","name":"HomeLand Justice","type":"campaign","techniques":["T1003.001","T1021.001","T1021.002","T1036.005","T1041","T1046","T1047","T1059.001","T1059.003","T1078","T1078.001","T1087.003","T1098.002","T1105","T1114.002","T1134.001","T1190","T1486","T1505.003","T1561.002","T1562.001","T1562.002","T1570","T1588.002","T1588.003"]},{"id":"C0043","name":"Indian Critical Infrastructure Intrusions","type":"campaign","techniques":["T1071.001","T1568","T1571","T1573.002","T1583.001","T1584","T1588.004","T1599"]},{"id":"C0050","name":"J-magic Campaign","type":"campaign","techniques":["T1036.005","T1583.003","T1587.003","T1588.001"]},{"id":"C0044","name":"Juicy Mix","type":"campaign","techniques":["T1053.005","T1059.001","T1059.005","T1071.001","T1074.001","T1082","T1132.001","T1140","T1217","T1518","T1555.003","T1555.004","T1584.004","T1587.001"]},{"id":"C0035","name":"KV Botnet Activity","type":"campaign","techniques":["T1016","T1036","T1036.004","T1055.009","T1057","T1059.004","T1070.004","T1082","T1083","T1095","T1105","T1222.002","T1518.001","T1546","T1562.001","T1564.013","T1571","T1573","T1583.003","T1584.008"]},{"id":"C0049","name":"Leviathan Australian Intrusions","type":"campaign","techniques":["T1018","T1021.002","T1021.004","T1041","T1056","T1068","T1074.001","T1078","T1078.002","T1078.003","T1082","T1111","T1135","T1190","T1212","T1213.006","T1482","T1505.003","T1528","T1552","T1552.001","T1558.003","T1562.004","T1588.006","T1594","T1615"]},{"id":"C0002","name":"Night Dragon","type":"campaign","techniques":["T1003.002","T1005","T1008","T1027.002","T1027.013","T1033","T1059.003","T1071.001","T1074.002","T1078","T1078.002","T1083","T1105","T1110.002","T1112","T1114.001","T1133","T1190","T1204.001","T1219","T1550.002","T1562.001","T1566.002","T1568","T1583.004","T1584.004","T1588.001","T1588.002","T1608.001"]},{"id":"C0012","name":"Operation CuckooBees","type":"campaign","techniques":["T1003.002","T1005","T1007","T1016","T1018","T1027.010","T1027.011","T1033","T1036.005","T1049","T1053.005","T1057","T1059.003","T1059.005","T1069.001","T1071.001","T1078.002","T1082","T1083","T1087.001","T1087.002","T1120","T1124","T1133","T1135","T1190","T1201","T1505.003","T1543.003","T1547.006","T1560.001","T1574.001","T1588.002"]},{"id":"C0022","name":"Operation Dream Job","type":"campaign","techniques":["T1005","T1027.002","T1027.013","T1036.008","T1041","T1047","T1053.005","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1083","T1087.002","T1105","T1106","T1110","T1204.001","T1204.002","T1218.010","T1218.011","T1220","T1221","T1497.001","T1497.003","T1505.004","T1534","T1547.001","T1553.002","T1560.001","T1566.001","T1566.002","T1566.003","T1567.002","T1573.001","T1583.001","T1583.004","T1583.006","T1584.001","T1584.004","T1585.001","T1585.002","T1587.001","T1587.002","T1588.002","T1588.003","T1589","T1591","T1591.004","T1593.001","T1608.001","T1608.002","T1614.001","T1622","T1656"]},{"id":"C0016","name":"Operation Dust Storm","type":"campaign","techniques":["T1027.002","T1027.013","T1036","T1059.005","T1059.007","T1140","T1189","T1203","T1204.001","T1204.002","T1218.005","T1518","T1566.001","T1566.002","T1568","T1583.001","T1585.002"]},{"id":"C0023","name":"Operation Ghost","type":"campaign","techniques":["T1001.002","T1027.003","T1078.002","T1102.002","T1546.003","T1583.001","T1585.001","T1587.001"]},{"id":"C0006","name":"Operation Honeybee","type":"campaign","techniques":["T1005","T1027.013","T1036","T1036.005","T1041","T1057","T1059.003","T1059.005","T1070.004","T1071.002","T1074.001","T1082","T1083","T1105","T1106","T1112","T1140","T1204.002","T1543.003","T1548.002","T1553.002","T1560.001","T1569.002","T1574.011","T1583.001","T1583.004","T1585.002","T1588.004"]},{"id":"C0048","name":"Operation MidnightEclipse","type":"campaign","techniques":["T1003.003","T1005","T1021.002","T1021.006","T1053.003","T1059.004","T1071.001","T1074.001","T1078","T1078.002","T1090","T1105","T1190","T1559","T1584.003","T1584.006","T1588.002"]},{"id":"C0013","name":"Operation Sharpshooter","type":"campaign","techniques":["T1036.005","T1055","T1059.005","T1090","T1105","T1106","T1204.002","T1547.001","T1559.002","T1583.006","T1584.004","T1587.001","T1608.001"]},{"id":"C0005","name":"Operation Spalax","type":"campaign","techniques":["T1027.002","T1027.003","T1027.013","T1059","T1102","T1140","T1204.001","T1204.002","T1218.011","T1497","T1566.001","T1566.002","T1568","T1583.001","T1588.001","T1588.002","T1608.001"]},{"id":"C0014","name":"Operation Wocao","type":"campaign","techniques":["T1001","T1003.001","T1003.006","T1005","T1007","T1012","T1016","T1016.001","T1018","T1021.002","T1027.005","T1027.010","T1033","T1036.005","T1041","T1046","T1047","T1049","T1053.005","T1055","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1059.006","T1069.001","T1070.001","T1070.004","T1071.001","T1074.001","T1078","T1078.002","T1078.003","T1082","T1083","T1087.002","T1090","T1090.001","T1090.003","T1095","T1105","T1106","T1111","T1112","T1115","T1119","T1120","T1124","T1133","T1135","T1190","T1505.003","T1518","T1518.001","T1552.004","T1555.005","T1558.003","T1560.001","T1562.004","T1569.002","T1570","T1571","T1573.002","T1583.004","T1585.002","T1587.001","T1588.002","T1589","T1680"]},{"id":"C0042","name":"Outer Space","type":"campaign","techniques":["T1027.013","T1059.005","T1071.001","T1105","T1217","T1584.004","T1585.003","T1587.001"]},{"id":"C0036","name":"Pikabot Distribution February 2024","type":"campaign","techniques":["T1059.001","T1059.007","T1566.002","T1574"]},{"id":"C0055","name":"Quad7 Activity","type":"campaign","techniques":["T1027.011","T1059.004","T1071.001","T1071.002","T1090.002","T1090.003","T1105","T1110.003","T1190","T1562.001","T1571","T1584.005","T1584.008","T1589.002","T1665"]},{"id":"C0047","name":"RedDelta Modified PlugX Infection Chain Operations","type":"campaign","techniques":["T1027.013","T1036.004","T1059.001","T1071.001","T1082","T1090","T1095","T1203","T1204.001","T1204.002","T1218.007","T1218.014","T1480","T1547.001","T1553.002","T1564.001","T1566.001","T1566.002","T1574.001","T1583.001","T1588.004","T1608.001"]},{"id":"C0056","name":"RedPenguin","type":"campaign","techniques":["T1014","T1016","T1027.013","T1036.005","T1040","T1041","T1055","T1057","T1059.004","T1059.008","T1070.004","T1070.007","T1078","T1090","T1090.003","T1095","T1104","T1105","T1140","T1203","T1205","T1554","T1562.003","T1571","T1573.001","T1587.001"]},{"id":"C0052","name":"SPACEHOP Activity","type":"campaign","techniques":["T1090.003","T1190","T1583.003","T1588.002"]},{"id":"C0059","name":"Salesforce Data Exfiltration","type":"campaign","techniques":["T1020","T1036","T1059.006","T1078.002","T1083","T1090","T1090.003","T1213.004","T1567","T1585","T1585.002","T1586.002","T1587.001","T1588.002","T1598.004","T1608.005","T1656","T1671"]},{"id":"C0045","name":"ShadowRay","type":"campaign","techniques":["T1003.008","T1016","T1027.013","T1059.006","T1068","T1105","T1190","T1496.001","T1546.004","T1588.002"]},{"id":"C0058","name":"SharePoint ToolShell Exploitation","type":"campaign","techniques":["T1003.001","T1005","T1027.002","T1027.010","T1033","T1041","T1047","T1053.005","T1059.001","T1059.003","T1071.001","T1074.001","T1082","T1083","T1090","T1105","T1112","T1119","T1140","T1190","T1484.001","T1486","T1505.003","T1505.004","T1552.001","T1562.001","T1569.002","T1570","T1572","T1583.001","T1585.002","T1588.002","T1595.002","T1620","T1657"]},{"id":"C0024","name":"SolarWinds Compromise","type":"campaign","techniques":["T1003.006","T1005","T1016.001","T1018","T1021.001","T1021.002","T1021.006","T1036.004","T1036.005","T1047","T1048.002","T1053.005","T1057","T1059.001","T1059.003","T1059.005","T1069","T1069.002","T1070","T1070.004","T1070.006","T1070.008","T1071.001","T1074.002","T1078","T1078.002","T1078.003","T1078.004","T1083","T1087","T1087.002","T1090.001","T1098.001","T1098.002","T1098.003","T1098.005","T1105","T1114.002","T1133","T1140","T1190","T1195.002","T1199","T1213","T1213.003","T1218.011","T1482","T1484.002","T1539","T1546.003","T1550","T1550.001","T1550.004","T1552.004","T1553.002","T1555","T1555.003","T1558.003","T1560.001","T1562.001","T1562.002","T1562.004","T1568","T1583.001","T1584.001","T1587.001","T1589.001","T1606.001","T1606.002","T1665","T1680"]},{"id":"C0030","name":"Triton Safety Instrumented System Attack","type":"campaign","techniques":["T1003.001","T1027.005","T1036.005","T1053.005","T1056.003","T1059.001","T1573","T1587.001","T1588.002","T1595"]},{"id":"C0039","name":"Versa Director Zero Day Exploitation","type":"campaign","techniques":["T1056","T1071.001","T1095","T1190","T1505.003","T1573.002","T1584.008","T1587.001"]},{"id":"C0037","name":"Water Curupira Pikabot Distribution","type":"campaign","techniques":["T1059.003","T1059.007","T1105","T1140","T1204","T1204.001","T1204.002","T1218.011","T1566.001","T1589.002"]},{"id":"G0099","name":"APT-C-36","type":"group","techniques":["T1027","T1036.004","T1053.005","T1059.005","T1105","T1204.002","T1566.001","T1571","T1588.002"]},{"id":"G0006","name":"APT1","type":"group","techniques":["T1003.001","T1005","T1007","T1016","T1021.001","T1036.005","T1049","T1057","T1059.003","T1087.001","T1114.001","T1114.002","T1119","T1135","T1550.002","T1560.001","T1566.001","T1566.002","T1583.001","T1584.001","T1585.002","T1588.001","T1588.002"]},{"id":"G0005","name":"APT12","type":"group","techniques":["T1102.002","T1203","T1204.002","T1566.001","T1568.003"]},{"id":"G0025","name":"APT17","type":"group","techniques":["T1583.006","T1585"]},{"id":"G0026","name":"APT18","type":"group","techniques":["T1027.013","T1053.002","T1059.003","T1070.004","T1071.001","T1071.004","T1078","T1082","T1083","T1105","T1133","T1547.001"]},{"id":"G0073","name":"APT19","type":"group","techniques":["T1016","T1027.010","T1027.013","T1033","T1059","T1059.001","T1071.001","T1082","T1112","T1132.001","T1140","T1189","T1204.002","T1218.010","T1218.011","T1543.003","T1547.001","T1564.003","T1566.001","T1574.001","T1588.002"]},{"id":"G0007","name":"APT28","type":"group","techniques":["T1001.001","T1003","T1003.001","T1003.003","T1005","T1014","T1021.002","T1025","T1027.013","T1030","T1036","T1036.005","T1037.001","T1039","T1040","T1048.002","T1056.001","T1057","T1059.001","T1059.003","T1068","T1070.001","T1070.004","T1070.006","T1071.001","T1071.003","T1074.001","T1074.002","T1078","T1078.004","T1083","T1090.002","T1090.003","T1091","T1092","T1098.002","T1102.002","T1105","T1110","T1110.001","T1110.003","T1113","T1114.002","T1119","T1120","T1133","T1134.001","T1137.002","T1140","T1189","T1190","T1199","T1203","T1204.001","T1204.002","T1210","T1211","T1213","T1213.002","T1218.011","T1221","T1498","T1505.003","T1528","T1542.003","T1546.015","T1547.001","T1550.001","T1550.002","T1557.004","T1559.002","T1560","T1560.001","T1564.001","T1564.003","T1566.001","T1567","T1573.001","T1583.001","T1583.003","T1583.006","T1584.008","T1586.002","T1588.002","T1589.001","T1591","T1595.002","T1596","T1598","T1598.003","T1669"]},{"id":"G0016","name":"APT29","type":"group","techniques":["T1003.002","T1003.004","T1005","T1016.001","T1021.007","T1027.001","T1027.002","T1027.006","T1036.005","T1037","T1037.004","T1047","T1053.005","T1059.001","T1059.006","T1059.009","T1068","T1070.004","T1070.006","T1078","T1078.003","T1078.004","T1087.004","T1090.002","T1090.003","T1090.004","T1098.002","T1098.005","T1105","T1110.001","T1110.003","T1114.002","T1133","T1136.003","T1190","T1199","T1203","T1204.001","T1204.002","T1218.005","T1505.003","T1528","T1546.003","T1546.008","T1547.001","T1548.002","T1550.003","T1553.005","T1556.007","T1562.008","T1566.001","T1566.002","T1566.003","T1568","T1573","T1583.006","T1586.002","T1586.003","T1587.001","T1587.003","T1588.002","T1595.002","T1621","T1649","T1651","T1665"]},{"id":"G0022","name":"APT3","type":"group","techniques":["T1003.001","T1005","T1016","T1018","T1021.001","T1021.002","T1027","T1027.002","T1027.005","T1033","T1036.010","T1041","T1049","T1053.005","T1056.001","T1057","T1059.001","T1059.003","T1069","T1070.004","T1074.001","T1078.002","T1082","T1083","T1087.001","T1090.002","T1095","T1098.007","T1104","T1105","T1110.002","T1136.001","T1203","T1204.001","T1218.011","T1543.003","T1546.008","T1547.001","T1552.001","T1555.003","T1560.001","T1564.003","T1566.002","T1574.001"]},{"id":"G0013","name":"APT30","type":"group","techniques":["T1204.002","T1566.001"]},{"id":"G0050","name":"APT32","type":"group","techniques":["T1003","T1003.001","T1012","T1016","T1018","T1021.002","T1027.010","T1027.011","T1027.013","T1027.016","T1033","T1036","T1036.003","T1036.004","T1036.005","T1041","T1046","T1047","T1048.003","T1049","T1053.005","T1055","T1056.001","T1059","T1059.001","T1059.003","T1059.005","T1059.007","T1068","T1070.001","T1070.004","T1070.006","T1071.001","T1071.003","T1072","T1078.003","T1082","T1083","T1087.001","T1102","T1105","T1112","T1135","T1137","T1189","T1203","T1204.001","T1204.002","T1216.001","T1218.005","T1218.010","T1218.011","T1222.002","T1505.003","T1543.003","T1547.001","T1550.002","T1550.003","T1552.002","T1560","T1564.001","T1564.003","T1564.004","T1566.001","T1566.002","T1569.002","T1570","T1571","T1574.001","T1583.001","T1583.006","T1585.001","T1588.002","T1589","T1589.002","T1598.003","T1608.001","T1608.004"]},{"id":"G0064","name":"APT33","type":"group","techniques":["T1003.001","T1003.004","T1003.005","T1027.013","T1040","T1048.003","T1053.005","T1059.001","T1059.005","T1068","T1071.001","T1078","T1078.004","T1105","T1110.003","T1132.001","T1203","T1204.001","T1204.002","T1546.003","T1547.001","T1552.001","T1552.006","T1555","T1555.003","T1560.001","T1566.001","T1566.002","T1571","T1573.001","T1588.002"]},{"id":"G0067","name":"APT37","type":"group","techniques":["T1005","T1027","T1027.003","T1033","T1036.001","T1053.005","T1055","T1057","T1059","T1059.003","T1059.005","T1059.006","T1071.001","T1082","T1102.002","T1105","T1106","T1120","T1123","T1189","T1203","T1204.002","T1529","T1547.001","T1548.002","T1555.003","T1559.002","T1561.002","T1566.001"]},{"id":"G0082","name":"APT38","type":"group","techniques":["T1005","T1027.002","T1033","T1036.003","T1036.006","T1049","T1053.003","T1053.005","T1055","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1070.001","T1070.004","T1070.006","T1071.001","T1082","T1083","T1105","T1106","T1110","T1112","T1115","T1135","T1140","T1189","T1204.001","T1204.002","T1217","T1218.001","T1218.005","T1218.007","T1218.011","T1480.002","T1485","T1486","T1505.003","T1518.001","T1529","T1543.003","T1548.002","T1553.005","T1561.002","T1562.001","T1562.003","T1562.004","T1562.013","T1565.001","T1565.002","T1565.003","T1566.001","T1569.002","T1583.001","T1588.002"]},{"id":"G0087","name":"APT39","type":"group","techniques":["T1003","T1003.001","T1005","T1012","T1018","T1021.001","T1021.002","T1021.004","T1027.002","T1027.013","T1033","T1036.005","T1041","T1046","T1053.005","T1056","T1056.001","T1059","T1059.001","T1059.005","T1059.006","T1059.010","T1070.004","T1071.001","T1071.004","T1074.001","T1078","T1083","T1090.001","T1090.002","T1102.002","T1105","T1110","T1113","T1115","T1135","T1136.001","T1140","T1190","T1197","T1204.001","T1204.002","T1505.003","T1546.010","T1547.001","T1547.009","T1553.006","T1555","T1560.001","T1566.001","T1566.002","T1569.002","T1588.002"]},{"id":"G0096","name":"APT41","type":"group","techniques":["T1003.001","T1003.002","T1003.003","T1005","T1008","T1012","T1014","T1016","T1018","T1021.001","T1021.002","T1027","T1027.002","T1030","T1033","T1036.004","T1036.005","T1037","T1046","T1047","T1049","T1053.005","T1055","T1056.001","T1059.001","T1059.003","T1059.004","T1069","T1070.001","T1070.003","T1070.004","T1071.001","T1071.002","T1071.004","T1078","T1082","T1083","T1087.001","T1087.002","T1090","T1098.007","T1102.001","T1104","T1105","T1110","T1112","T1133","T1135","T1136.001","T1190","T1195.002","T1197","T1203","T1213.003","T1218.001","T1218.011","T1480.001","T1484.001","T1486","T1496.001","T1542.003","T1543.003","T1546.008","T1547.001","T1550.002","T1553.002","T1555","T1555.003","T1560.001","T1562.006","T1566.001","T1568.002","T1569.002","T1570","T1574.001","T1574.006","T1588.002","T1595.002","T1595.003","T1596.005","T1599","T1656"]},{"id":"G1044","name":"APT42","type":"group","techniques":["T1016","T1036.005","T1047","T1053.005","T1056","T1056.001","T1059.001","T1059.005","T1070","T1070.008","T1071.001","T1082","T1087.001","T1102","T1111","T1112","T1113","T1132.001","T1518.001","T1530","T1539","T1547","T1555.003","T1566.002","T1573.002","T1583.001","T1583.003","T1585.002","T1588.002","T1608.001","T1656"]},{"id":"G1023","name":"APT5","type":"group","techniques":["T1003.001","T1003.002","T1021.001","T1021.004","T1036.005","T1049","T1053.003","T1055","T1056.001","T1057","T1059.001","T1059.003","T1070","T1070.003","T1070.004","T1070.006","T1074.001","T1078.002","T1078.004","T1083","T1098.007","T1136.001","T1190","T1505.003","T1554","T1560.001","T1562.006","T1583.005","T1654"]},{"id":"G1030","name":"Agrius","type":"group","techniques":["T1003.001","T1003.002","T1005","T1018","T1021.001","T1036","T1041","T1046","T1059.003","T1074.001","T1078.002","T1110","T1110.003","T1119","T1140","T1190","T1505.003","T1543.003","T1560.001","T1562.001","T1570","T1583"]},{"id":"G0130","name":"Ajax Security Team","type":"group","techniques":["T1056.001","T1105","T1204.002","T1555.003","T1566.001","T1566.003"]},{"id":"G1024","name":"Akira","type":"group","techniques":["T1018","T1021.001","T1027.001","T1036.005","T1059.001","T1078","T1133","T1213.002","T1219","T1482","T1486","T1531","T1558","T1560.001","T1562.001","T1567.002","T1657"]},{"id":"G0138","name":"Andariel","type":"group","techniques":["T1005","T1027.003","T1049","T1057","T1105","T1189","T1203","T1204.002","T1566.001","T1588.001","T1590.005","T1592.002"]},{"id":"G1007","name":"Aoqin Dragon","type":"group","techniques":["T1027.002","T1036","T1083","T1091","T1203","T1204.002","T1570","T1587.001","T1588.002"]},{"id":"G1049","name":"AppleJeus","type":"group","techniques":["T1566","T1657"]},{"id":"G0143","name":"Aquatic Panda","type":"group","techniques":["T1003.001","T1005","T1007","T1021","T1021.001","T1021.002","T1021.004","T1027.010","T1033","T1036.004","T1036.005","T1047","T1059.001","T1059.003","T1059.004","T1070.001","T1070.003","T1070.004","T1078.002","T1082","T1087","T1105","T1112","T1218.011","T1518.001","T1543.003","T1550.002","T1560.001","T1562.001","T1574.001","T1574.006","T1588.001","T1588.002","T1595.002","T1654"]},{"id":"G0001","name":"Axiom","type":"group","techniques":["T1001.002","T1003","T1005","T1021.001","T1078","T1189","T1190","T1203","T1546.008","T1553","T1560","T1563.002","T1566","T1583.002","T1583.003","T1584.005"]},{"id":"G1002","name":"BITTER","type":"group","techniques":["T1027.013","T1036.004","T1053.005","T1068","T1071.001","T1095","T1105","T1203","T1204.002","T1559.002","T1566.001","T1568","T1573","T1583.001","T1588.002","T1608.001"]},{"id":"G0060","name":"BRONZE BUTLER","type":"group","techniques":["T1003.001","T1005","T1007","T1018","T1027.001","T1027.003","T1036","T1036.002","T1036.005","T1039","T1053.002","T1053.005","T1059.001","T1059.003","T1059.005","T1059.006","T1070.004","T1071.001","T1080","T1083","T1087.002","T1102.001","T1105","T1113","T1124","T1132.001","T1140","T1189","T1203","T1204.002","T1518","T1547.001","T1548.002","T1550.003","T1560.001","T1562.001","T1566.001","T1573.001","T1574.001","T1588.002"]},{"id":"G0135","name":"BackdoorDiplomacy","type":"group","techniques":["T1027","T1036.004","T1036.005","T1046","T1049","T1055.001","T1074.001","T1095","T1105","T1120","T1190","T1505.003","T1574.001","T1588.001","T1588.002"]},{"id":"G1043","name":"BlackByte","type":"group","techniques":["T1003","T1012","T1016","T1018","T1021.001","T1021.002","T1036.008","T1041","T1046","T1047","T1053.005","T1055","T1055.012","T1059.001","T1059.003","T1068","T1070.004","T1071.001","T1078","T1078.002","T1082","T1087.002","T1105","T1112","T1134.003","T1135","T1136.002","T1140","T1190","T1219","T1480","T1482","T1486","T1490","T1491.001","T1505.003","T1518.001","T1543.003","T1547.001","T1560","T1562","T1562.001","T1562.004","T1567","T1569.002","T1570","T1583.003","T1608.001","T1614.001"]},{"id":"G0098","name":"BlackTech","type":"group","techniques":["T1021.004","T1036.002","T1046","T1106","T1190","T1203","T1204.001","T1204.002","T1566.001","T1566.002","T1574.001","T1588.002","T1588.003","T1588.004"]},{"id":"G0108","name":"Blue Mockingbird","type":"group","techniques":["T1003.001","T1021.001","T1021.002","T1027.013","T1036.005","T1047","T1053.005","T1059.001","T1059.003","T1082","T1090","T1112","T1134","T1190","T1218.010","T1218.011","T1496.001","T1543.003","T1546.003","T1569.002","T1574.012","T1588.002"]},{"id":"G1012","name":"CURIUM","type":"group","techniques":["T1005","T1041","T1048.002","T1059.001","T1082","T1124","T1189","T1204.002","T1505.003","T1566.001","T1566.003","T1583.001","T1583.003","T1583.004","T1584.006","T1585.001","T1585.002","T1598.003","T1608.004"]},{"id":"G0008","name":"Carbanak","type":"group","techniques":["T1036.004","T1036.005","T1078","T1102.002","T1218.011","T1219","T1543.003","T1562.004","T1588.002"]},{"id":"G0114","name":"Chimera","type":"group","techniques":["T1003.003","T1007","T1012","T1016","T1018","T1021.001","T1021.002","T1021.006","T1027.010","T1033","T1036.005","T1039","T1041","T1046","T1047","T1049","T1053.005","T1057","T1059.001","T1059.003","T1069.001","T1070.001","T1070.004","T1070.006","T1071.001","T1071.004","T1074.001","T1074.002","T1078","T1078.002","T1083","T1087.001","T1087.002","T1105","T1106","T1110.003","T1110.004","T1111","T1114.001","T1114.002","T1119","T1124","T1133","T1135","T1201","T1213.002","T1217","T1482","T1550.002","T1556.001","T1560.001","T1567.002","T1569.002","T1570","T1572","T1574.001","T1588.002","T1589.001","T1680"]},{"id":"G1021","name":"Cinnamon Tempest","type":"group","techniques":["T1021.002","T1047","T1059.001","T1059.003","T1059.006","T1078","T1078.002","T1080","T1090","T1105","T1140","T1190","T1484.001","T1543.003","T1567.002","T1572","T1574.001","T1588.002","T1657"]},{"id":"G0003","name":"Cleaver","type":"group","techniques":["T1003.001","T1557.002","T1585.001","T1587.001","T1588.002"]},{"id":"G0080","name":"Cobalt Group","type":"group","techniques":["T1021.001","T1027.010","T1037.001","T1046","T1053.005","T1055","T1059.001","T1059.003","T1059.005","T1059.007","T1068","T1070.004","T1071.001","T1071.004","T1105","T1195.002","T1203","T1204.001","T1204.002","T1218.003","T1218.008","T1218.010","T1219","T1220","T1518.001","T1543.003","T1547.001","T1548.002","T1559.002","T1566.001","T1566.002","T1572","T1573.002","T1588.002"]},{"id":"G0142","name":"Confucius","type":"group","techniques":["T1041","T1053.005","T1059.001","T1059.005","T1071.001","T1083","T1105","T1119","T1203","T1204.001","T1204.002","T1218.005","T1221","T1547.001","T1566.001","T1566.002","T1567.002","T1583.006","T1680"]},{"id":"G1052","name":"Contagious Interview","type":"group","techniques":["T1027.010","T1027.013","T1036","T1041","T1048.003","T1059.003","T1059.004","T1059.005","T1059.006","T1059.007","T1070.004","T1071.003","T1082","T1083","T1090","T1204.001","T1204.002","T1204.004","T1204.005","T1219.002","T1480","T1497","T1543.001","T1546.004","T1547.001","T1547.013","T1555.001","T1562.001","T1566.003","T1567","T1567.002","T1571","T1573.001","T1583","T1583.001","T1583.003","T1583.006","T1585","T1585.001","T1585.002","T1587","T1587.001","T1588.002","T1588.007","T1589","T1593","T1593.001","T1593.003","T1608.001","T1656","T1657","T1681"]},{"id":"G0052","name":"CopyKittens","type":"group","techniques":["T1059.001","T1090","T1218.011","T1553.002","T1560.001","T1560.003","T1564.003","T1588.002"]},{"id":"G1034","name":"Daggerfly","type":"group","techniques":["T1003.002","T1012","T1036.003","T1053.005","T1059.001","T1071.001","T1082","T1105","T1136.001","T1189","T1195.002","T1204.001","T1218.011","T1553.002","T1574.001","T1584.004","T1587.002"]},{"id":"G0070","name":"Dark Caracal","type":"group","techniques":["T1005","T1027.002","T1027.013","T1059.003","T1071.001","T1083","T1113","T1189","T1204.002","T1218.001","T1547.001","T1566.003"]},{"id":"G0079","name":"DarkHydrus","type":"group","techniques":["T1059.001","T1187","T1204.002","T1221","T1564.003","T1566.001","T1588.002"]},{"id":"G0105","name":"DarkVishnya","type":"group","techniques":["T1040","T1046","T1059.001","T1110","T1135","T1200","T1219","T1543.003","T1571","T1588.002"]},{"id":"G0012","name":"Darkhotel","type":"group","techniques":["T1016","T1027.013","T1036.005","T1056.001","T1057","T1059.003","T1080","T1082","T1083","T1091","T1105","T1124","T1140","T1189","T1203","T1204.002","T1497","T1497.001","T1497.002","T1518.001","T1547.001","T1553.002","T1566.001","T1573.001"]},{"id":"G0009","name":"Deep Panda","type":"group","techniques":["T1018","T1021.002","T1027.005","T1047","T1057","T1059.001","T1218.010","T1505.003","T1546.008","T1564.003"]},{"id":"G0035","name":"Dragonfly","type":"group","techniques":["T1003.002","T1003.003","T1003.004","T1005","T1012","T1016","T1018","T1021.001","T1033","T1036.010","T1053.005","T1059","T1059.001","T1059.003","T1059.006","T1069.002","T1070.001","T1070.004","T1071.002","T1074.001","T1078","T1083","T1087.002","T1098.007","T1105","T1110","T1110.002","T1112","T1113","T1114.002","T1133","T1135","T1136.001","T1187","T1189","T1190","T1195.002","T1203","T1204.002","T1210","T1221","T1505.003","T1547.001","T1560","T1562.004","T1564.002","T1566.001","T1583.001","T1583.003","T1584.004","T1588.002","T1591.002","T1595.002","T1598.002","T1598.003","T1608.004"]},{"id":"G1011","name":"EXOTIC LILY","type":"group","techniques":["T1102","T1203","T1204.001","T1204.002","T1566.001","T1566.002","T1566.003","T1583.001","T1585.001","T1585.002","T1589.002","T1593.001","T1594","T1597","T1608.001"]},{"id":"G1006","name":"Earth Lusca","type":"group","techniques":["T1003.001","T1003.006","T1007","T1016","T1018","T1027","T1027.003","T1033","T1036.005","T1047","T1049","T1053.005","T1057","T1059.001","T1059.005","T1059.006","T1059.007","T1090","T1098.004","T1112","T1140","T1189","T1190","T1204.001","T1204.002","T1210","T1218.005","T1482","T1543.003","T1547.012","T1548.002","T1560.001","T1566.002","T1567.002","T1574.001","T1583.001","T1583.004","T1583.006","T1584.004","T1584.006","T1588.001","T1588.002","T1595.002","T1608.001"]},{"id":"G0066","name":"Elderwood","type":"group","techniques":["T1027.002","T1027.013","T1105","T1189","T1203","T1204.001","T1204.002","T1566.001","T1566.002"]},{"id":"G1003","name":"Ember Bear","type":"group","techniques":["T1003","T1003.001","T1003.002","T1003.004","T1005","T1018","T1021","T1036","T1036.005","T1046","T1047","T1053.005","T1059.001","T1070.004","T1071.004","T1078.001","T1090.003","T1095","T1110","T1110.003","T1112","T1114","T1119","T1125","T1133","T1190","T1195","T1203","T1210","T1491.002","T1505.003","T1550.002","T1552.001","T1560","T1561.002","T1562.001","T1567.002","T1570","T1571","T1572","T1583","T1583.003","T1585","T1588.001","T1588.005","T1595.001","T1595.002","T1654"]},{"id":"G0020","name":"Equation","type":"group","techniques":["T1120","T1480.001","T1542.002","T1564.005"]},{"id":"G0120","name":"Evilnum","type":"group","techniques":["T1059.007","T1070.004","T1105","T1204.001","T1219.002","T1497.001","T1539","T1548.002","T1555","T1566.002","T1574.001"]},{"id":"G0051","name":"FIN10","type":"group","techniques":["T1021.001","T1033","T1053.005","T1059.001","T1059.003","T1070.004","T1078","T1078.003","T1547.001","T1570","T1588.002"]},{"id":"G1016","name":"FIN13","type":"group","techniques":["T1003.001","T1003.002","T1003.003","T1005","T1016","T1016.001","T1021.001","T1021.002","T1021.004","T1021.006","T1036","T1036.004","T1036.005","T1046","T1047","T1049","T1053.005","T1056.001","T1059.001","T1059.003","T1059.005","T1069","T1071.001","T1074.001","T1078.001","T1082","T1083","T1087","T1087.002","T1090.001","T1098.007","T1105","T1133","T1134.003","T1135","T1136.001","T1140","T1190","T1505.003","T1547.001","T1550.002","T1552.001","T1556","T1560.001","T1564.001","T1565","T1572","T1574.001","T1587.001","T1588.002","T1589","T1590.004","T1657"]},{"id":"G0085","name":"FIN4","type":"group","techniques":["T1056.001","T1056.002","T1059.005","T1071.001","T1078","T1090.003","T1114.002","T1204.001","T1204.002","T1564.008","T1566.001","T1566.002"]},{"id":"G0053","name":"FIN5","type":"group","techniques":["T1018","T1059","T1070.001","T1070.004","T1074.001","T1078","T1090.002","T1110","T1119","T1133","T1588.002"]},{"id":"G0037","name":"FIN6","type":"group","techniques":["T1003.001","T1003.003","T1005","T1018","T1021.001","T1027.010","T1036.004","T1046","T1047","T1048.003","T1053.005","T1059","T1059.001","T1059.003","T1059.007","T1068","T1070.004","T1074.002","T1078","T1087.002","T1095","T1102","T1110.002","T1119","T1134","T1204.002","T1213.006","T1547.001","T1553.002","T1555","T1555.003","T1560","T1560.003","T1562.001","T1566.001","T1566.003","T1569.002","T1572","T1573.002","T1588.002"]},{"id":"G0046","name":"FIN7","type":"group","techniques":["T1005","T1008","T1021.001","T1021.004","T1021.005","T1027.010","T1027.016","T1033","T1036.004","T1036.005","T1047","T1053.005","T1057","T1059","T1059.001","T1059.003","T1059.005","T1059.007","T1069.002","T1071.004","T1078","T1078.003","T1082","T1087.002","T1091","T1102.002","T1105","T1113","T1124","T1125","T1140","T1190","T1195.002","T1204.001","T1204.002","T1210","T1218.005","T1218.011","T1219","T1486","T1497.002","T1543.003","T1546.011","T1547.001","T1553.002","T1558.003","T1559.002","T1562.004","T1564.001","T1564.003","T1566.001","T1566.002","T1567.002","T1569.002","T1571","T1572","T1583.001","T1583.006","T1587.001","T1588.002","T1591","T1591.004","T1608.001","T1608.004","T1608.005","T1620","T1674"]},{"id":"G0061","name":"FIN8","type":"group","techniques":["T1003.001","T1016.001","T1018","T1021.001","T1021.002","T1027.010","T1033","T1047","T1048.003","T1053.005","T1055.004","T1059.001","T1059.003","T1068","T1070.001","T1070.004","T1071.001","T1074.002","T1078","T1082","T1102","T1105","T1112","T1134.001","T1204.001","T1204.002","T1482","T1486","T1518.001","T1546.003","T1560.001","T1566.001","T1566.002","T1573.002","T1588.002","T1588.003"]},{"id":"G0137","name":"Ferocious Kitten","type":"group","techniques":["T1036.002","T1036.005","T1204.002","T1566.001","T1583.001","T1588.002"]},{"id":"G0117","name":"Fox Kitten","type":"group","techniques":["T1003.001","T1003.003","T1005","T1012","T1018","T1021.001","T1021.002","T1021.004","T1021.005","T1027.010","T1027.013","T1036.004","T1036.005","T1039","T1046","T1053.005","T1059","T1059.001","T1059.003","T1078","T1083","T1087.001","T1087.002","T1090","T1102","T1105","T1110","T1136.001","T1190","T1210","T1213.005","T1217","T1505.003","T1530","T1546.008","T1552.001","T1555.005","T1560.001","T1572","T1585","T1585.001"]},{"id":"G0093","name":"GALLIUM","type":"group","techniques":["T1003.001","T1003.002","T1005","T1016","T1018","T1027","T1027.002","T1027.005","T1033","T1036.003","T1041","T1047","T1049","T1053.005","T1059.001","T1059.003","T1074.001","T1078","T1090.002","T1105","T1133","T1136.002","T1190","T1505.003","T1550.002","T1553.002","T1560.001","T1570","T1574.001","T1583.004","T1588.002"]},{"id":"G0036","name":"GCMAN","type":"group","techniques":["T1021.004","T1021.005"]},{"id":"G0115","name":"GOLD SOUTHFIELD","type":"group","techniques":["T1027.010","T1059.001","T1113","T1133","T1190","T1195.002","T1199","T1219","T1566"]},{"id":"G0084","name":"Gallmaker","type":"group","techniques":["T1027","T1059.001","T1204.002","T1559.002","T1560.001","T1566.001"]},{"id":"G0047","name":"Gamaredon Group","type":"group","techniques":["T1001","T1005","T1012","T1016.001","T1020","T1021.005","T1025","T1027","T1027.004","T1027.010","T1027.012","T1027.015","T1027.016","T1033","T1036.005","T1039","T1041","T1047","T1053.005","T1055","T1057","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1080","T1082","T1083","T1090","T1090.003","T1091","T1095","T1102","T1102.002","T1102.003","T1105","T1106","T1112","T1113","T1119","T1120","T1137","T1140","T1204.001","T1204.002","T1218.005","T1218.011","T1221","T1480","T1491.001","T1497.001","T1518.001","T1534","T1547.001","T1559.001","T1561.001","T1562.001","T1564.003","T1566.001","T1568","T1568.001","T1571","T1583.001","T1583.003","T1583.006","T1587.003","T1588.002","T1608.001","T1620"]},{"id":"G0078","name":"Gorgon Group","type":"group","techniques":["T1055.002","T1055.012","T1059.001","T1059.003","T1059.005","T1105","T1106","T1112","T1140","T1204.002","T1547.001","T1547.009","T1562.001","T1564.003","T1566.001","T1588.002"]},{"id":"G0043","name":"Group5","type":"group","techniques":["T1027.013","T1056.001","T1070.004","T1113"]},{"id":"G0125","name":"HAFNIUM","type":"group","techniques":["T1003.001","T1003.003","T1005","T1016","T1016.001","T1018","T1033","T1057","T1059.001","T1059.003","T1068","T1070.001","T1071.001","T1078.003","T1078.004","T1083","T1095","T1098","T1105","T1110.003","T1114.002","T1119","T1132.001","T1136.002","T1190","T1199","T1213.002","T1218.011","T1505.003","T1530","T1550.001","T1555.006","T1560.001","T1564.001","T1567.002","T1583.003","T1583.005","T1583.006","T1584.005","T1589.002","T1590","T1590.005","T1592.004","T1593.003"]},{"id":"G1001","name":"HEXANE","type":"group","techniques":["T1010","T1016","T1016.001","T1018","T1021.001","T1027.010","T1033","T1049","T1053.005","T1056.001","T1057","T1059.001","T1059.005","T1069.001","T1082","T1102.002","T1105","T1110","T1110.003","T1204.002","T1518","T1534","T1546.003","T1555","T1555.003","T1567.002","T1583.001","T1583.002","T1585.001","T1585.002","T1586.002","T1588.002","T1589","T1589.002","T1591.004","T1608.001"]},{"id":"G0126","name":"Higaisa","type":"group","techniques":["T1001.003","T1016","T1027.001","T1027.013","T1027.015","T1029","T1036.004","T1041","T1053.005","T1057","T1059.003","T1059.005","T1059.007","T1071.001","T1082","T1090.001","T1106","T1124","T1140","T1203","T1204.002","T1220","T1547.001","T1564.003","T1566.001","T1573.001","T1574.001","T1680"]},{"id":"G1032","name":"INC Ransom","type":"group","techniques":["T1021.001","T1036.005","T1046","T1047","T1049","T1059.003","T1069.002","T1070.004","T1071","T1074","T1078","T1087.002","T1105","T1135","T1190","T1219","T1486","T1537","T1560.001","T1562.001","T1566","T1569.002","T1570","T1588.002","T1657"]},{"id":"G0100","name":"Inception","type":"group","techniques":["T1005","T1027.013","T1057","T1059.001","T1059.005","T1069.002","T1071.001","T1082","T1083","T1090.003","T1102","T1203","T1204.002","T1218.005","T1218.010","T1221","T1518","T1547.001","T1555.003","T1566.001","T1573.001","T1588.002"]},{"id":"G0136","name":"IndigoZebra","type":"group","techniques":["T1105","T1204.002","T1566.001","T1583.001","T1583.006","T1586.002","T1588.002"]},{"id":"G0119","name":"Indrik Spider","type":"group","techniques":["T1003.001","T1007","T1012","T1018","T1021.001","T1021.004","T1036.005","T1047","T1059.001","T1059.003","T1059.007","T1070.001","T1074.001","T1078","T1078.002","T1105","T1112","T1136","T1136.001","T1204.002","T1484.001","T1486","T1489","T1552.001","T1555.005","T1558.003","T1562.001","T1567.002","T1583","T1584.004","T1585.002","T1587.001","T1590"]},{"id":"G0004","name":"Ke3chang","type":"group","techniques":["T1003.001","T1003.002","T1003.003","T1003.004","T1005","T1007","T1016","T1018","T1020","T1021.002","T1027","T1033","T1036.002","T1036.005","T1041","T1049","T1056.001","T1057","T1059","T1059.003","T1069.002","T1071.001","T1071.004","T1078","T1078.004","T1082","T1083","T1087.001","T1087.002","T1105","T1114.002","T1119","T1133","T1140","T1190","T1213.002","T1543.003","T1547.001","T1558.001","T1560","T1560.001","T1569.002","T1583.005","T1587.001","T1588.002","T1614.001"]},{"id":"G0094","name":"Kimsuky","type":"group","techniques":["T1003.001","T1005","T1007","T1012","T1016","T1021.001","T1027","T1027.001","T1027.002","T1027.010","T1027.012","T1027.016","T1036.004","T1036.005","T1036.007","T1040","T1041","T1053.005","T1055","T1055.012","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1059.006","T1059.007","T1070.004","T1070.006","T1071.001","T1071.002","T1071.003","T1074.001","T1078.003","T1082","T1083","T1098.007","T1102.001","T1102.002","T1105","T1111","T1112","T1113","T1114.002","T1114.003","T1133","T1136.001","T1140","T1176.001","T1185","T1190","T1204.001","T1204.002","T1205","T1218.005","T1218.010","T1218.011","T1219.002","T1505.003","T1518.001","T1534","T1539","T1543.003","T1546.001","T1547.001","T1550.002","T1552.001","T1553.002","T1555.003","T1557","T1560.001","T1560.003","T1562.001","T1562.004","T1564.002","T1564.003","T1566","T1566.001","T1566.002","T1567.002","T1583","T1583.001","T1583.004","T1583.006","T1584.001","T1585","T1585.001","T1585.002","T1586.002","T1587","T1587.001","T1588.002","T1588.003","T1588.005","T1589.002","T1589.003","T1591","T1593","T1593.001","T1593.002","T1594","T1596","T1598","T1598.003","T1608.001","T1620","T1656","T1657","T1680"]},{"id":"G1004","name":"LAPSUS$","type":"group","techniques":["T1003.003","T1003.006","T1005","T1068","T1069.002","T1078","T1078.004","T1087.002","T1090","T1098.003","T1111","T1114.003","T1133","T1136.003","T1199","T1204","T1213.001","T1213.002","T1213.003","T1213.005","T1485","T1489","T1531","T1552.008","T1555.003","T1555.005","T1578.002","T1578.003","T1583.003","T1584.002","T1586.002","T1588.001","T1588.002","T1589","T1589.001","T1589.002","T1591.002","T1591.004","T1593.003","T1597.002","T1598.004","T1621","T1656"]},{"id":"G0032","name":"Lazarus Group","type":"group","techniques":["T1001.003","T1005","T1008","T1010","T1012","T1016","T1021.001","T1021.002","T1021.004","T1027.007","T1027.009","T1027.013","T1033","T1036.003","T1036.004","T1036.005","T1041","T1046","T1047","T1048.003","T1049","T1053.005","T1055.001","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1070","T1070.003","T1070.004","T1070.006","T1071.001","T1074.001","T1078","T1082","T1083","T1090.001","T1090.002","T1098","T1102.002","T1104","T1105","T1106","T1110.003","T1124","T1132.001","T1134.002","T1140","T1189","T1202","T1203","T1204.002","T1218","T1218.005","T1218.011","T1485","T1489","T1491.001","T1529","T1542.003","T1543.003","T1547.001","T1547.009","T1553.002","T1557.001","T1560","T1560.002","T1560.003","T1561.001","T1561.002","T1562.001","T1562.004","T1564.001","T1566.001","T1566.002","T1566.003","T1571","T1573.001","T1574.001","T1574.013","T1583.001","T1583.006","T1584.004","T1585.001","T1585.002","T1587.001","T1588.002","T1588.004","T1589.002","T1591","T1620","T1680"]},{"id":"G0140","name":"LazyScripter","type":"group","techniques":["T1027.010","T1036","T1059.001","T1059.003","T1059.005","T1059.007","T1071.004","T1102","T1105","T1204.001","T1204.002","T1218.005","T1218.011","T1547.001","T1566.001","T1566.002","T1583.001","T1583.006","T1588.001","T1608.001"]},{"id":"G0077","name":"Leafminer","type":"group","techniques":["T1003.001","T1003.004","T1003.005","T1018","T1027.010","T1046","T1055.013","T1059.007","T1083","T1110.003","T1114.002","T1136.001","T1189","T1552.001","T1555","T1555.003","T1588.002"]},{"id":"G0065","name":"Leviathan","type":"group","techniques":["T1003","T1003.001","T1021.001","T1021.004","T1027.001","T1027.003","T1027.013","T1027.015","T1041","T1047","T1055.001","T1059.001","T1059.005","T1074.001","T1074.002","T1078","T1090.003","T1102.003","T1105","T1133","T1140","T1189","T1190","T1197","T1203","T1204.001","T1204.002","T1218.010","T1505.003","T1534","T1546.003","T1547.001","T1547.009","T1553.002","T1559.002","T1560","T1566.001","T1566.002","T1567.002","T1572","T1583.001","T1584.004","T1584.008","T1585.001","T1585.002","T1586.001","T1586.002","T1587.004","T1589.001","T1595.002"]},{"id":"G0030","name":"Lotus Blossom","type":"group","techniques":["T1012","T1016","T1016.001","T1018","T1046","T1047","T1049","T1074.001","T1083","T1087.001","T1087.002","T1090.001","T1090.003","T1112","T1134","T1482","T1539","T1543.003","T1560.001","T1560.003","T1588.002"]},{"id":"G1014","name":"LuminousMoth","type":"group","techniques":["T1005","T1030","T1033","T1036.005","T1041","T1053.005","T1071.001","T1083","T1091","T1105","T1112","T1204.001","T1539","T1547.001","T1553.002","T1557.002","T1560","T1564.001","T1566.002","T1567.002","T1574.001","T1587.001","T1588.001","T1588.002","T1588.004","T1608.001","T1608.004","T1608.005"]},{"id":"G0095","name":"Machete","type":"group","techniques":["T1036.005","T1053.005","T1059.003","T1059.005","T1059.006","T1189","T1204.001","T1204.002","T1218.007","T1566.001","T1566.002"]},{"id":"G0059","name":"Magic Hound","type":"group","techniques":["T1003.001","T1005","T1016","T1016.001","T1016.002","T1018","T1021.001","T1027.010","T1027.013","T1033","T1036.004","T1036.005","T1036.010","T1046","T1047","T1049","T1053.005","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1070.003","T1070.004","T1071","T1071.001","T1078.001","T1078.002","T1082","T1083","T1087.003","T1090","T1098.002","T1098.007","T1102.002","T1105","T1112","T1113","T1114","T1114.001","T1114.002","T1136.001","T1189","T1190","T1204.001","T1204.002","T1218.011","T1482","T1486","T1505.003","T1547.001","T1560.001","T1562","T1562.001","T1562.002","T1562.004","T1564.003","T1566.002","T1566.003","T1567","T1570","T1571","T1572","T1573","T1583.001","T1583.006","T1584.001","T1585.001","T1585.002","T1586.002","T1588.002","T1589","T1589.001","T1589.002","T1590.005","T1591.001","T1592.002","T1595.002","T1598.003"]},{"id":"G1026","name":"Malteiro","type":"group","techniques":["T1027.013","T1055.001","T1059.005","T1082","T1140","T1204.002","T1518.001","T1555","T1555.003","T1566.001","T1614.001","T1657"]},{"id":"G1051","name":"Medusa Group","type":"group","techniques":["T1003.001","T1003.003","T1016","T1018","T1021.001","T1027.002","T1027.010","T1033","T1046","T1047","T1057","T1059.001","T1059.003","T1069.002","T1070.003","T1070.004","T1071.001","T1072","T1078","T1082","T1083","T1087.001","T1090.003","T1105","T1106","T1112","T1135","T1136.002","T1190","T1218.014","T1219","T1486","T1489","T1490","T1505.003","T1518.001","T1529","T1543.003","T1548.002","T1553.002","T1559.001","T1562.001","T1562.003","T1562.004","T1564.003","T1567.002","T1569.002","T1570","T1573.002","T1583.006","T1585.001","T1585.002","T1588.002","T1608.002","T1650","T1652","T1657"]},{"id":"G1013","name":"Metador","type":"group","techniques":["T1027.013","T1059.003","T1070.004","T1071.001","T1095","T1105","T1546.003","T1588.001","T1588.002"]},{"id":"G0103","name":"Mofang","type":"group","techniques":["T1027.013","T1027.015","T1204.001","T1204.002","T1566.001","T1566.002"]},{"id":"G0021","name":"Molerats","type":"group","techniques":["T1027.015","T1053.005","T1057","T1059.001","T1059.005","T1059.007","T1105","T1140","T1204.001","T1204.002","T1218.007","T1547.001","T1553.002","T1555.003","T1566.001","T1566.002"]},{"id":"G1036","name":"Moonstone Sleet","type":"group","techniques":["T1003.001","T1016","T1027","T1027.009","T1027.013","T1033","T1053.005","T1071.001","T1082","T1105","T1140","T1195.002","T1204.002","T1217","T1486","T1547.001","T1566.001","T1566.003","T1569.002","T1583.001","T1583.003","T1585.001","T1585.002","T1587","T1587.001","T1589.002","T1591","T1598","T1598.003","T1608.001"]},{"id":"G1009","name":"Moses Staff","type":"group","techniques":["T1016","T1021.002","T1027.013","T1082","T1087.001","T1105","T1190","T1505.003","T1553.002","T1562.004","T1587.001","T1588.002"]},{"id":"G1019","name":"MoustachedBouncer","type":"group","techniques":["T1027.002","T1059.001","T1059.007","T1068","T1074.002","T1090","T1113","T1659"]},{"id":"G0069","name":"MuddyWater","type":"group","techniques":["T1003.001","T1003.004","T1003.005","T1016","T1027.003","T1027.004","T1027.010","T1033","T1036.005","T1041","T1047","T1049","T1053.005","T1057","T1059.001","T1059.003","T1059.005","T1059.006","T1059.007","T1071.001","T1074.001","T1082","T1083","T1087.002","T1090.002","T1102.002","T1104","T1105","T1113","T1132.001","T1137.001","T1140","T1190","T1203","T1204.001","T1204.002","T1210","T1218.003","T1218.005","T1218.011","T1219","T1518","T1518.001","T1547.001","T1548.002","T1552.001","T1555","T1555.003","T1559.001","T1559.002","T1560.001","T1562.001","T1566.001","T1566.002","T1573.001","T1574.001","T1583.006","T1588.002"]},{"id":"G0129","name":"Mustang Panda","type":"group","techniques":["T1001.003","T1003","T1003.001","T1003.003","T1003.006","T1016","T1018","T1027","T1027.007","T1027.012","T1027.016","T1036.005","T1036.007","T1036.008","T1041","T1046","T1047","T1048.003","T1049","T1052.001","T1053.005","T1057","T1059","T1059.001","T1059.003","T1059.005","T1059.007","T1069.002","T1070","T1070.004","T1070.006","T1071.001","T1072","T1074.001","T1082","T1083","T1087.002","T1091","T1095","T1102","T1105","T1106","T1119","T1129","T1140","T1176.002","T1203","T1204.001","T1204.002","T1205","T1218.004","T1218.005","T1219.001","T1219.002","T1505.003","T1518","T1546.003","T1547.001","T1553.002","T1557","T1560.001","T1560.003","T1564.001","T1566.001","T1566.002","T1567.002","T1572","T1573.001","T1574.001","T1574.005","T1583.001","T1583.006","T1585.002","T1586.002","T1587.001","T1588.002","T1588.003","T1588.004","T1593","T1598.003","T1608","T1608.001","T1622","T1654","T1678"]},{"id":"G1020","name":"Mustard Tempest","type":"group","techniques":["T1036.005","T1082","T1105","T1189","T1204.001","T1566.002","T1583.004","T1583.008","T1584.001","T1608.001","T1608.004","T1608.006"]},{"id":"G0019","name":"Naikon","type":"group","techniques":["T1016","T1018","T1036.004","T1036.005","T1046","T1047","T1053.005","T1078.002","T1137.006","T1204.002","T1518.001","T1547.001","T1566.001","T1574.001"]},{"id":"G0133","name":"Nomadic Octopus","type":"group","techniques":["T1036","T1059.001","T1059.003","T1105","T1204.002","T1564.003","T1566.001"]},{"id":"G0049","name":"OilRig","type":"group","techniques":["T1003.001","T1003.004","T1003.005","T1005","T1007","T1008","T1012","T1016","T1021.001","T1021.004","T1025","T1027.005","T1027.013","T1033","T1036","T1036.005","T1046","T1047","T1048.003","T1049","T1053.005","T1056.001","T1057","T1059","T1059.001","T1059.003","T1059.005","T1068","T1069.001","T1069.002","T1070.004","T1071.001","T1071.004","T1078","T1078.002","T1082","T1087.001","T1087.002","T1105","T1110","T1112","T1113","T1115","T1119","T1120","T1133","T1137.004","T1140","T1195","T1201","T1203","T1204.001","T1204.002","T1218.001","T1219","T1497.001","T1505.003","T1543.003","T1552.001","T1553.002","T1555","T1555.003","T1555.004","T1556.002","T1562.004","T1566.001","T1566.002","T1566.003","T1572","T1573.002","T1583.001","T1586.002","T1587.001","T1588.002","T1588.003","T1608.001"]},{"id":"G0071","name":"Orangeworm","type":"group","techniques":["T1021.002","T1071.001"]},{"id":"G0068","name":"PLATINUM","type":"group","techniques":["T1003.001","T1036","T1055","T1056.001","T1056.004","T1068","T1095","T1105","T1189","T1204.002","T1566.001"]},{"id":"G1005","name":"POLONIUM","type":"group","techniques":["T1078","T1090","T1102.002","T1199","T1567.002","T1583.006","T1588.002"]},{"id":"G0056","name":"PROMETHIUM","type":"group","techniques":["T1036.004","T1036.005","T1078.003","T1189","T1204.002","T1205.001","T1543.003","T1547.001","T1553.002","T1587.002","T1587.003"]},{"id":"G0040","name":"Patchwork","type":"group","techniques":["T1005","T1021.001","T1027.001","T1027.002","T1027.005","T1027.010","T1033","T1036.005","T1053.005","T1055.012","T1059.001","T1059.003","T1059.005","T1070.004","T1074.001","T1082","T1083","T1102.001","T1105","T1112","T1119","T1132.001","T1189","T1197","T1203","T1204.001","T1204.002","T1518.001","T1547.001","T1548.002","T1553.002","T1555.003","T1559.002","T1560","T1566.001","T1566.002","T1574.001","T1587.002","T1588.002","T1598.003","T1680"]},{"id":"G0011","name":"PittyTiger","type":"group","techniques":["T1078","T1588.002"]},{"id":"G1040","name":"Play","type":"group","techniques":["T1003.001","T1016","T1018","T1021.002","T1027.010","T1030","T1048","T1057","T1059.001","T1059.003","T1070.001","T1070.004","T1078","T1078.002","T1078.003","T1082","T1083","T1105","T1133","T1190","T1518.001","T1560.001","T1562.001","T1587.001","T1588.002","T1657"]},{"id":"G0033","name":"Poseidon Group","type":"group","techniques":["T1003","T1007","T1036.005","T1049","T1057","T1059.001","T1087.001","T1087.002"]},{"id":"G0024","name":"Putter Panda","type":"group","techniques":["T1027.013","T1055.001","T1547.001","T1562.001"]},{"id":"G0048","name":"RTM","type":"group","techniques":["T1102.001","T1189","T1204.002","T1219.002","T1547.001","T1566.001","T1574.001"]},{"id":"G0075","name":"Rancor","type":"group","techniques":["T1053.005","T1059.003","T1059.005","T1071.001","T1105","T1204.002","T1218.007","T1546.003","T1566.001"]},{"id":"G1039","name":"RedCurl","type":"group","techniques":["T1003.001","T1005","T1020","T1027","T1036.005","T1039","T1046","T1053.005","T1056.002","T1059.001","T1059.003","T1059.005","T1059.006","T1070.004","T1071.001","T1080","T1082","T1083","T1087.001","T1087.002","T1087.003","T1102","T1114.001","T1119","T1199","T1202","T1204.001","T1204.002","T1218.011","T1537","T1547.001","T1552.001","T1552.002","T1555.003","T1560.001","T1564.001","T1566.001","T1566.002","T1573.001","T1573.002","T1587.001"]},{"id":"G1042","name":"RedEcho","type":"group","techniques":["T1071.001","T1568","T1571","T1573.002","T1583.001"]},{"id":"G0106","name":"Rocke","type":"group","techniques":["T1014","T1018","T1021.004","T1027","T1027.002","T1027.004","T1036.005","T1037","T1046","T1053.003","T1055.002","T1057","T1059.004","T1059.006","T1070.002","T1070.004","T1070.006","T1071","T1071.001","T1082","T1102","T1102.001","T1105","T1140","T1190","T1222.002","T1496.001","T1518.001","T1543.002","T1547.001","T1552.004","T1562.001","T1562.004","T1564.001","T1571","T1574.006"]},{"id":"G1031","name":"Saint Bear","type":"group","techniques":["T1027.002","T1027.013","T1059","T1059.001","T1059.003","T1059.007","T1112","T1203","T1204.001","T1204.002","T1497","T1553.002","T1562.001","T1566.001","T1583.006","T1589.002","T1608.001","T1656"]},{"id":"G1045","name":"Salt Typhoon","type":"group","techniques":["T1021.004","T1040","T1048.003","T1070.002","T1098.004","T1110.002","T1136","T1190","T1562.004","T1572","T1587.001","T1588.002","T1590.004","T1602.002"]},{"id":"G0034","name":"Sandworm Team","type":"group","techniques":["T1003.001","T1003.003","T1005","T1018","T1021.002","T1027","T1027.010","T1033","T1036","T1036.005","T1040","T1041","T1047","T1049","T1053.005","T1056.001","T1059.001","T1059.005","T1070.004","T1071.001","T1072","T1078","T1078.002","T1082","T1083","T1087.002","T1087.003","T1090","T1102.002","T1105","T1106","T1132.001","T1133","T1140","T1190","T1195","T1195.002","T1199","T1203","T1204.001","T1204.002","T1213.006","T1218.011","T1219","T1485","T1486","T1489","T1490","T1491.002","T1499","T1505.003","T1539","T1555.003","T1561.002","T1566.001","T1566.002","T1570","T1571","T1583","T1583.001","T1583.004","T1584.004","T1584.005","T1585.001","T1585.002","T1586.001","T1587.001","T1588.002","T1588.006","T1589.002","T1589.003","T1590.001","T1591.002","T1592.002","T1593","T1594","T1595.002","T1598.003","T1608.001"]},{"id":"G1015","name":"Scattered Spider","type":"group","techniques":["T1003.003","T1006","T1016","T1018","T1021.001","T1021.004","T1021.007","T1041","T1059.001","T1059.004","T1068","T1069","T1069.002","T1070.008","T1074","T1078","T1078.004","T1082","T1083","T1087","T1087.002","T1090","T1098","T1098.003","T1105","T1114","T1114.003","T1133","T1136","T1204","T1213.003","T1213.005","T1217","T1219.002","T1484.002","T1486","T1490","T1530","T1538","T1539","T1543.002","T1552.001","T1552.004","T1553.002","T1555.005","T1556.006","T1556.009","T1562.001","T1564.008","T1567.002","T1572","T1578.002","T1580","T1583.001","T1585.001","T1588.001","T1588.002","T1589","T1598","T1598.003","T1598.004","T1621","T1656","T1657"]},{"id":"G1041","name":"Sea Turtle","type":"group","techniques":["T1027.004","T1059.004","T1070.002","T1071.001","T1074.002","T1078","T1078.003","T1114.001","T1133","T1190","T1199","T1203","T1213.006","T1505.003","T1557","T1560.001","T1562.003","T1564.011","T1566","T1583","T1583.001","T1583.002","T1583.003","T1584.002","T1588.002","T1588.004","T1608.003"]},{"id":"G1008","name":"SideCopy","type":"group","techniques":["T1016","T1036.005","T1059.005","T1082","T1105","T1106","T1204.002","T1218.005","T1518","T1518.001","T1566.001","T1574.001","T1584.001","T1598.002","T1608.001","T1614"]},{"id":"G0121","name":"Sidewinder","type":"group","techniques":["T1016","T1020","T1027.010","T1027.013","T1033","T1036.005","T1057","T1059.001","T1059.005","T1059.007","T1071.001","T1074.001","T1082","T1083","T1105","T1119","T1124","T1203","T1204.001","T1204.002","T1218.005","T1518","T1518.001","T1547.001","T1559.002","T1566.001","T1566.002","T1574.001","T1598.002","T1598.003"]},{"id":"G0091","name":"Silence","type":"group","techniques":["T1003.001","T1018","T1021.001","T1027.010","T1036.005","T1053.005","T1055","T1059.001","T1059.003","T1059.005","T1059.007","T1070.004","T1072","T1078","T1090.002","T1105","T1106","T1112","T1113","T1125","T1204.002","T1218.001","T1547.001","T1553.002","T1566.001","T1569.002","T1571","T1588.002"]},{"id":"G0122","name":"Silent Librarian","type":"group","techniques":["T1078","T1110.003","T1114","T1114.003","T1583.001","T1585.002","T1588.002","T1588.004","T1589.002","T1589.003","T1594","T1598.003","T1608.005"]},{"id":"G0083","name":"SilverTerrier","type":"group","techniques":["T1071.001","T1071.002","T1071.003","T1657"]},{"id":"G0054","name":"Sowbug","type":"group","techniques":["T1003","T1036.005","T1039","T1056.001","T1059.003","T1082","T1083","T1135","T1560.001"]},{"id":"G1033","name":"Star Blizzard","type":"group","techniques":["T1059.007","T1078","T1114.002","T1114.003","T1204.002","T1539","T1550.004","T1566.001","T1583","T1583.001","T1585.001","T1585.002","T1586.002","T1588.002","T1589","T1593","T1598.002","T1598.003","T1608.001"]},{"id":"G0038","name":"Stealth Falcon","type":"group","techniques":["T1005","T1012","T1016","T1033","T1041","T1047","T1053.005","T1057","T1059","T1059.001","T1071.001","T1082","T1555","T1555.003","T1555.004","T1573.001"]},{"id":"G1053","name":"Storm-0501","type":"group","techniques":["T1003","T1003.006","T1021.006","T1021.007","T1027.002","T1036.004","T1053.005","T1057","T1059.001","T1059.009","T1078.004","T1082","T1087.002","T1087.004","T1098.001","T1098.003","T1110","T1190","T1218.010","T1218.011","T1219.002","T1482","T1484.001","T1484.002","T1485","T1486","T1490","T1518.001","T1526","T1530","T1537","T1552.004","T1555.005","T1555.006","T1556.009","T1567.002","T1578.003","T1580","T1587.003","T1588.006","T1614.001","T1657"]},{"id":"G1046","name":"Storm-1811","type":"group","techniques":["T1021.002","T1021.004","T1027.013","T1033","T1036","T1036.005","T1036.010","T1048.002","T1056","T1059.001","T1059.003","T1074.001","T1087.002","T1105","T1140","T1204.002","T1219.002","T1222.001","T1482","T1486","T1547.001","T1566.002","T1566.003","T1566.004","T1570","T1574.001","T1583.001","T1585.003","T1588.002","T1656","T1667"]},{"id":"G0041","name":"Strider","type":"group","techniques":["T1090.001","T1556.002","T1564.005"]},{"id":"G0039","name":"Suckfly","type":"group","techniques":["T1003","T1046","T1059.003","T1078","T1553.002"]},{"id":"G1018","name":"TA2541","type":"group","techniques":["T1016.001","T1027.002","T1027.013","T1027.015","T1036.005","T1047","T1053.005","T1055","T1055.012","T1059.001","T1059.005","T1082","T1105","T1204.001","T1204.002","T1218.005","T1518.001","T1547.001","T1562.001","T1566.001","T1566.002","T1568","T1573.002","T1583.001","T1583.006","T1588.001","T1588.002","T1608.001"]},{"id":"G0062","name":"TA459","type":"group","techniques":["T1059.001","T1059.005","T1203","T1204.002","T1566.001"]},{"id":"G0092","name":"TA505","type":"group","techniques":["T1027.002","T1027.010","T1027.013","T1055.001","T1059.001","T1059.003","T1059.005","T1059.007","T1069","T1071.001","T1078.002","T1087.003","T1105","T1106","T1112","T1140","T1204.001","T1204.002","T1218.007","T1218.011","T1486","T1552.001","T1553.002","T1553.005","T1555.003","T1559.002","T1562.001","T1566.001","T1566.002","T1568.001","T1583.001","T1588.001","T1588.002","T1608.001"]},{"id":"G0127","name":"TA551","type":"group","techniques":["T1027.003","T1027.010","T1036","T1059.003","T1071.001","T1105","T1132.001","T1204.002","T1218.005","T1218.010","T1218.011","T1566.001","T1568.002","T1589.002"]},{"id":"G1037","name":"TA577","type":"group","techniques":["T1027.009","T1059.003","T1059.007","T1204.001","T1566.002","T1586.002"]},{"id":"G1038","name":"TA578","type":"group","techniques":["T1059.007","T1204.001","T1583.006","T1594"]},{"id":"G0139","name":"TeamTNT","type":"group","techniques":["T1007","T1014","T1016","T1021.004","T1027.002","T1027.013","T1036","T1036.005","T1046","T1048","T1049","T1057","T1059.001","T1059.003","T1059.004","T1059.009","T1059.013","T1070.002","T1070.003","T1070.004","T1071","T1071.001","T1074.001","T1082","T1083","T1098.004","T1102","T1105","T1120","T1133","T1136.001","T1140","T1204.003","T1219","T1222.002","T1496.001","T1518.001","T1543.002","T1543.003","T1547.001","T1552.001","T1552.004","T1552.005","T1562.001","T1562.004","T1569.003","T1583.001","T1587.001","T1595.001","T1595.002","T1608.001","T1609","T1610","T1611","T1613","T1680"]},{"id":"G0089","name":"The White Company","type":"group","techniques":["T1027.002","T1070.004","T1124","T1203","T1204.002","T1518.001","T1566.001"]},{"id":"G0028","name":"Threat Group-1314","type":"group","techniques":["T1021.002","T1059.003","T1072","T1078.002"]},{"id":"G0027","name":"Threat Group-3390","type":"group","techniques":["T1003.001","T1003.002","T1003.004","T1005","T1012","T1016","T1018","T1021.006","T1027.002","T1027.013","T1027.015","T1030","T1033","T1046","T1047","T1049","T1053.002","T1055.012","T1056.001","T1059.001","T1059.003","T1068","T1070.004","T1070.005","T1071.001","T1074.001","T1074.002","T1078","T1087.001","T1105","T1112","T1119","T1133","T1140","T1189","T1190","T1195.002","T1199","T1203","T1204.002","T1210","T1505.003","T1543.003","T1547.001","T1548.002","T1555.005","T1560.002","T1562.002","T1566.001","T1567.002","T1574.001","T1583.001","T1588.002","T1588.003","T1608.001","T1608.002","T1608.004"]},{"id":"G0076","name":"Thrip","type":"group","techniques":["T1048.003","T1059.001","T1219.002","T1588.002"]},{"id":"G1022","name":"ToddyCat","type":"group","techniques":["T1005","T1018","T1021.002","T1036.005","T1047","T1049","T1053.005","T1057","T1059.001","T1059.003","T1069.002","T1074.002","T1078.002","T1083","T1087.002","T1095","T1106","T1190","T1518.001","T1560.001","T1562.004","T1564.003","T1566.003","T1567.002","T1680"]},{"id":"G0131","name":"Tonto Team","type":"group","techniques":["T1003","T1056.001","T1059.001","T1059.006","T1068","T1069.001","T1090.002","T1105","T1135","T1203","T1204.002","T1210","T1505.003","T1566.001","T1574.001"]},{"id":"G0134","name":"Transparent Tribe","type":"group","techniques":["T1027.013","T1036.005","T1059.005","T1189","T1203","T1204.001","T1204.002","T1564.001","T1566.001","T1566.002","T1568","T1583.001","T1584.001","T1608.004"]},{"id":"G0081","name":"Tropic Trooper","type":"group","techniques":["T1016","T1020","T1027.003","T1027.013","T1033","T1036.005","T1046","T1049","T1052.001","T1055.001","T1057","T1059.003","T1070.004","T1071.001","T1071.004","T1078.003","T1082","T1083","T1091","T1105","T1106","T1119","T1132.001","T1135","T1140","T1203","T1204.002","T1221","T1505.003","T1518","T1518.001","T1543.003","T1547.001","T1547.004","T1564.001","T1566.001","T1573","T1573.002","T1574.001","T1680"]},{"id":"G0010","name":"Turla","type":"group","techniques":["T1005","T1007","T1012","T1016","T1016.001","T1018","T1021.002","T1025","T1027.005","T1027.010","T1027.011","T1036.005","T1049","T1055","T1055.001","T1057","T1059.001","T1059.003","T1059.005","T1059.006","T1059.007","T1068","T1069.001","T1069.002","T1071.001","T1071.003","T1078.003","T1082","T1083","T1087.001","T1087.002","T1090","T1090.001","T1102","T1102.002","T1105","T1106","T1110","T1112","T1120","T1124","T1134.002","T1140","T1189","T1201","T1204.001","T1213.006","T1518.001","T1546.003","T1546.013","T1547.001","T1547.004","T1553.006","T1555.004","T1560.001","T1562.001","T1564.012","T1566.002","T1567.002","T1570","T1583.006","T1584.003","T1584.004","T1584.006","T1587.001","T1588.001","T1588.002","T1615"]},{"id":"G1048","name":"UNC3886","type":"group","techniques":["T1003.001","T1008","T1014","T1021.004","T1027.005","T1036.004","T1037","T1037.004","T1040","T1057","T1059.001","T1059.003","T1059.004","T1059.006","T1059.012","T1068","T1070.004","T1070.006","T1070.007","T1074.001","T1078","T1078.001","T1083","T1095","T1124","T1190","T1203","T1205","T1205.001","T1212","T1218.011","T1505.006","T1548","T1554","T1555.005","T1560.001","T1560.003","T1562.001","T1562.003","T1562.004","T1564.011","T1570","T1587.001","T1587.004","T1588.001","T1588.004","T1673","T1675","T1681"]},{"id":"G1047","name":"Velvet Ant","type":"group","techniques":["T1021.002","T1036.005","T1037.004","T1040","T1047","T1049","T1055","T1059.004","T1071","T1078.003","T1083","T1090.001","T1132","T1133","T1211","T1562.001","T1562.004","T1569.002","T1570","T1571","T1573.002","T1574.001"]},{"id":"G0123","name":"Volatile Cedar","type":"group","techniques":["T1105","T1190","T1505.003","T1595.002","T1595.003"]},{"id":"G1017","name":"Volt Typhoon","type":"group","techniques":["T1003.001","T1003.003","T1005","T1006","T1007","T1010","T1012","T1016","T1016.001","T1018","T1021.001","T1027.002","T1033","T1036.005","T1036.008","T1046","T1047","T1049","T1056.001","T1057","T1059.001","T1059.003","T1059.004","T1068","T1069","T1069.001","T1069.002","T1070.001","T1070.004","T1070.007","T1074","T1074.001","T1078","T1078.002","T1083","T1087.001","T1087.002","T1090","T1090.001","T1090.003","T1105","T1112","T1113","T1120","T1124","T1133","T1140","T1190","T1217","T1218","T1497.001","T1505.003","T1518","T1552","T1552.004","T1555","T1555.003","T1560.001","T1570","T1573.001","T1584.003","T1584.004","T1584.005","T1584.008","T1587.004","T1588.002","T1588.006","T1589","T1589.002","T1590","T1590.004","T1590.006","T1591","T1591.004","T1592","T1593","T1594","T1596.005","T1614","T1654","T1680"]},{"id":"G0090","name":"WIRTE","type":"group","techniques":["T1036.005","T1059.001","T1059.005","T1071.001","T1105","T1140","T1204.002","T1218.010","T1566.001","T1571","T1588.002"]},{"id":"G1050","name":"Water Galura","type":"group","techniques":["T1486","T1585.001","T1657"]},{"id":"G0107","name":"Whitefly","type":"group","techniques":["T1003.001","T1027.013","T1036.005","T1059","T1068","T1105","T1204.002","T1574.001","T1588.002"]},{"id":"G0124","name":"Windigo","type":"group","techniques":["T1005","T1059","T1082","T1083","T1090","T1189","T1518"]},{"id":"G0112","name":"Windshift","type":"group","techniques":["T1027","T1033","T1036","T1036.001","T1047","T1057","T1059.005","T1071.001","T1082","T1105","T1189","T1204.001","T1204.002","T1518","T1518.001","T1547.001","T1566.001","T1566.002","T1566.003"]},{"id":"G0044","name":"Winnti Group","type":"group","techniques":["T1014","T1057","T1083","T1105","T1553.002","T1583.001"]},{"id":"G1035","name":"Winter Vivern","type":"group","techniques":["T1020","T1033","T1036","T1036.004","T1041","T1053.005","T1056.003","T1059","T1059.001","T1059.003","T1059.007","T1071.001","T1082","T1083","T1105","T1113","T1114.001","T1119","T1140","T1189","T1190","T1204.001","T1566.001","T1583.001","T1583.003","T1584.006","T1595.002"]},{"id":"G0102","name":"Wizard Spider","type":"group","techniques":["T1003.001","T1003.002","T1003.003","T1005","T1016","T1018","T1021","T1021.001","T1021.002","T1021.006","T1027.010","T1033","T1036.004","T1041","T1047","T1048.003","T1053.005","T1055","T1055.001","T1059.001","T1059.003","T1070.004","T1071.001","T1074","T1074.001","T1078","T1078.002","T1082","T1087.002","T1105","T1112","T1133","T1135","T1136.001","T1136.002","T1197","T1204.001","T1204.002","T1210","T1218.011","T1222.001","T1489","T1490","T1518.001","T1518.002","T1543.003","T1547.001","T1547.004","T1550.002","T1552.006","T1553.002","T1555.004","T1557.001","T1558.003","T1560.001","T1562.001","T1566.001","T1566.002","T1567.002","T1569.002","T1570","T1585.002","T1588.002","T1588.003"]},{"id":"G0128","name":"ZIRCONIUM","type":"group","techniques":["T1012","T1016","T1027.002","T1033","T1036","T1036.004","T1041","T1059.003","T1059.006","T1068","T1082","T1090.003","T1102.002","T1105","T1124","T1140","T1204.001","T1218.007","T1547.001","T1555.003","T1566.002","T1567.002","T1573.001","T1583.001","T1583.006","T1584.008","T1598","T1598.003","T1665"]},{"id":"G0018","name":"admin@338","type":"group","techniques":["T1007","T1016","T1036.005","T1049","T1059.003","T1069.001","T1082","T1083","T1087.001","T1203","T1204.002","T1566.001"]},{"id":"G0045","name":"menuPass","type":"group","techniques":["T1003.002","T1003.003","T1003.004","T1005","T1016","T1018","T1021.001","T1021.004","T1027.013","T1036","T1036.003","T1036.005","T1039","T1046","T1047","T1049","T1053.005","T1055.012","T1056.001","T1059.001","T1059.003","T1070.003","T1070.004","T1074.001","T1074.002","T1078","T1083","T1087.002","T1090.002","T1105","T1106","T1119","T1140","T1190","T1199","T1204.002","T1210","T1218.004","T1553.002","T1560","T1560.001","T1566.001","T1568.001","T1574.001","T1583.001","T1588.002"]},{"id":"S0066","name":"3PARA RAT","type":"software","techniques":["T1070.006","T1071.001","T1083","T1573.001"]},{"id":"S0065","name":"4H RAT","type":"software","techniques":["T1057","T1059.003","T1071.001","T1082","T1083","T1573.001"]},{"id":"S0677","name":"AADInternals","type":"software","techniques":["T1003.004","T1048","T1059.001","T1069.003","T1087.004","T1098.005","T1112","T1136.003","T1484.002","T1526","T1528","T1530","T1552.001","T1552.004","T1556.006","T1556.007","T1558.002","T1566.002","T1589.002","T1590.001","T1598.003","T1606.002","T1649","T1651"]},{"id":"S0469","name":"ABK","type":"software","techniques":["T1027.003","T1055","T1059.003","T1071.001","T1105","T1140","T1518.001"]},{"id":"S0045","name":"ADVSTORESHELL","type":"software","techniques":["T1012","T1027","T1029","T1041","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1074.001","T1082","T1083","T1106","T1112","T1120","T1132.001","T1218.011","T1546.015","T1547.001","T1560","T1560.003","T1573.001","T1573.002"]},{"id":"S1074","name":"ANDROMEDA","type":"software","techniques":["T1036.005","T1036.008","T1055","T1071.001","T1091","T1105","T1547.001"]},{"id":"S1167","name":"AcidPour","type":"software","techniques":["T1070.004","T1082","T1083","T1120","T1485","T1529","T1561.001"]},{"id":"S1125","name":"AcidRain","type":"software","techniques":["T1083","T1485","T1529","T1561.001"]},{"id":"S1028","name":"Action RAT","type":"software","techniques":["T1005","T1016","T1027","T1033","T1047","T1059.003","T1071.001","T1082","T1083","T1105","T1140","T1518.001"]},{"id":"S0552","name":"AdFind","type":"software","techniques":["T1016","T1018","T1069.002","T1087.002","T1482"]},{"id":"S0331","name":"Agent Tesla","type":"software","techniques":["T1016","T1016.002","T1027","T1033","T1047","T1048.003","T1053.005","T1055","T1055.012","T1056.001","T1057","T1071.001","T1071.003","T1082","T1087.001","T1105","T1112","T1113","T1115","T1124","T1125","T1140","T1185","T1203","T1204.002","T1218.009","T1497","T1547.001","T1552.001","T1552.002","T1555","T1555.003","T1560","T1562.001","T1564.001","T1564.003","T1566.001"]},{"id":"S0092","name":"Agent.btz","type":"software","techniques":["T1016","T1033","T1052.001","T1091","T1105","T1560.003"]},{"id":"S1129","name":"Akira","type":"software","techniques":["T1047","T1057","T1059.001","T1059.003","T1082","T1083","T1106","T1135","T1486","T1490"]},{"id":"S1194","name":"Akira _v2","type":"software","techniques":["T1083","T1480","T1486","T1489","T1543","T1654"]},{"id":"S1025","name":"Amadey","type":"software","techniques":["T1005","T1016","T1027","T1033","T1041","T1071.001","T1082","T1083","T1105","T1106","T1112","T1140","T1518.001","T1547.001","T1553.005","T1568.001","T1614"]},{"id":"S0504","name":"Anchor","type":"software","techniques":["T1008","T1016","T1021.002","T1027","T1027.002","T1053.003","T1053.005","T1059.003","T1059.004","T1070.004","T1071.001","T1071.004","T1082","T1095","T1105","T1480","T1543.003","T1553.002","T1564.004","T1569.002"]},{"id":"S1133","name":"Apostle","type":"software","techniques":["T1053.005","T1057","T1070.001","T1070.004","T1140","T1480","T1485","T1486","T1529","T1561.001"]},{"id":"S0584","name":"AppleJeus","type":"software","techniques":["T1027","T1041","T1053.005","T1059.004","T1070.004","T1071.001","T1082","T1140","T1204.001","T1204.002","T1218.007","T1497.003","T1543.003","T1543.004","T1546.016","T1548.002","T1553.002","T1564.001","T1566.002","T1569.001"]},{"id":"S0622","name":"AppleSeed","type":"software","techniques":["T1005","T1008","T1016","T1025","T1027","T1027.002","T1030","T1036","T1036.005","T1041","T1056.001","T1057","T1059.001","T1059.007","T1070.004","T1071.001","T1074.001","T1082","T1083","T1106","T1113","T1119","T1124","T1134","T1140","T1204.002","T1218.010","T1547.001","T1560","T1560.001","T1566.001","T1567"]},{"id":"S0456","name":"Aria-body","type":"software","techniques":["T1010","T1016","T1025","T1027.013","T1033","T1049","T1055.001","T1057","T1070.004","T1071.001","T1082","T1083","T1090","T1095","T1105","T1106","T1113","T1134.001","T1134.002","T1140","T1547.001","T1560","T1568.002","T1680"]},{"id":"S0099","name":"Arp","type":"software","techniques":["T1016","T1018"]},{"id":"S0373","name":"Astaroth","type":"software","techniques":["T1016","T1027.002","T1027.010","T1027.013","T1041","T1047","T1055.012","T1056.001","T1057","T1059.003","T1059.005","T1059.007","T1074.001","T1082","T1102.001","T1105","T1115","T1124","T1129","T1132.001","T1140","T1204.002","T1218.001","T1218.010","T1220","T1497.001","T1518.001","T1547.001","T1547.009","T1552","T1555","T1564.003","T1564.004","T1566.001","T1568.002","T1574.001"]},{"id":"S1087","name":"AsyncRAT","type":"software","techniques":["T1033","T1053.005","T1056.001","T1057","T1105","T1106","T1113","T1125","T1497.001","T1564.003","T1568","T1622","T1680"]},{"id":"S0438","name":"Attor","type":"software","techniques":["T1010","T1012","T1020","T1027.013","T1036.004","T1037.001","T1041","T1053.005","T1055","T1055.004","T1056.001","T1070.004","T1070.006","T1071.002","T1074.001","T1083","T1090.003","T1105","T1106","T1112","T1113","T1115","T1119","T1120","T1123","T1129","T1218.011","T1497.001","T1543.003","T1560.003","T1564.001","T1569.002","T1573.001","T1573.002","T1680"]},{"id":"S1029","name":"AuTo Stealer","type":"software","techniques":["T1005","T1033","T1041","T1059.003","T1071.001","T1074.001","T1082","T1095","T1518.001","T1547.001"]},{"id":"S0347","name":"AuditCred","type":"software","techniques":["T1027.013","T1055","T1059.003","T1070.004","T1083","T1090","T1105","T1140","T1543.003"]},{"id":"S0129","name":"AutoIt backdoor","type":"software","techniques":["T1059.001","T1083","T1132.001","T1548.002"]},{"id":"S0640","name":"Avaddon","type":"software","techniques":["T1016","T1027","T1047","T1057","T1059.007","T1083","T1106","T1112","T1135","T1140","T1486","T1489","T1490","T1547.001","T1548.002","T1562.001","T1614.001"]},{"id":"S0473","name":"Avenger","type":"software","techniques":["T1016","T1027.003","T1027.013","T1055","T1057","T1071.001","T1082","T1083","T1105","T1140","T1518.001","T1680"]},{"id":"S1053","name":"AvosLocker","type":"software","techniques":["T1027","T1027.007","T1036.008","T1057","T1083","T1106","T1124","T1135","T1140","T1486","T1489","T1529","T1547.001","T1562.009","T1564.003"]},{"id":"S0344","name":"Azorult","type":"software","techniques":["T1012","T1016","T1033","T1055.012","T1057","T1070.004","T1082","T1083","T1105","T1113","T1124","T1134.002","T1140","T1552.001","T1555.003","T1573.001"]},{"id":"S0031","name":"BACKSPACE","type":"software","techniques":["T1012","T1041","T1057","T1059.003","T1071.001","T1082","T1083","T1090.001","T1104","T1112","T1132.002","T1547.001","T1547.009","T1562.004"]},{"id":"S0245","name":"BADCALL","type":"software","techniques":["T1001.003","T1016","T1082","T1090","T1112","T1562.004","T1571","T1573.001"]},{"id":"S0642","name":"BADFLICK","type":"software","techniques":["T1005","T1016","T1082","T1083","T1105","T1140","T1204.002","T1497.003","T1560.002","T1566.001"]},{"id":"S1081","name":"BADHATCH","type":"software","techniques":["T1018","T1027.009","T1027.010","T1027.015","T1033","T1041","T1046","T1047","T1049","T1053.005","T1055","T1055.001","T1055.004","T1057","T1059.001","T1059.003","T1069.002","T1070.004","T1071.001","T1071.002","T1082","T1090","T1102","T1105","T1106","T1113","T1124","T1134.001","T1135","T1482","T1546.003","T1548.002","T1550.002","T1573.002","T1620"]},{"id":"S0128","name":"BADNEWS","type":"software","techniques":["T1005","T1025","T1036.001","T1036.005","T1039","T1053.005","T1055.012","T1056.001","T1059.003","T1071.001","T1074.001","T1083","T1102.001","T1102.002","T1105","T1106","T1113","T1119","T1120","T1132","T1132.001","T1547.001","T1573.001","T1574.001"]},{"id":"S0470","name":"BBK","type":"software","techniques":["T1027.003","T1055","T1059.003","T1071.001","T1105","T1106","T1140"]},{"id":"S0127","name":"BBSRAT","type":"software","techniques":["T1007","T1055.012","T1057","T1070.004","T1071.001","T1083","T1140","T1543.003","T1546.015","T1547.001","T1560.002","T1569.002","T1573.001","T1574.001"]},{"id":"S1136","name":"BFG Agonizer","type":"software","techniques":["T1490","T1529","T1554","T1561.002"]},{"id":"S0017","name":"BISCUIT","type":"software","techniques":["T1008","T1033","T1056.001","T1057","T1059.003","T1082","T1105","T1113","T1124","T1573.002"]},{"id":"S0190","name":"BITSAdmin","type":"software","techniques":["T1048.003","T1105","T1197","T1570"]},{"id":"S0069","name":"BLACKCOFFEE","type":"software","techniques":["T1057","T1059.003","T1070.004","T1083","T1102.001","T1102.002","T1104"]},{"id":"S0520","name":"BLINDINGCAN","type":"software","techniques":["T1005","T1016","T1027.002","T1027.013","T1036.005","T1041","T1059.003","T1070.004","T1070.006","T1071.001","T1082","T1083","T1105","T1129","T1132.001","T1140","T1204.002","T1218.011","T1553.002","T1566.001","T1573.001","T1680"]},{"id":"S0657","name":"BLUELIGHT","type":"software","techniques":["T1016","T1027.013","T1033","T1041","T1057","T1070.004","T1071.001","T1082","T1083","T1102.002","T1105","T1113","T1124","T1497.001","T1518.001","T1539","T1555.003","T1560","T1560.003"]},{"id":"S1184","name":"BOLDMOVE","type":"software","techniques":["T1016","T1059.004","T1070.004","T1071.001","T1082","T1083","T1090.003","T1190","T1480","T1543","T1554","T1562","T1562.006","T1564.011","T1573.002"]},{"id":"S0360","name":"BONDUPDATER","type":"software","techniques":["T1053.005","T1059.001","T1059.003","T1071.004","T1105","T1564.003","T1568.002"]},{"id":"S1226","name":"BOOKWORM","type":"software","techniques":["T1001.003","T1027","T1027.013","T1033","T1036.004","T1056.001","T1070.006","T1071.001","T1106","T1112","T1115","T1140","T1543.003","T1553.002","T1564.003","T1573.001","T1574.001"]},{"id":"S0415","name":"BOOSTWRITE","type":"software","techniques":["T1027.013","T1129","T1140","T1553.002","T1574.001"]},{"id":"S0114","name":"BOOTRASH","type":"software","techniques":["T1542.003","T1564.005"]},{"id":"S1161","name":"BPFDoor","type":"software","techniques":["T1027","T1036.009","T1036.011","T1059.004","T1070","T1070.004","T1070.006","T1205.002","T1480","T1480.002","T1562.003","T1562.004","T1564.011"]},{"id":"S0043","name":"BUBBLEWRAP","type":"software","techniques":["T1071.001","T1082","T1095"]},{"id":"S1118","name":"BUSHWALK","type":"software","techniques":["T1027","T1105","T1140","T1205","T1505.003","T1554"]},{"id":"S0638","name":"Babuk","type":"software","techniques":["T1007","T1027.002","T1049","T1057","T1059.003","T1083","T1106","T1135","T1140","T1486","T1489","T1490","T1562.001","T1680"]},{"id":"S0414","name":"BabyShark","type":"software","techniques":["T1012","T1016","T1033","T1053.005","T1056.001","T1057","T1059.003","T1059.005","T1070.004","T1082","T1083","T1105","T1132.001","T1140","T1218.005","T1547.001"]},{"id":"S0475","name":"BackConfig","type":"software","techniques":["T1027.010","T1036.005","T1053.005","T1059.003","T1059.005","T1070.004","T1071.001","T1082","T1083","T1105","T1106","T1137.001","T1140","T1204.001","T1553.002","T1564.001"]},{"id":"S0093","name":"Backdoor.Oldrea","type":"software","techniques":["T1016","T1018","T1033","T1046","T1055","T1057","T1070.004","T1082","T1083","T1087.003","T1105","T1132.001","T1218.011","T1547.001","T1555.003","T1560"]},{"id":"S0606","name":"Bad Rabbit","type":"software","techniques":["T1003.001","T1036.005","T1053.005","T1057","T1106","T1110.003","T1135","T1189","T1204.002","T1210","T1218.011","T1486","T1495","T1548.002","T1569.002"]},{"id":"S0337","name":"BadPatch","type":"software","techniques":["T1005","T1056.001","T1071.001","T1071.003","T1074.001","T1082","T1083","T1105","T1113","T1497.001","T1518.001","T1547.001"]},{"id":"S0234","name":"Bandook","type":"software","techniques":["T1005","T1016","T1027.003","T1041","T1055.012","T1056.001","T1059","T1059.001","T1059.003","T1059.005","T1059.006","T1070.004","T1083","T1095","T1105","T1106","T1113","T1120","T1123","T1125","T1140","T1204.002","T1553.002","T1566.001","T1573.001","T1680"]},{"id":"S0239","name":"Bankshot","type":"software","techniques":["T1001.003","T1005","T1012","T1041","T1057","T1059.003","T1070","T1070.004","T1070.006","T1071.001","T1082","T1083","T1087.001","T1087.002","T1105","T1106","T1112","T1119","T1132.002","T1134.002","T1140","T1203","T1543.003","T1571","T1680"]},{"id":"S0534","name":"Bazar","type":"software","techniques":["T1005","T1008","T1012","T1016","T1018","T1027.002","T1027.007","T1027.013","T1033","T1036.004","T1036.005","T1036.007","T1047","T1053.005","T1055","T1055.012","T1055.013","T1057","T1059.001","T1059.003","T1070.004","T1070.009","T1071.001","T1082","T1083","T1087.001","T1087.002","T1102","T1104","T1105","T1106","T1124","T1135","T1140","T1197","T1204.001","T1482","T1497","T1497.003","T1518","T1518.001","T1547.001","T1547.004","T1547.009","T1553.002","T1562.001","T1566.002","T1568.002","T1573.001","T1573.002","T1614.001"]},{"id":"S1246","name":"BeaverTail","type":"software","techniques":["T1001.001","T1005","T1027.013","T1036","T1041","T1059.007","T1070.004","T1071.001","T1074.001","T1082","T1083","T1105","T1124","T1195.001","T1204.002","T1217","T1555","T1555.001","T1555.003","T1560.001","T1571","T1654","T1657"]},{"id":"S0574","name":"BendyBear","type":"software","techniques":["T1001.001","T1012","T1027.013","T1027.014","T1105","T1106","T1124","T1140","T1497.003","T1571","T1573.001"]},{"id":"S0268","name":"Bisonal","type":"software","techniques":["T1005","T1012","T1016","T1027.001","T1027.002","T1027.013","T1036","T1036.005","T1041","T1057","T1059.003","T1059.005","T1070.004","T1071.001","T1082","T1083","T1090","T1095","T1105","T1106","T1112","T1124","T1132.001","T1137.006","T1140","T1204.002","T1218.011","T1497","T1497.003","T1543.003","T1547.001","T1566.001","T1568","T1573.001"]},{"id":"S0570","name":"BitPaymer","type":"software","techniques":["T1007","T1012","T1018","T1027.013","T1070.006","T1087.001","T1106","T1112","T1134.001","T1135","T1222.001","T1480","T1486","T1490","T1543.003","T1547.001","T1548.002","T1564.004"]},{"id":"S1070","name":"Black Basta","type":"software","techniques":["T1007","T1018","T1027.001","T1036.004","T1036.005","T1047","T1059.001","T1059.003","T1082","T1083","T1106","T1112","T1204.002","T1222.002","T1480.002","T1486","T1490","T1491.001","T1497","T1497.001","T1529","T1543.003","T1553.002","T1562.009","T1622","T1680"]},{"id":"S1181","name":"BlackByte 2.0 Ransomware","type":"software","techniques":["T1055","T1068","T1070.004","T1070.006","T1112","T1135","T1486","T1489","T1490","T1562.004","T1569.002"]},{"id":"S1180","name":"BlackByte Ransomware","type":"software","techniques":["T1012","T1021.002","T1027.013","T1046","T1053.005","T1059.007","T1082","T1106","T1112","T1135","T1140","T1222.001","T1480","T1486","T1490","T1497.001","T1518.001","T1562.001","T1562.010","T1570","T1614.001"]},{"id":"S1068","name":"BlackCat","type":"software","techniques":["T1018","T1033","T1047","T1059.003","T1069.002","T1070.001","T1082","T1083","T1087.002","T1112","T1134","T1135","T1222.001","T1486","T1489","T1490","T1491.001","T1548.002","T1561.001","T1570","T1680"]},{"id":"S0089","name":"BlackEnergy","type":"software","techniques":["T1008","T1016","T1021.002","T1046","T1047","T1049","T1055.001","T1056.001","T1057","T1070","T1070.001","T1071.001","T1082","T1083","T1113","T1120","T1485","T1543.003","T1547.001","T1547.009","T1548.002","T1552.001","T1553.006","T1555.003","T1574.010"]},{"id":"S0564","name":"BlackMould","type":"software","techniques":["T1005","T1059.003","T1071.001","T1083","T1105","T1680"]},{"id":"S0521","name":"BloodHound","type":"software","techniques":["T1018","T1033","T1059.001","T1069.001","T1069.002","T1087.001","T1087.002","T1106","T1482","T1560","T1615"]},{"id":"S0486","name":"Bonadan","type":"software","techniques":["T1016","T1033","T1057","T1059","T1082","T1105","T1496.001","T1554","T1573.001"]},{"id":"S0635","name":"BoomBox","type":"software","techniques":["T1027","T1033","T1036","T1071.001","T1082","T1083","T1087.002","T1087.003","T1102","T1105","T1140","T1204.002","T1218.011","T1480","T1547.001","T1567.002"]},{"id":"S0651","name":"BoxCaon","type":"software","techniques":["T1005","T1016","T1027","T1041","T1059.003","T1074.001","T1083","T1102.002","T1105","T1106","T1547","T1567.002"]},{"id":"S0252","name":"Brave Prince","type":"software","techniques":["T1012","T1016","T1048.003","T1057","T1082","T1083","T1562.001"]},{"id":"S0204","name":"Briba","type":"software","techniques":["T1105","T1218.011","T1543.003","T1547.001"]},{"id":"S1063","name":"Brute Ratel C4","type":"software","techniques":["T1005","T1021","T1021.002","T1021.006","T1027","T1027.007","T1036.005","T1036.008","T1046","T1047","T1055.002","T1057","T1059.003","T1069.002","T1071.001","T1071.004","T1087.002","T1095","T1102","T1105","T1106","T1113","T1140","T1204.002","T1482","T1497.003","T1518.001","T1558.003","T1562.006","T1569.002","T1572","T1574.001","T1620"]},{"id":"S1039","name":"Bumblebee","type":"software","techniques":["T1005","T1008","T1012","T1027","T1033","T1036.005","T1041","T1047","T1053.005","T1055","T1055.001","T1055.004","T1057","T1059.001","T1059.003","T1059.005","T1070.004","T1082","T1102","T1105","T1106","T1129","T1132.001","T1140","T1204.001","T1204.002","T1218.008","T1218.011","T1497","T1497.001","T1497.003","T1518.001","T1548.002","T1559.001","T1560","T1566.001","T1566.002","T1573.001","T1622"]},{"id":"S0482","name":"Bundlore","type":"software","techniques":["T1027","T1036.005","T1048","T1056.002","T1057","T1059.002","T1059.004","T1059.006","T1059.007","T1071.001","T1082","T1098.004","T1105","T1140","T1176.001","T1189","T1204.002","T1222.002","T1518","T1543.001","T1543.004","T1562.001","T1564"]},{"id":"S0025","name":"CALENDAR","type":"software","techniques":["T1059.003","T1102.002"]},{"id":"S1237","name":"CANONSTAGER","type":"software","techniques":["T1027.007","T1036.005","T1055.005","T1106","T1564.003","T1574.001"]},{"id":"S0465","name":"CARROTBALL","type":"software","techniques":["T1027","T1071.002","T1105","T1204.002"]},{"id":"S0462","name":"CARROTBAT","type":"software","techniques":["T1027.010","T1027.013","T1059.003","T1070.004","T1082","T1105"]},{"id":"S1224","name":"CASTLETAP","type":"software","techniques":["T1005","T1040","T1059.004","T1105","T1140","T1205.002","T1573.001","T1573.002"]},{"id":"S0222","name":"CCBkdr","type":"software","techniques":["T1195.002","T1568.002"]},{"id":"S1149","name":"CHIMNEYSWEEP","type":"software","techniques":["T1005","T1027","T1027.001","T1027.007","T1027.009","T1033","T1041","T1053.005","T1056.001","T1057","T1059.001","T1059.005","T1070.006","T1071.001","T1074.001","T1083","T1102","T1105","T1106","T1112","T1113","T1115","T1120","T1132.002","T1140","T1218.003","T1480","T1518.001","T1529","T1548.002","T1553.002"]},{"id":"S0023","name":"CHOPSTICK","type":"software","techniques":["T1008","T1012","T1027.011","T1056.001","T1059","T1071.001","T1071.003","T1083","T1090.001","T1091","T1092","T1105","T1112","T1113","T1497","T1518.001","T1568.002","T1573.001","T1573.002"]},{"id":"S1236","name":"CLAIMLOADER","type":"software","techniques":["T1027.007","T1036.005","T1053.005","T1106","T1140","T1204.002","T1480.002","T1547.001","T1559.001","T1564.001","T1574.001"]},{"id":"S1105","name":"COATHANGER","type":"software","techniques":["T1014","T1027","T1027.002","T1055","T1057","T1059.004","T1070.004","T1071.001","T1083","T1095","T1140","T1190","T1222.002","T1543.004","T1564.001","T1573.002","T1574","T1574.006"]},{"id":"S0212","name":"CORALDECK","type":"software","techniques":["T1048.003","T1083","T1560.001"]},{"id":"S0137","name":"CORESHELL","type":"software","techniques":["T1027","T1027.016","T1071.001","T1071.003","T1082","T1105","T1132.001","T1218.011","T1547.001","T1573.001","T1680"]},{"id":"S0527","name":"CSPY Downloader","type":"software","techniques":["T1027.002","T1036.004","T1053.005","T1070","T1070.004","T1071.001","T1105","T1112","T1204.002","T1497.001","T1548.002","T1553.002"]},{"id":"S0693","name":"CaddyWiper","type":"software","techniques":["T1057","T1082","T1083","T1106","T1222.001","T1485","T1561.002"]},{"id":"S0454","name":"Cadelspy","type":"software","techniques":["T1010","T1056.001","T1082","T1113","T1115","T1120","T1123","T1560"]},{"id":"S0274","name":"Calisto","type":"software","techniques":["T1005","T1016","T1036.005","T1056.002","T1070.004","T1074.001","T1098","T1105","T1136.001","T1217","T1543.001","T1555.001","T1560.001","T1564.001","T1569.001"]},{"id":"S0077","name":"CallMe","type":"software","techniques":["T1041","T1059.004","T1105","T1573.001"]},{"id":"S0351","name":"Cannon","type":"software","techniques":["T1033","T1041","T1057","T1071.003","T1082","T1083","T1105","T1113","T1124","T1547.004","T1680"]},{"id":"S0030","name":"Carbanak","type":"software","techniques":["T1003","T1012","T1021.001","T1027","T1030","T1055.002","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1113","T1114.001","T1132.001","T1136.001","T1219","T1547.001","T1573.001"]},{"id":"S0484","name":"Carberp","type":"software","techniques":["T1012","T1014","T1021.005","T1027.013","T1036.005","T1041","T1055.001","T1055.004","T1056.004","T1057","T1068","T1071.001","T1082","T1105","T1106","T1113","T1185","T1497","T1518.001","T1542.003","T1547.001","T1555","T1555.003","T1562.001","T1564.001"]},{"id":"S0335","name":"Carbon","type":"software","techniques":["T1012","T1016","T1018","T1027","T1048.003","T1049","T1053.005","T1055.001","T1057","T1069","T1071.001","T1074.001","T1095","T1102","T1124","T1140","T1543.003","T1573.002"]},{"id":"S0348","name":"Cardinal RAT","type":"software","techniques":["T1008","T1012","T1027.004","T1027.013","T1033","T1055","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1082","T1083","T1090","T1105","T1112","T1113","T1140","T1204.002","T1547.001","T1560.002","T1573.001"]},{"id":"S0261","name":"Catchamas","type":"software","techniques":["T1010","T1016","T1036.004","T1056.001","T1074.001","T1112","T1113","T1115","T1543.003"]},{"id":"S0572","name":"Caterpillar WebShell","type":"software","techniques":["T1005","T1007","T1014","T1016","T1033","T1041","T1046","T1057","T1059.003","T1069.001","T1082","T1083","T1105","T1110","T1112"]},{"id":"S0144","name":"ChChes","type":"software","techniques":["T1036.005","T1057","T1071.001","T1082","T1083","T1105","T1132.001","T1547.001","T1553.002","T1555.003","T1562.001","T1573.001"]},{"id":"S0631","name":"Chaes","type":"software","techniques":["T1027.011","T1033","T1036.005","T1048","T1056","T1059.003","T1059.005","T1059.006","T1059.007","T1071.001","T1082","T1105","T1106","T1112","T1113","T1132.001","T1140","T1185","T1204.002","T1218.004","T1218.007","T1221","T1539","T1547.001","T1555.003","T1566.001","T1573","T1574.001"]},{"id":"S0220","name":"Chaos","type":"software","techniques":["T1059.004","T1104","T1110","T1205","T1573.001"]},{"id":"S0674","name":"CharmPower","type":"software","techniques":["T1005","T1008","T1012","T1016","T1016.002","T1041","T1047","T1048.003","T1057","T1059.001","T1059.003","T1070.004","T1071.001","T1082","T1083","T1102","T1102.001","T1105","T1112","T1113","T1132.001","T1140","T1518","T1573.001"]},{"id":"S1096","name":"Cheerscrypt","type":"software","techniques":["T1059.012","T1083","T1486","T1489","T1673"]},{"id":"S0107","name":"Cherry Picker","type":"software","techniques":["T1048.003","T1070.004","T1546.010"]},{"id":"S0020","name":"China Chopper","type":"software","techniques":["T1005","T1027.002","T1046","T1059.003","T1070.006","T1071.001","T1083","T1105","T1110.001","T1505.003"]},{"id":"S1041","name":"Chinoxy","type":"software","techniques":["T1027.013","T1036.005","T1140","T1547.001","T1574.001"]},{"id":"S0667","name":"Chrommme","type":"software","techniques":["T1005","T1016","T1027.013","T1029","T1033","T1041","T1074.001","T1082","T1105","T1106","T1113","T1140","T1560","T1680"]},{"id":"S0660","name":"Clambling","type":"software","techniques":["T1005","T1012","T1016","T1027","T1033","T1055","T1055.012","T1056.001","T1057","T1059.001","T1059.003","T1071","T1071.001","T1082","T1083","T1095","T1102.002","T1112","T1113","T1115","T1124","T1125","T1135","T1140","T1204.002","T1497.003","T1543.003","T1547.001","T1548.002","T1564.001","T1566.001","T1567.002","T1569.002","T1574.001"]},{"id":"S0611","name":"Clop","type":"software","techniques":["T1027.002","T1057","T1059.003","T1083","T1106","T1112","T1135","T1140","T1218.007","T1486","T1489","T1490","T1497.003","T1518.001","T1553.002","T1562.001","T1614.001"]},{"id":"S0054","name":"CloudDuke","type":"software","techniques":["T1071.001","T1102.002","T1105"]},{"id":"S0154","name":"Cobalt Strike","type":"software","techniques":["T1001.003","T1003.001","T1003.002","T1005","T1007","T1012","T1016","T1018","T1021.001","T1021.002","T1021.003","T1021.004","T1021.006","T1027","T1027.005","T1029","T1030","T1046","T1047","T1049","T1055","T1055.001","T1055.012","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1059.006","T1059.007","T1068","T1069.001","T1069.002","T1070.006","T1071.001","T1071.002","T1071.004","T1078.002","T1078.003","T1083","T1087.002","T1090.001","T1090.004","T1095","T1105","T1106","T1112","T1113","T1132.001","T1134.001","T1134.003","T1134.004","T1135","T1137.001","T1140","T1185","T1197","T1203","T1218.011","T1518","T1543.003","T1548.002","T1548.003","T1550.002","T1553.002","T1562.001","T1564.010","T1569.002","T1572","T1573.001","T1573.002","T1620"]},{"id":"S0338","name":"Cobian RAT","type":"software","techniques":["T1056.001","T1059.003","T1071.004","T1113","T1123","T1125","T1132.001","T1547.001"]},{"id":"S0369","name":"CoinTicker","type":"software","techniques":["T1027","T1059.003","T1059.004","T1059.006","T1105","T1140","T1543.001","T1553.001","T1564.001"]},{"id":"S0126","name":"ComRAT","type":"software","techniques":["T1012","T1027","T1027.009","T1027.010","T1027.011","T1029","T1036.004","T1053.005","T1055.001","T1059.001","T1059.003","T1071.001","T1071.003","T1102.002","T1106","T1112","T1124","T1140","T1518","T1546.015","T1564.005","T1573.002"]},{"id":"S0244","name":"Comnie","type":"software","techniques":["T1007","T1016","T1018","T1027","T1027.001","T1049","T1057","T1059.003","T1059.005","T1071.001","T1082","T1087.001","T1102.002","T1119","T1218.011","T1518.001","T1547.001","T1547.009","T1573.001"]},{"id":"S0608","name":"Conficker","type":"software","techniques":["T1021.002","T1027","T1046","T1091","T1105","T1112","T1124","T1210","T1490","T1543.003","T1547.001","T1562.001","T1568.002"]},{"id":"S0591","name":"ConnectWise","type":"software","techniques":["T1059.001","T1113","T1125"]},{"id":"S0575","name":"Conti","type":"software","techniques":["T1016","T1018","T1021.002","T1027","T1049","T1055.001","T1057","T1059.003","T1080","T1083","T1106","T1135","T1140","T1486","T1489","T1490"]},{"id":"S0492","name":"CookieMiner","type":"software","techniques":["T1005","T1027.010","T1048.003","T1059.004","T1059.006","T1083","T1105","T1140","T1496.001","T1518.001","T1539","T1543.001","T1555.003","T1562.004"]},{"id":"S1235","name":"CorKLOG","type":"software","techniques":["T1027.013","T1053.005","T1056.001","T1074.001","T1140","T1543.003","T1553.002","T1574.001"]},{"id":"S0050","name":"CosmicDuke","type":"software","techniques":["T1003.002","T1003.004","T1005","T1020","T1025","T1039","T1048.003","T1053.005","T1056.001","T1068","T1071.001","T1083","T1113","T1114.001","T1115","T1543.003","T1555","T1555.003","T1573.001"]},{"id":"S0614","name":"CostaBricks","type":"software","techniques":["T1027.001","T1027.002","T1055","T1105","T1106","T1140"]},{"id":"S1155","name":"Covenant","type":"software","techniques":["T1047","T1059.001","T1059.003","T1071.001","T1082","T1218.004","T1218.005","T1218.010","T1571","T1573.002"]},{"id":"S0046","name":"CozyCar","type":"software","techniques":["T1003.001","T1003.002","T1027.013","T1036.003","T1053.005","T1059.003","T1071.001","T1082","T1102.002","T1218.011","T1497","T1518.001","T1543.003","T1547.001"]},{"id":"S0488","name":"CrackMapExec","type":"software","techniques":["T1003.002","T1003.003","T1003.004","T1016","T1018","T1047","T1049","T1053.002","T1059.001","T1069.002","T1083","T1087.002","T1110","T1110.001","T1110.003","T1112","T1135","T1201","T1550.002","T1680"]},{"id":"S1023","name":"CreepyDrive","type":"software","techniques":["T1005","T1059.001","T1071.001","T1083","T1102.002","T1105","T1550.001","T1567.002"]},{"id":"S1024","name":"CreepySnail","type":"software","techniques":["T1016","T1033","T1041","T1059.001","T1071.001","T1078.002","T1132.001"]},{"id":"S0115","name":"Crimson","type":"software","techniques":["T1005","T1012","T1016","T1025","T1033","T1041","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1082","T1083","T1091","T1095","T1105","T1112","T1113","T1114.001","T1120","T1123","T1124","T1125","T1140","T1497.003","T1518.001","T1547.001","T1555.003","T1614","T1680"]},{"id":"S0235","name":"CrossRAT","type":"software","techniques":["T1083","T1113","T1543.001","T1547.001","T1547.013"]},{"id":"S0538","name":"Crutch","type":"software","techniques":["T1005","T1008","T1020","T1025","T1036.004","T1041","T1053.005","T1071.001","T1074.001","T1102.002","T1119","T1120","T1560.001","T1567.002","T1574.001"]},{"id":"S0498","name":"Cryptoistic","type":"software","techniques":["T1005","T1033","T1070.004","T1083","T1095","T1105","T1573"]},{"id":"S0625","name":"Cuba","type":"software","techniques":["T1007","T1016","T1027","T1027.002","T1036.005","T1049","T1056.001","T1057","T1059.001","T1059.003","T1070.004","T1083","T1105","T1106","T1134","T1135","T1486","T1489","T1543.003","T1564.003","T1614.001","T1620","T1680"]},{"id":"S1153","name":"Cuckoo Stealer","type":"software","techniques":["T1027.008","T1027.013","T1033","T1036.005","T1041","T1056.002","T1057","T1059.002","T1059.004","T1071.001","T1074.001","T1082","T1083","T1095","T1113","T1140","T1217","T1518","T1543.001","T1553.001","T1555.001","T1564.001","T1569.001","T1614","T1614.001","T1647"]},{"id":"S0687","name":"Cyclops Blink","type":"software","techniques":["T1005","T1016","T1036.005","T1037.004","T1041","T1057","T1070.006","T1071.001","T1082","T1083","T1090.003","T1105","T1106","T1132.002","T1140","T1542.002","T1559","T1562.004","T1571","T1572","T1573.002"]},{"id":"S1033","name":"DCSrv","type":"software","techniques":["T1027.013","T1036.004","T1106","T1112","T1124","T1486","T1529","T1543.003"]},{"id":"S0255","name":"DDKONG","type":"software","techniques":["T1083","T1105","T1140","T1218.011"]},{"id":"S1052","name":"DEADEYE","type":"software","techniques":["T1016","T1027.009","T1027.013","T1036.004","T1059.003","T1082","T1106","T1140","T1218.007","T1218.011","T1480","T1564.004"]},{"id":"S1134","name":"DEADWOOD","type":"software","techniques":["T1027.009","T1027.013","T1036.004","T1124","T1140","T1485","T1531","T1561.001","T1561.002","T1569.002"]},{"id":"S0616","name":"DEATHRANSOM","type":"software","techniques":["T1047","T1071.001","T1083","T1105","T1135","T1486","T1490","T1614.001","T1680"]},{"id":"S0213","name":"DOGCALL","type":"software","techniques":["T1027.013","T1056.001","T1102.002","T1105","T1113","T1123"]},{"id":"S0694","name":"DRATzarus","type":"software","techniques":["T1005","T1018","T1027","T1027.002","T1033","T1036.005","T1057","T1071.001","T1105","T1106","T1124","T1497.003","T1622"]},{"id":"S1158","name":"DUSTPAN","type":"software","techniques":["T1027.009","T1027.013","T1036.005","T1055.002","T1140","T1543.003"]},{"id":"S1159","name":"DUSTTRAP","type":"software","techniques":["T1005","T1010","T1012","T1016","T1018","T1027.009","T1027.013","T1041","T1055","T1056.001","T1057","T1059.003","T1070","T1070.001","T1070.005","T1082","T1083","T1087.001","T1087.002","T1105","T1113","T1124","T1135","T1140","T1482","T1497.001","T1518.001","T1615","T1654"]},{"id":"S0497","name":"Dacls","type":"software","techniques":["T1027.013","T1036","T1057","T1071.001","T1083","T1105","T1543.001","T1543.004","T1564.001"]},{"id":"S1014","name":"DanBot","type":"software","techniques":["T1005","T1021.005","T1027.013","T1036.005","T1053.005","T1059.003","T1059.005","T1070.004","T1071.001","T1071.004","T1105","T1140","T1204.002","T1566.001"]},{"id":"S0334","name":"DarkComet","type":"software","techniques":["T1021.001","T1027.002","T1033","T1036.005","T1056.001","T1057","T1059","T1059.003","T1071.001","T1082","T1105","T1112","T1115","T1123","T1125","T1547.001","T1562.001","T1562.004"]},{"id":"S1111","name":"DarkGate","type":"software","techniques":["T1001","T1005","T1010","T1027","T1027.013","T1036","T1036.003","T1036.007","T1041","T1047","T1055.012","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1059.010","T1070.004","T1071.004","T1082","T1083","T1098.007","T1105","T1106","T1115","T1119","T1124","T1134.004","T1136.001","T1140","T1204.002","T1480","T1486","T1490","T1496.001","T1497.001","T1518.001","T1529","T1539","T1547.001","T1548.002","T1552","T1555","T1561.001","T1562.001","T1564.001","T1566.001","T1566.002","T1569.002","T1574","T1574.001","T1574.007","T1583.001","T1614","T1622","T1657","T1665","T1680"]},{"id":"S1066","name":"DarkTortilla","type":"software","techniques":["T1007","T1016.001","T1027","T1036","T1047","T1055.001","T1056.001","T1057","T1059.003","T1071.001","T1082","T1102","T1105","T1106","T1112","T1115","T1140","T1204.002","T1497.001","T1497.003","T1518.001","T1547.001","T1547.004","T1559.001","T1564","T1566.001","T1574.012","T1622"]},{"id":"S0673","name":"DarkWatchman","type":"software","techniques":["T1005","T1010","T1012","T1027.004","T1027.010","T1027.011","T1027.015","T1033","T1036","T1047","T1053.005","T1056.001","T1059.001","T1059.003","T1059.007","T1070","T1070.004","T1071.001","T1074.001","T1082","T1083","T1112","T1120","T1124","T1129","T1132.001","T1140","T1217","T1490","T1518.001","T1566.001","T1568.002","T1573.002","T1614"]},{"id":"S0187","name":"Daserf","type":"software","techniques":["T1001.002","T1003.001","T1027","T1027.002","T1027.005","T1036.005","T1056.001","T1059.003","T1071.001","T1105","T1113","T1132.001","T1553.002","T1560","T1560.001","T1573.001"]},{"id":"S0243","name":"DealersChoice","type":"software","techniques":["T1059.003","T1071.001","T1203"]},{"id":"S0354","name":"Denis","type":"software","techniques":["T1012","T1016","T1027","T1027.010","T1033","T1055.012","T1059.001","T1059.003","T1070.004","T1071.004","T1082","T1083","T1105","T1106","T1132.001","T1140","T1497.001","T1560.002","T1574","T1574.001"]},{"id":"S0021","name":"Derusbi","type":"software","techniques":["T1008","T1012","T1033","T1055.001","T1056.001","T1057","T1059.004","T1070.004","T1070.006","T1082","T1083","T1095","T1113","T1123","T1125","T1218.010","T1571","T1573.001"]},{"id":"S0659","name":"Diavol","type":"software","techniques":["T1016","T1018","T1021.002","T1027","T1027.003","T1033","T1057","T1071.001","T1082","T1083","T1105","T1106","T1135","T1485","T1486","T1489","T1490","T1491.001","T1562.001"]},{"id":"S0200","name":"Dipsind","type":"software","techniques":["T1029","T1059.003","T1071.001","T1105","T1132.001","T1547.004","T1573.001"]},{"id":"S1088","name":"Disco","type":"software","techniques":["T1053.005","T1071.002","T1105","T1204.002","T1659"]},{"id":"S1021","name":"DnsSystem","type":"software","techniques":["T1005","T1033","T1041","T1059.003","T1071.004","T1105","T1132.001","T1204.002","T1547.001"]},{"id":"S0281","name":"Dok","type":"software","techniques":["T1027.002","T1048.003","T1056.002","T1059.002","T1090.003","T1222.002","T1543.001","T1547.015","T1548.003","T1553.004","T1557"]},{"id":"S0600","name":"Doki","type":"software","techniques":["T1020","T1036.005","T1041","T1057","T1059.004","T1071.001","T1083","T1102","T1105","T1133","T1568.002","T1573.002","T1610","T1611"]},{"id":"S0695","name":"Donut","type":"software","techniques":["T1027.002","T1027.013","T1027.015","T1055","T1057","T1059","T1059.001","T1059.005","T1059.006","T1059.007","T1070","T1071.001","T1105","T1106","T1562.001","T1620"]},{"id":"S0186","name":"DownPaper","type":"software","techniques":["T1012","T1033","T1059.001","T1059.003","T1071.001","T1082","T1547.001"]},{"id":"S0134","name":"Downdelph","type":"software","techniques":["T1001.001","T1105","T1548.002","T1573.001","T1574.001"]},{"id":"S0384","name":"Dridex","type":"software","techniques":["T1027","T1053.005","T1071.001","T1082","T1090","T1090.003","T1106","T1185","T1204.002","T1218.010","T1219","T1518","T1573.001","T1573.002","T1574.001"]},{"id":"S0547","name":"DropBook","type":"software","techniques":["T1059.003","T1059.006","T1082","T1083","T1102","T1105","T1140","T1567","T1614.001"]},{"id":"S0502","name":"Drovorub","type":"software","techniques":["T1005","T1014","T1027","T1041","T1059.004","T1070.004","T1071.001","T1090.001","T1095","T1105","T1140","T1547.006"]},{"id":"S0567","name":"Dtrack","type":"software","techniques":["T1005","T1012","T1016","T1027.009","T1036.005","T1049","T1055.012","T1056.001","T1057","T1059.003","T1070.004","T1074.001","T1078","T1082","T1083","T1105","T1129","T1140","T1217","T1543.003","T1547","T1560","T1574"]},{"id":"S0038","name":"Duqu","type":"software","techniques":["T1001.002","T1010","T1016","T1021.002","T1049","T1053.005","T1055.001","T1055.012","T1056.001","T1057","T1071","T1074.001","T1078","T1087.001","T1090.001","T1134","T1218.007","T1543.003","T1560.003","T1572","T1573.001"]},{"id":"S0062","name":"DustySky","type":"software","techniques":["T1008","T1027","T1041","T1047","T1056.001","T1057","T1070.004","T1071.001","T1074.001","T1082","T1083","T1091","T1113","T1120","T1518","T1518.001","T1547.001","T1560.001","T1570"]},{"id":"S0024","name":"Dyre","type":"software","techniques":["T1007","T1016","T1027.002","T1033","T1041","T1053.005","T1055","T1055.001","T1071.001","T1074.001","T1082","T1105","T1140","T1497.001","T1518","T1543.003"]},{"id":"S0593","name":"ECCENTRICBANDWAGON","type":"software","techniques":["T1027","T1056.001","T1059.003","T1070.004","T1074.001","T1113"]},{"id":"S0605","name":"EKANS","type":"software","techniques":["T1016","T1027","T1036.005","T1047","T1057","T1486","T1489","T1490","T1562.001"]},{"id":"S0064","name":"ELMER","type":"software","techniques":["T1057","T1071.001","T1083"]},{"id":"S0568","name":"EVILNUM","type":"software","techniques":["T1033","T1041","T1047","T1070","T1070.006","T1082","T1102.003","T1105","T1112","T1218.010","T1218.011","T1518.001","T1539","T1547.001"]},{"id":"S0377","name":"Ebury","type":"software","techniques":["T1008","T1014","T1020","T1027","T1041","T1059.004","T1059.006","T1071.004","T1129","T1132.001","T1140","T1552.004","T1553.002","T1554","T1556","T1556.003","T1562.001","T1562.006","T1562.012","T1568.002","T1573.001","T1574.006"]},{"id":"S0624","name":"Ecipekac","type":"software","techniques":["T1027","T1105","T1140","T1553.002","T1574.001"]},{"id":"S0554","name":"Egregor","type":"software","techniques":["T1027.002","T1033","T1036.004","T1039","T1049","T1055","T1059.001","T1059.003","T1069.002","T1071.001","T1082","T1105","T1106","T1124","T1140","T1197","T1218.010","T1218.011","T1219","T1484.001","T1486","T1497","T1497.003","T1562.001","T1574.001"]},{"id":"S0081","name":"Elise","type":"software","techniques":["T1007","T1016","T1027.013","T1036.005","T1055.001","T1057","T1070.004","T1070.006","T1071.001","T1074.001","T1082","T1083","T1087.001","T1105","T1132.001","T1218.011","T1543.003","T1547.001","T1573.001"]},{"id":"S1247","name":"Embargo","type":"software","techniques":["T1007","T1027.013","T1053.005","T1057","T1059.003","T1068","T1070.004","T1083","T1106","T1112","T1135","T1140","T1480.002","T1486","T1489","T1490","T1543.003","T1547.001","T1562.009","T1569.002","T1657","T1679"]},{"id":"S0082","name":"Emissary","type":"software","techniques":["T1007","T1016","T1027.001","T1027.013","T1055.001","T1059.003","T1069.001","T1071.001","T1082","T1105","T1218.011","T1543.003","T1547.001","T1573.001","T1615"]},{"id":"S0367","name":"Emotet","type":"software","techniques":["T1003.001","T1016.002","T1021.002","T1027.001","T1027.002","T1027.009","T1027.010","T1027.013","T1033","T1036.004","T1040","T1041","T1047","T1053.005","T1055.001","T1055.012","T1057","T1059.001","T1059.003","T1059.005","T1071.001","T1078.003","T1087.003","T1105","T1106","T1110.001","T1114","T1114.001","T1132.001","T1134.001","T1135","T1140","T1204.001","T1204.002","T1210","T1218.010","T1543.003","T1547.001","T1552.001","T1555.003","T1566.001","T1566.002","T1570","T1571","T1573","T1573.001","T1620"]},{"id":"S0363","name":"Empire","type":"software","techniques":["T1003.001","T1016","T1020","T1021.003","T1021.004","T1027.010","T1033","T1040","T1041","T1046","T1047","T1049","T1053.005","T1055","T1056.001","T1056.004","T1057","T1059","T1059.001","T1059.003","T1068","T1070.006","T1071.001","T1082","T1083","T1087.001","T1087.002","T1102.002","T1105","T1106","T1113","T1114.001","T1115","T1119","T1125","T1127.001","T1134","T1134.002","T1134.005","T1135","T1136.001","T1136.002","T1210","T1217","T1482","T1484.001","T1518.001","T1543.003","T1546.008","T1547.001","T1547.005","T1547.009","T1548.002","T1550.002","T1552.001","T1552.004","T1555.001","T1555.003","T1557.001","T1558.001","T1558.002","T1558.003","T1560","T1567.001","T1567.002","T1569.002","T1573.002","T1574.001","T1574.004","T1574.007","T1574.008","T1574.009","T1615"]},{"id":"S0634","name":"EnvyScout","type":"software","techniques":["T1005","T1027.006","T1027.013","T1036","T1059.003","T1059.007","T1082","T1140","T1187","T1204.002","T1218.011","T1480","T1564.001","T1566.001"]},{"id":"S0091","name":"Epic","type":"software","techniques":["T1007","T1012","T1016","T1018","T1027","T1033","T1049","T1055.011","T1057","T1069.001","T1070.004","T1071.001","T1082","T1083","T1087.001","T1124","T1518.001","T1553.002","T1560","T1560.002","T1573.001","T1680"]},{"id":"S0396","name":"EvilBunny","type":"software","techniques":["T1047","T1053.005","T1057","T1059.003","T1059.011","T1070.004","T1071.001","T1105","T1106","T1124","T1203","T1497.001","T1497.003","T1518.001","T1547.001"]},{"id":"S0152","name":"EvilGrab","type":"software","techniques":["T1056.001","T1113","T1123","T1125","T1547.001"]},{"id":"S0401","name":"Exaramel for Linux","type":"software","techniques":["T1008","T1027.013","T1033","T1053.003","T1059.004","T1070.004","T1071.001","T1105","T1140","T1543","T1543.002","T1548.001"]},{"id":"S0343","name":"Exaramel for Windows","type":"software","techniques":["T1027.011","T1036.004","T1059.003","T1059.005","T1074.001","T1112","T1543.003","T1560"]},{"id":"S1179","name":"Exbyte","type":"software","techniques":["T1069.001","T1070.004","T1083","T1106","T1140","T1480","T1497.001","T1518.001","T1567"]},{"id":"S0361","name":"Expand","type":"software","techniques":["T1140","T1564.004","T1570"]},{"id":"S0569","name":"Explosive","type":"software","techniques":["T1016","T1025","T1033","T1056.001","T1071.001","T1082","T1105","T1106","T1112","T1115","T1564.001","T1573.001"]},{"id":"S0181","name":"FALLCHILL","type":"software","techniques":["T1001.003","T1016","T1070.004","T1070.006","T1082","T1083","T1543.003","T1573.001","T1680"]},{"id":"S0267","name":"FELIXROOT","type":"software","techniques":["T1012","T1016","T1027.013","T1033","T1047","T1057","T1059.003","T1070.004","T1071.001","T1082","T1105","T1112","T1124","T1218.011","T1518.001","T1547.001","T1547.009","T1560","T1680"]},{"id":"S0618","name":"FIVEHANDS","type":"software","techniques":["T1027.013","T1047","T1059","T1083","T1135","T1140","T1486","T1490"]},{"id":"S0036","name":"FLASHFLOOD","type":"software","techniques":["T1005","T1025","T1074.001","T1083","T1547.001","T1560.003"]},{"id":"S1120","name":"FRAMESTING","type":"software","techniques":["T1001","T1001.003","T1059.006","T1071.001","T1140","T1505.003","T1554"]},{"id":"S1144","name":"FRP","type":"software","techniques":["T1046","T1049","T1059.007","T1071.001","T1090","T1090.003","T1095","T1572","T1573.001","T1573.002"]},{"id":"S0628","name":"FYAnti","type":"software","techniques":["T1027.002","T1083","T1105","T1140"]},{"id":"S0076","name":"FakeM","type":"software","techniques":["T1001.003","T1056.001","T1095","T1573.001"]},{"id":"S0512","name":"FatDuke","type":"software","techniques":["T1005","T1008","T1012","T1016","T1027","T1027.002","T1027.016","T1036.012","T1057","T1059.001","T1070.004","T1071.001","T1082","T1083","T1090.001","T1106","T1140","T1218.011","T1497.003","T1547.001","T1573.001"]},{"id":"S0171","name":"Felismus","type":"software","techniques":["T1016","T1033","T1036.005","T1059.003","T1071.001","T1082","T1105","T1132.001","T1518.001","T1573.001"]},{"id":"S0679","name":"Ferocious","type":"software","techniques":["T1059.001","T1059.005","T1070.004","T1082","T1112","T1120","T1497.001","T1518.001","T1546.015"]},{"id":"S0182","name":"FinFisher","type":"software","techniques":["T1012","T1027","T1027.002","T1027.016","T1036.005","T1055.001","T1056.004","T1057","T1070.001","T1082","T1083","T1113","T1134.001","T1140","T1497.001","T1518.001","T1542.003","T1543.003","T1547.001","T1548.002","T1574.001","T1574.013"]},{"id":"S0355","name":"Final1stspy","type":"software","techniques":["T1027","T1057","T1071.001","T1082","T1140","T1547.001"]},{"id":"S0696","name":"Flagpro","type":"software","techniques":["T1005","T1010","T1016","T1018","T1027","T1029","T1033","T1036","T1041","T1049","T1057","T1059.003","T1059.005","T1069.001","T1070","T1071.001","T1105","T1106","T1132.001","T1135","T1204.002","T1547.001","T1566.001","T1614.001"]},{"id":"S0143","name":"Flame","type":"software","techniques":["T1011.001","T1036.010","T1091","T1113","T1123","T1136.001","T1210","T1218.011","T1518.001","T1547.002"]},{"id":"S0381","name":"FlawedAmmyy","type":"software","techniques":["T1001","T1005","T1033","T1041","T1047","T1056","T1056.001","T1059.001","T1059.003","T1069.001","T1070.004","T1071.001","T1082","T1105","T1113","T1115","T1120","T1218.007","T1218.011","T1518.001","T1547.001","T1573.001"]},{"id":"S0661","name":"FoggyWeb","type":"software","techniques":["T1005","T1027.004","T1027.013","T1036","T1036.005","T1040","T1041","T1057","T1071.001","T1083","T1105","T1106","T1129","T1140","T1550","T1552.004","T1560.002","T1560.003","T1573.001","T1574.001","T1620"]},{"id":"S0193","name":"Forfiles","type":"software","techniques":["T1005","T1083","T1202"]},{"id":"S0503","name":"FrameworkPOS","type":"software","techniques":["T1005","T1048","T1057","T1074.001","T1560.003"]},{"id":"S0277","name":"FruitFly","type":"software","techniques":["T1027.010","T1057","T1070.004","T1083","T1113","T1543.001","T1564.001"]},{"id":"S1044","name":"FunnyDream","type":"software","techniques":["T1001","T1005","T1010","T1012","T1016","T1018","T1025","T1027.013","T1033","T1036.004","T1041","T1047","T1055.001","T1056.001","T1057","T1059.003","T1070","T1070.004","T1074.001","T1083","T1090","T1095","T1105","T1106","T1113","T1119","T1120","T1124","T1218.011","T1518.001","T1543.003","T1547.001","T1559.001","T1560.002","T1560.003","T1572","T1680"]},{"id":"S0410","name":"Fysbis","type":"software","techniques":["T1027.013","T1036.004","T1036.005","T1056.001","T1057","T1059.004","T1070.004","T1082","T1083","T1132.001","T1543.002","T1547.013"]},{"id":"S1117","name":"GLASSTOKEN","type":"software","techniques":["T1059.001","T1132.001","T1140","T1505.003"]},{"id":"S0026","name":"GLOOXMAIL","type":"software","techniques":["T1071.005","T1102.002"]},{"id":"S0417","name":"GRIFFON","type":"software","techniques":["T1053.005","T1059.001","T1059.007","T1069.002","T1082","T1113","T1124","T1547.001"]},{"id":"S0168","name":"Gazer","type":"software","techniques":["T1027.013","T1033","T1053.005","T1055","T1055.003","T1070.004","T1070.006","T1071.001","T1105","T1480.002","T1546.002","T1547.001","T1547.004","T1547.009","T1553.002","T1564.004","T1573.001","T1573.002"]},{"id":"S0666","name":"Gelsemium","type":"software","techniques":["T1005","T1008","T1012","T1027.011","T1027.015","T1027.016","T1033","T1036.001","T1036.005","T1055.001","T1057","T1059.003","T1070.004","T1070.006","T1071.001","T1071.004","T1082","T1083","T1095","T1105","T1106","T1112","T1134","T1140","T1497","T1518.001","T1543.003","T1547.001","T1547.012","T1548.002","T1559.001","T1568","T1620"]},{"id":"S0049","name":"GeminiDuke","type":"software","techniques":["T1007","T1016","T1057","T1071.001","T1083","T1087.001"]},{"id":"S0460","name":"Get2","type":"software","techniques":["T1033","T1055.001","T1057","T1059","T1071.001","T1082"]},{"id":"S1197","name":"GoBear","type":"software","techniques":["T1036.005","T1090","T1553.002"]},{"id":"S0249","name":"Gold Dragon","type":"software","techniques":["T1012","T1033","T1057","T1059.003","T1070.004","T1071.001","T1074.001","T1082","T1083","T1105","T1518.001","T1547.001","T1560","T1562.001"]},{"id":"S0597","name":"GoldFinder","type":"software","techniques":["T1016.001","T1071.001","T1119"]},{"id":"S0588","name":"GoldMax","type":"software","techniques":["T1001.001","T1016","T1027.002","T1027.013","T1036.004","T1036.005","T1041","T1053.003","T1053.005","T1059.003","T1071.001","T1105","T1124","T1140","T1497.001","T1497.003","T1564.011","T1573.002"]},{"id":"S0493","name":"GoldenSpy","type":"software","techniques":["T1027.013","T1036.005","T1041","T1059.003","T1070.004","T1071.001","T1082","T1083","T1105","T1106","T1136.001","T1195.002","T1497.003","T1543.003","T1571"]},{"id":"S1198","name":"Gomir","type":"software","techniques":["T1016","T1018","T1053.003","T1059.004","T1069.001","T1070.004","T1071.001","T1082","T1083","T1090.001","T1132.001","T1543.002","T1573","T1573.002"]},{"id":"S0477","name":"Goopy","type":"software","techniques":["T1005","T1027.001","T1027.016","T1033","T1036.005","T1041","T1053.005","T1057","T1059.003","T1059.005","T1070.008","T1071.001","T1071.003","T1071.004","T1106","T1140","T1562.001","T1574.001"]},{"id":"S1138","name":"Gootloader","type":"software","techniques":["T1016","T1027","T1055.002","T1055.012","T1059.001","T1059.007","T1069.002","T1082","T1105","T1132.001","T1140","T1204.001","T1497.003","T1547.001","T1584.001","T1584.006","T1614","T1614.001"]},{"id":"S0531","name":"Grandoreiro","type":"software","techniques":["T1010","T1016","T1027.001","T1027.011","T1027.013","T1033","T1036.005","T1041","T1056.001","T1057","T1059.005","T1070.004","T1071.001","T1082","T1087.003","T1102.001","T1102.002","T1105","T1106","T1112","T1115","T1124","T1140","T1176.001","T1185","T1189","T1204.001","T1204.002","T1218.007","T1222.001","T1497.001","T1518.001","T1539","T1547.001","T1547.009","T1548.002","T1555.003","T1562.001","T1562.004","T1562.013","T1566.002","T1568.002","T1573.002"]},{"id":"S0237","name":"GravityRAT","type":"software","techniques":["T1005","T1007","T1016","T1025","T1027.005","T1027.013","T1033","T1047","T1049","T1053.005","T1057","T1059.003","T1071.001","T1082","T1083","T1124","T1497.001","T1559.002","T1571"]},{"id":"S0690","name":"Green Lambert","type":"software","techniques":["T1005","T1016","T1027","T1036.004","T1036.005","T1037.004","T1059.004","T1070.004","T1071.004","T1082","T1090","T1124","T1140","T1543.001","T1543.004","T1546.004","T1547.015","T1555.001"]},{"id":"S0342","name":"GreyEnergy","type":"software","techniques":["T1003.001","T1007","T1027.002","T1027.013","T1055.002","T1056.001","T1059.003","T1070.004","T1071.001","T1090.003","T1105","T1112","T1218.011","T1543.003","T1553.002","T1573.001","T1573.002"]},{"id":"S0632","name":"GrimAgent","type":"software","techniques":["T1001.001","T1005","T1016","T1027","T1027.001","T1033","T1041","T1053.005","T1059.003","T1070.004","T1070.009","T1071.001","T1082","T1083","T1105","T1106","T1132.001","T1140","T1480.002","T1497.003","T1547.001","T1573.001","T1573.002","T1614","T1614.001"]},{"id":"S0561","name":"GuLoader","type":"software","techniques":["T1055","T1070.004","T1071.001","T1102","T1105","T1106","T1204.001","T1204.002","T1497.001","T1497.003","T1547.001","T1566.002"]},{"id":"S0132","name":"H1N1","type":"software","techniques":["T1027","T1027.002","T1059.003","T1080","T1091","T1105","T1132","T1490","T1548.002","T1555.003","T1562.001","T1562.004","T1573.001"]},{"id":"S0151","name":"HALFBAKED","type":"software","techniques":["T1047","T1057","T1059.001","T1070.004","T1082","T1113"]},{"id":"S0037","name":"HAMMERTOSS","type":"software","techniques":["T1001.002","T1059.001","T1071.001","T1102.003","T1564.003","T1567.002","T1573.001"]},{"id":"S0214","name":"HAPPYWORK","type":"software","techniques":["T1033","T1082","T1105"]},{"id":"S0246","name":"HARDRAIN","type":"software","techniques":["T1001.003","T1059.003","T1090","T1562.004","T1571"]},{"id":"S0391","name":"HAWKBALL","type":"software","techniques":["T1027.013","T1033","T1041","T1059.003","T1070.004","T1071.001","T1082","T1106","T1203","T1559.002","T1560.003"]},{"id":"S0061","name":"HDoor","type":"software","techniques":["T1046","T1562.001"]},{"id":"S0617","name":"HELLOKITTY","type":"software","techniques":["T1047","T1057","T1135","T1486","T1490","T1680"]},{"id":"S0135","name":"HIDEDRV","type":"software","techniques":["T1014","T1055.001"]},{"id":"S1230","name":"HIUPAN","type":"software","techniques":["T1057","T1091","T1112","T1120","T1204.002","T1547.001","T1564.001","T1574.001","T1678"]},{"id":"S0232","name":"HOMEFRY","type":"software","techniques":["T1003","T1027.013","T1059.003"]},{"id":"S0376","name":"HOPLIGHT","type":"software","techniques":["T1003.002","T1008","T1012","T1041","T1047","T1055","T1059.003","T1082","T1083","T1090","T1105","T1112","T1124","T1132.001","T1546.003","T1550.002","T1562.004","T1569.002","T1571","T1652","T1680"]},{"id":"S0040","name":"HTRAN","type":"software","techniques":["T1014","T1055","T1090"]},{"id":"S0070","name":"HTTPBrowser","type":"software","techniques":["T1027","T1036.005","T1056.001","T1059.003","T1070.004","T1071.001","T1071.004","T1083","T1105","T1547.001","T1574.001"]},{"id":"S1097","name":"HUI Loader","type":"software","techniques":["T1140","T1562.006","T1574.001"]},{"id":"S0047","name":"Hacking Team UEFI Rootkit","type":"software","techniques":["T1014","T1542.001"]},{"id":"S0499","name":"Hancitor","type":"software","techniques":["T1027","T1027.015","T1059.001","T1070.004","T1105","T1106","T1140","T1204.001","T1204.002","T1218.012","T1497","T1547.001","T1566.001","T1566.002"]},{"id":"S1211","name":"Hannotog","type":"software","techniques":["T1020","T1059.003","T1105","T1489","T1543.003","T1562.004","T1571"]},{"id":"S1229","name":"Havoc","type":"software","techniques":["T1005","T1016","T1016.001","T1018","T1033","T1055.001","T1055.002","T1057","T1059.001","T1059.003","T1071.001","T1071.002","T1082","T1083","T1087","T1090","T1105","T1106","T1113","T1134.001","T1204.004","T1497.003","T1559","T1566.002","T1570","T1573.001"]},{"id":"S0170","name":"Helminth","type":"software","techniques":["T1027.013","T1030","T1053.005","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1069.001","T1069.002","T1071.001","T1071.004","T1074.001","T1105","T1115","T1119","T1132.001","T1547.001","T1547.009","T1553.002","T1573.001"]},{"id":"S0697","name":"HermeticWiper","type":"software","techniques":["T1027.015","T1036.005","T1053.005","T1059.003","T1070","T1070.001","T1070.004","T1082","T1083","T1106","T1112","T1134","T1140","T1484.001","T1485","T1489","T1490","T1497.003","T1529","T1543.003","T1553.002","T1561.001","T1561.002","T1562.006","T1569.002","T1680"]},{"id":"S0698","name":"HermeticWizard","type":"software","techniques":["T1018","T1021.002","T1027.013","T1036.005","T1046","T1047","T1059.003","T1070.001","T1106","T1110.001","T1218.010","T1218.011","T1553.002","T1559.001","T1569.002","T1570"]},{"id":"S1249","name":"HexEval Loader","type":"software","techniques":["T1016","T1027.013","T1033","T1036.005","T1041","T1056.001","T1059.007","T1071.001","T1082","T1105","T1140","T1614"]},{"id":"S1027","name":"Heyoka Backdoor","type":"software","techniques":["T1007","T1027.013","T1036.004","T1055.001","T1057","T1070.004","T1071.004","T1083","T1120","T1140","T1204.002","T1218.011","T1547.001","T1572","T1680"]},{"id":"S0087","name":"Hi-Zor","type":"software","techniques":["T1027.013","T1059.003","T1070.004","T1071.001","T1105","T1218.010","T1547.001","T1573.001","T1573.002"]},{"id":"S0394","name":"HiddenWasp","type":"software","techniques":["T1014","T1027.013","T1037.004","T1059.003","T1095","T1105","T1136.001","T1140","T1573.001","T1574.006"]},{"id":"S0009","name":"Hikit","type":"software","techniques":["T1005","T1014","T1059.003","T1071.001","T1090.001","T1105","T1553.004","T1553.006","T1566","T1573.001","T1574.001"]},{"id":"S0601","name":"Hildegard","type":"software","techniques":["T1014","T1027.002","T1027.013","T1036.004","T1046","T1059.004","T1068","T1070.003","T1070.004","T1071","T1082","T1102","T1105","T1133","T1136.001","T1140","T1219","T1496.001","T1543.002","T1552.001","T1552.004","T1552.005","T1562.001","T1574.006","T1609","T1611","T1613"]},{"id":"S0431","name":"HotCroissant","type":"software","techniques":["T1007","T1010","T1016","T1027.002","T1027.013","T1033","T1041","T1053.005","T1057","T1059.003","T1070.004","T1082","T1083","T1105","T1106","T1113","T1489","T1518","T1564.003","T1573.001"]},{"id":"S0203","name":"Hydraq","type":"software","techniques":["T1005","T1007","T1012","T1016","T1027","T1048","T1057","T1070.001","T1070.004","T1082","T1083","T1105","T1112","T1113","T1129","T1134","T1543.003","T1569.002","T1573.001"]},{"id":"S0398","name":"HyperBro","type":"software","techniques":["T1007","T1027.002","T1027.013","T1055","T1070.004","T1071.001","T1105","T1106","T1113","T1140","T1569.002","T1574.001"]},{"id":"S0537","name":"HyperStack","type":"software","techniques":["T1078.001","T1087.001","T1106","T1112","T1559","T1573.001"]},{"id":"S1152","name":"IMAPLoader","type":"software","techniques":["T1047","T1053.005","T1071.003","T1082","T1105","T1106","T1543","T1564.003","T1574.014"]},{"id":"S1139","name":"INC Ransomware","type":"software","techniques":["T1047","T1057","T1083","T1106","T1120","T1135","T1140","T1486","T1489","T1490","T1491.001","T1566","T1570","T1652","T1680"]},{"id":"S1132","name":"IPsec Helper","type":"software","techniques":["T1005","T1027.013","T1041","T1057","T1059.001","T1059.003","T1059.005","T1070","T1070.004","T1070.009","T1071.001","T1112","T1497.003","T1569.002","T1570"]},{"id":"S0189","name":"ISMInjector","type":"software","techniques":["T1027","T1053.005","T1055.012","T1140"]},{"id":"S1022","name":"IceApple","type":"software","techniques":["T1003.002","T1003.004","T1005","T1016","T1027.010","T1036.005","T1041","T1056.003","T1070.004","T1071.001","T1082","T1083","T1087.002","T1140","T1505.004","T1552.002","T1560.001","T1573.001","T1620"]},{"id":"S0483","name":"IcedID","type":"software","techniques":["T1016","T1027.002","T1027.003","T1027.009","T1027.013","T1036.005","T1047","T1048.002","T1053.005","T1055.004","T1055.012","T1059.005","T1069","T1071.001","T1082","T1087.002","T1105","T1106","T1135","T1185","T1189","T1204.002","T1218.007","T1218.011","T1482","T1497","T1518.001","T1547.001","T1566.001","T1573.002","T1614.001"]},{"id":"S0434","name":"Imminent Monitor","type":"software","techniques":["T1021.001","T1027","T1041","T1056.001","T1057","T1059","T1070.004","T1083","T1106","T1123","T1125","T1140","T1496.001","T1555.003","T1562.001","T1564.001"]},{"id":"S0357","name":"Impacket","type":"software","techniques":["T1003.001","T1003.002","T1003.003","T1003.004","T1040","T1047","T1557.001","T1558.003","T1558.005","T1569.002","T1570"]},{"id":"S0604","name":"Industroyer","type":"software","techniques":["T1012","T1016","T1018","T1027","T1041","T1046","T1071.001","T1078","T1082","T1083","T1090.003","T1105","T1140","T1485","T1489","T1499.004","T1543.003","T1554","T1572"]},{"id":"S0259","name":"InnaputRAT","type":"software","techniques":["T1027","T1036.004","T1036.005","T1059.003","T1070.004","T1082","T1083","T1106","T1543.003","T1547.001","T1680"]},{"id":"S0260","name":"InvisiMole","type":"software","techniques":["T1001.003","T1005","T1007","T1008","T1010","T1012","T1016","T1025","T1027","T1027.005","T1033","T1036.004","T1036.005","T1046","T1053.005","T1055","T1055.002","T1055.004","T1055.015","T1056.001","T1057","T1059.003","T1059.007","T1068","T1070.004","T1070.005","T1070.006","T1071.001","T1071.004","T1074.001","T1080","T1082","T1083","T1087.001","T1090.001","T1090.002","T1095","T1105","T1106","T1112","T1113","T1119","T1123","T1124","T1125","T1132.002","T1135","T1140","T1203","T1204.002","T1210","T1218.002","T1218.011","T1480.001","T1490","T1497.001","T1518","T1518.001","T1543.003","T1547.001","T1547.009","T1548.002","T1559.001","T1560.001","T1560.002","T1560.003","T1562.004","T1564.001","T1564.003","T1569.002","T1573.001","T1574.001","T1680"]},{"id":"S1245","name":"InvisibleFerret","type":"software","techniques":["T1005","T1016","T1027.013","T1033","T1041","T1048.003","T1056","T1056.001","T1057","T1059.001","T1059.006","T1071.001","T1074.001","T1082","T1083","T1087.001","T1095","T1105","T1115","T1140","T1219","T1489","T1518","T1543.001","T1547.001","T1547.013","T1555.003","T1555.005","T1560.001","T1564.003","T1567","T1571","T1614","T1657","T1679"]},{"id":"S0231","name":"Invoke-PSImage","type":"software","techniques":["T1027.003","T1027.009"]},{"id":"S0581","name":"IronNetInjector","type":"software","techniques":["T1027.013","T1036.004","T1053.005","T1055","T1055.001","T1057","T1059.006","T1140"]},{"id":"S0015","name":"Ixeshe","type":"software","techniques":["T1005","T1007","T1016","T1033","T1036.005","T1057","T1059.003","T1070.004","T1071.001","T1082","T1083","T1105","T1132.001","T1547.001","T1564.001"]},{"id":"S1203","name":"J-magic","type":"software","techniques":["T1016","T1036.005","T1040","T1059.004","T1070.003","T1095","T1205","T1573.002"]},{"id":"S0389","name":"JCry","type":"software","techniques":["T1059.001","T1059.003","T1059.005","T1204.002","T1486","T1490","T1547.001"]},{"id":"S0044","name":"JHUHUGIT","type":"software","techniques":["T1008","T1016","T1027.013","T1037.001","T1053.005","T1055","T1057","T1059.003","T1068","T1070.004","T1071.001","T1105","T1113","T1115","T1132.001","T1218.011","T1543.003","T1546.015","T1547.001","T1680"]},{"id":"S0201","name":"JPIN","type":"software","techniques":["T1007","T1012","T1016","T1027","T1033","T1055","T1056.001","T1057","T1059.003","T1069.001","T1070.004","T1071.002","T1071.003","T1082","T1083","T1105","T1197","T1222.001","T1518.001","T1562.001"]},{"id":"S0648","name":"JSS Loader","type":"software","techniques":["T1053.005","T1059.001","T1059.005","T1059.007","T1105","T1204.002","T1566.001"]},{"id":"S0163","name":"Janicab","type":"software","techniques":["T1053.003","T1113","T1123","T1553.002"]},{"id":"S0528","name":"Javali","type":"software","techniques":["T1027.001","T1057","T1059.005","T1102.001","T1105","T1204.001","T1204.002","T1218.007","T1555.003","T1566.001","T1566.002","T1574.001"]},{"id":"S1206","name":"JumbledPath","type":"software","techniques":["T1040","T1070.002","T1104","T1560","T1562","T1665"]},{"id":"S0215","name":"KARAE","type":"software","techniques":["T1082","T1102.002","T1105","T1189"]},{"id":"S0271","name":"KEYMARBLE","type":"software","techniques":["T1016","T1057","T1059.003","T1070.004","T1082","T1083","T1105","T1112","T1113","T1573.001","T1680"]},{"id":"S1051","name":"KEYPLUG","type":"software","techniques":["T1027.013","T1071.001","T1090","T1095","T1102.001","T1124","T1140","T1573.002"]},{"id":"S0526","name":"KGH_SPY","type":"software","techniques":["T1005","T1027.013","T1036.005","T1037.001","T1041","T1056.001","T1059.001","T1059.003","T1071.001","T1074.001","T1083","T1105","T1114.001","T1140","T1204.002","T1518","T1555","T1555.003","T1555.004","T1680"]},{"id":"S0669","name":"KOCTOPUS","type":"software","techniques":["T1027.010","T1036.005","T1059.001","T1059.003","T1059.005","T1070.009","T1082","T1090","T1105","T1106","T1112","T1140","T1204.001","T1204.002","T1547.001","T1548.002","T1562.001","T1564.003","T1566.001","T1566.002"]},{"id":"S0156","name":"KOMPROGO","type":"software","techniques":["T1047","T1059.003","T1082"]},{"id":"S0356","name":"KONNI","type":"software","techniques":["T1005","T1016","T1027.002","T1027.013","T1033","T1036.004","T1036.005","T1041","T1048.003","T1049","T1056.001","T1057","T1059.001","T1059.003","T1059.007","T1070.004","T1071.001","T1082","T1083","T1105","T1106","T1112","T1113","T1115","T1132.001","T1134.002","T1134.004","T1140","T1204.002","T1218.011","T1543.003","T1546.015","T1547.001","T1547.009","T1548.002","T1555.003","T1560","T1566.001","T1573.001","T1680"]},{"id":"S1075","name":"KOPILUWAK","type":"software","techniques":["T1005","T1016","T1033","T1041","T1049","T1057","T1059.007","T1071.001","T1074.001","T1135","T1204.002","T1566.001","T1680"]},{"id":"S1190","name":"Kapeka","type":"software","techniques":["T1012","T1027.013","T1036.008","T1053.005","T1059.003","T1070.009","T1071.001","T1082","T1090","T1106","T1112","T1132.001","T1140","T1218.011"]},{"id":"S0088","name":"Kasidet","type":"software","techniques":["T1056.001","T1057","T1059.003","T1082","T1083","T1105","T1113","T1518.001","T1547.001","T1562.004"]},{"id":"S0265","name":"Kazuar","type":"software","techniques":["T1005","T1008","T1010","T1016","T1027","T1029","T1033","T1047","T1055.001","T1057","T1059.003","T1059.004","T1069.001","T1070.004","T1071.001","T1071.002","T1074.001","T1082","T1083","T1087.001","T1090.001","T1102.002","T1105","T1113","T1125","T1132.001","T1485","T1543.003","T1547.001","T1547.009","T1680"]},{"id":"S0585","name":"Kerrdown","type":"software","techniques":["T1027.013","T1027.015","T1059.005","T1082","T1105","T1140","T1204.001","T1204.002","T1566.001","T1566.002","T1574.001"]},{"id":"S0487","name":"Kessel","type":"software","techniques":["T1016","T1027.013","T1030","T1041","T1048.003","T1059","T1082","T1090","T1105","T1132.001","T1140","T1554","T1556","T1560"]},{"id":"S1020","name":"Kevin","type":"software","techniques":["T1001.001","T1005","T1008","T1016","T1027.013","T1030","T1036.003","T1041","T1059.003","T1070.004","T1071.001","T1071.004","T1074","T1082","T1105","T1106","T1132.001","T1497","T1546.003","T1564.003","T1572"]},{"id":"S0387","name":"KeyBoy","type":"software","techniques":["T1001.003","T1016","T1027.013","T1056.001","T1059.001","T1059.003","T1059.005","T1059.006","T1070.006","T1082","T1083","T1105","T1113","T1543.003","T1547.004","T1555.003","T1559.002","T1564.003"]},{"id":"S0276","name":"Keydnap","type":"software","techniques":["T1036.006","T1056.002","T1059.006","T1071.001","T1090.003","T1543.001","T1548.001","T1555.002","T1564.009"]},{"id":"S0607","name":"KillDisk","type":"software","techniques":["T1027","T1036.004","T1057","T1070.001","T1070.004","T1083","T1106","T1129","T1134","T1485","T1486","T1489","T1529","T1561.002","T1680"]},{"id":"S0599","name":"Kinsing","type":"software","techniques":["T1018","T1021.004","T1053.003","T1057","T1059.004","T1071.001","T1078","T1083","T1105","T1110","T1133","T1222.002","T1496.001","T1552.003","T1552.004","T1609","T1610"]},{"id":"S0437","name":"Kivars","type":"software","techniques":["T1021","T1056.001","T1070.004","T1083","T1105","T1113","T1564.003"]},{"id":"S0250","name":"Koadic","type":"software","techniques":["T1003.002","T1003.003","T1005","T1016","T1021.001","T1033","T1046","T1047","T1053.005","T1055.001","T1059.001","T1059.003","T1059.005","T1071.001","T1082","T1083","T1105","T1115","T1135","T1218.005","T1218.010","T1218.011","T1547.001","T1548.002","T1564.003","T1569.002","T1573.002"]},{"id":"S0641","name":"Kobalos","type":"software","techniques":["T1016","T1027","T1048","T1056","T1059.004","T1070.003","T1070.006","T1074","T1082","T1090.003","T1140","T1205","T1554","T1573.001","T1573.002"]},{"id":"S0162","name":"Komplex","type":"software","techniques":["T1033","T1057","T1070.004","T1071.001","T1543.001","T1564.001","T1573.001"]},{"id":"S0236","name":"Kwampirs","type":"software","techniques":["T1007","T1008","T1016","T1018","T1021.002","T1027.001","T1027.013","T1033","T1036.004","T1049","T1057","T1069.001","T1069.002","T1082","T1083","T1087.001","T1105","T1135","T1140","T1201","T1218.011","T1543.003"]},{"id":"S1119","name":"LIGHTWIRE","type":"software","techniques":["T1071.001","T1140","T1505.003","T1554","T1573.001"]},{"id":"S1121","name":"LITTLELAMB.WOOLTEA","type":"software","techniques":["T1082","T1083","T1090","T1095","T1543","T1554","T1573.002"]},{"id":"S0042","name":"LOWBALL","type":"software","techniques":["T1071.001","T1102.002","T1105"]},{"id":"S0349","name":"LaZagne","type":"software","techniques":["T1003.001","T1003.004","T1003.005","T1003.007","T1003.008","T1552.001","T1555","T1555.001","T1555.003","T1555.004"]},{"id":"S1160","name":"Latrodectus","type":"software","techniques":["T1005","T1016","T1021.005","T1027.001","T1027.002","T1027.007","T1027.013","T1033","T1036.005","T1041","T1047","T1053.005","T1057","T1059.003","T1059.007","T1069.002","T1070.004","T1071.001","T1082","T1083","T1087.002","T1102","T1104","T1105","T1106","T1132.001","T1135","T1140","T1204.001","T1204.002","T1218.007","T1218.011","T1482","T1497.001","T1518.001","T1529","T1547.001","T1559.001","T1564.004","T1566.001","T1566.002","T1573.001","T1622"]},{"id":"S0395","name":"LightNeuron","type":"software","techniques":["T1001.002","T1005","T1016","T1020","T1027.013","T1029","T1036.005","T1041","T1059.003","T1070.004","T1071.003","T1074.001","T1082","T1105","T1106","T1114.002","T1119","T1140","T1505.002","T1560","T1565.002","T1573.001"]},{"id":"S1185","name":"LightSpy","type":"software","techniques":["T1027.001","T1027.013","T1041","T1046","T1057","T1071.001","T1082","T1083","T1105","T1113","T1123","T1129","T1217","T1480","T1518","T1555.001"]},{"id":"S1186","name":"Line Dancer","type":"software","techniques":["T1014","T1040","T1041","T1059.008","T1071.001","T1082","T1140","T1562.003","T1653"]},{"id":"S1188","name":"Line Runner","type":"software","techniques":["T1027.015","T1041","T1059.011","T1070.004","T1071.001","T1505.003","T1557","T1653"]},{"id":"S0211","name":"Linfo","type":"software","techniques":["T1005","T1008","T1029","T1057","T1059.003","T1070.004","T1082","T1083","T1105"]},{"id":"S0362","name":"Linux Rabbit","type":"software","techniques":["T1033","T1078","T1110.003","T1132","T1133","T1546.004"]},{"id":"S0513","name":"LiteDuke","type":"software","techniques":["T1012","T1016","T1027.002","T1027.003","T1033","T1070.004","T1071.001","T1082","T1105","T1140","T1497.003","T1518.001","T1547.001"]},{"id":"S0680","name":"LitePower","type":"software","techniques":["T1012","T1033","T1041","T1053.005","T1059.001","T1071.001","T1082","T1105","T1106","T1113","T1518.001","T1680"]},{"id":"S0681","name":"Lizar","type":"software","techniques":["T1003.001","T1016","T1027","T1033","T1049","T1055","T1055.001","T1055.002","T1057","T1059.001","T1059.003","T1059.006","T1082","T1087.003","T1095","T1105","T1106","T1113","T1132.002","T1140","T1217","T1518.001","T1555.003","T1555.004","T1560","T1573","T1588.002","T1620"]},{"id":"S1101","name":"LoFiSe","type":"software","techniques":["T1005","T1074.001","T1083","T1119","T1560","T1574.001"]},{"id":"S0397","name":"LoJax","type":"software","techniques":["T1014","T1112","T1542.001","T1547.001","T1564.004"]},{"id":"S1199","name":"LockBit 2.0","type":"software","techniques":["T1021.002","T1047","T1053.005","T1057","T1059.001","T1059.003","T1070.001","T1070.004","T1082","T1083","T1112","T1120","T1135","T1136","T1140","T1480","T1484.001","T1486","T1489","T1490","T1547.001","T1548.002","T1562.001","T1564.003","T1614.001","T1680"]},{"id":"S1202","name":"LockBit 3.0","type":"software","techniques":["T1021.002","T1027.002","T1027.013","T1057","T1059.001","T1070.001","T1070.004","T1071.001","T1078.003","T1082","T1083","T1106","T1112","T1120","T1132.001","T1135","T1140","T1218.003","T1480","T1480.002","T1484.001","T1486","T1489","T1490","T1543.003","T1547.004","T1548.002","T1562.001","T1562.009","T1569.002","T1573.001","T1614.001","T1622","T1680"]},{"id":"S0372","name":"LockerGoga","type":"software","techniques":["T1070.004","T1486","T1529","T1531","T1553.002","T1562.001","T1570"]},{"id":"S0447","name":"Lokibot","type":"software","techniques":["T1016","T1027","T1027.002","T1033","T1041","T1053","T1053.005","T1055.012","T1056.001","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1082","T1083","T1105","T1106","T1112","T1140","T1204.002","T1497.003","T1548.002","T1555","T1555.003","T1564.001","T1566.001","T1620"]},{"id":"S0582","name":"LookBack","type":"software","techniques":["T1007","T1036.005","T1057","T1059.003","T1059.005","T1070.004","T1071.001","T1083","T1095","T1113","T1140","T1489","T1529","T1547.001","T1573.001","T1574.001"]},{"id":"S0451","name":"LoudMiner","type":"software","techniques":["T1016","T1027.010","T1027.013","T1057","T1059.003","T1059.004","T1070.004","T1082","T1105","T1189","T1218.007","T1496.001","T1543.003","T1543.004","T1564.001","T1564.006","T1569.001","T1569.002"]},{"id":"S0532","name":"Lucifer","type":"software","techniques":["T1012","T1016","T1021.002","T1027.002","T1033","T1046","T1047","T1049","T1053.005","T1057","T1059.003","T1070.001","T1071","T1082","T1105","T1110.001","T1140","T1210","T1496.001","T1497.001","T1498","T1547.001","T1570","T1573.001"]},{"id":"S1213","name":"Lumma Stealer","type":"software","techniques":["T1027","T1027.013","T1036.008","T1041","T1055.012","T1059.001","T1059.006","T1059.010","T1071.001","T1074.001","T1082","T1113","T1119","T1140","T1176.001","T1195","T1204","T1204.002","T1217","T1218.005","T1218.015","T1497.001","T1518.001","T1539","T1547.001","T1553.002","T1555.003","T1562.001","T1564.003","T1566.001","T1566.002","T1573.002","T1574.001","T1620","T1622"]},{"id":"S1143","name":"LunarLoader","type":"software","techniques":["T1016","T1137.006","T1140","T1480","T1620"]},{"id":"S1142","name":"LunarMail","type":"software","techniques":["T1001.002","T1027.013","T1041","T1059.005","T1070.004","T1070.008","T1071.003","T1074.001","T1082","T1083","T1095","T1113","T1114.001","T1137.006","T1140","T1204.002","T1543"]},{"id":"S1141","name":"LunarWeb","type":"software","techniques":["T1001.002","T1016","T1027.013","T1030","T1033","T1047","T1049","T1057","T1059.001","T1059.003","T1069.001","T1070.004","T1071.001","T1082","T1083","T1090","T1104","T1132.001","T1135","T1140","T1497.003","T1518","T1518.001","T1559","T1560.001","T1560.002","T1572","T1573.001","T1573.002","T1615"]},{"id":"S0010","name":"Lurid","type":"software","techniques":["T1560","T1573.001"]},{"id":"S0500","name":"MCMD","type":"software","techniques":["T1005","T1027","T1036.005","T1053.005","T1059.003","T1070.009","T1071.001","T1105","T1547.001","T1564.003"]},{"id":"S1220","name":"MEDUSA","type":"software","techniques":["T1014","T1027.013","T1563.001","T1574.006"]},{"id":"S0443","name":"MESSAGETAP","type":"software","techniques":["T1040","T1049","T1070.004","T1074.001","T1083","T1119","T1140","T1560.003"]},{"id":"S1221","name":"MOPSLED","type":"software","techniques":["T1027.013","T1071.001","T1095","T1102","T1102.001","T1140"]},{"id":"S0233","name":"MURKYTOP","type":"software","techniques":["T1018","T1046","T1053.002","T1059.003","T1069","T1070.004","T1082","T1087.001","T1135"]},{"id":"S1016","name":"MacMa","type":"software","techniques":["T1005","T1016","T1021","T1033","T1041","T1056.001","T1057","T1059.004","T1070.002","T1070.004","T1070.006","T1074.001","T1082","T1083","T1095","T1105","T1106","T1113","T1123","T1140","T1543.001","T1553.001","T1553.002","T1555.001","T1571","T1573","T1680"]},{"id":"S0282","name":"MacSpy","type":"software","techniques":["T1056.001","T1070.004","T1071.001","T1090.003","T1113","T1115","T1123","T1543.001","T1564.001"]},{"id":"S0409","name":"Machete","type":"software","techniques":["T1005","T1008","T1010","T1016","T1016.002","T1020","T1025","T1027.002","T1027.010","T1029","T1036.004","T1036.005","T1041","T1052.001","T1053.005","T1056.001","T1057","T1059.006","T1070.004","T1071.001","T1071.002","T1074.001","T1082","T1083","T1105","T1113","T1115","T1120","T1123","T1125","T1132.001","T1140","T1217","T1547.001","T1552.004","T1555.003","T1560","T1560.003","T1564.001","T1573.001","T1573.002"]},{"id":"S1060","name":"Mafalda","type":"software","techniques":["T1003.001","T1005","T1012","T1016","T1027.013","T1033","T1041","T1049","T1056","T1057","T1059.001","T1059.003","T1070.001","T1071.001","T1074.001","T1082","T1083","T1090.001","T1095","T1105","T1106","T1112","T1113","T1132.001","T1133","T1134","T1134.003","T1140","T1205.001","T1217","T1518.001","T1552.004","T1569.002","T1573.001","T1622","T1680"]},{"id":"S1182","name":"MagicRAT","type":"software","techniques":["T1016","T1027.013","T1036.005","T1036.008","T1041","T1053.005","T1059.003","T1070.004","T1071.001","T1082","T1105","T1140","T1547.001"]},{"id":"S0413","name":"MailSniper","type":"software","techniques":["T1087.003","T1110.003","T1114.002"]},{"id":"S1169","name":"Mango","type":"software","techniques":["T1027.013","T1033","T1041","T1053.005","T1071.001","T1082","T1083","T1106","T1132.001","T1204.002","T1562.001","T1573.001","T1573.002"]},{"id":"S1156","name":"Manjusaka","type":"software","techniques":["T1016","T1041","T1059.003","T1071.001","T1082","T1083","T1113","T1132.001","T1555","T1555.003"]},{"id":"S0652","name":"MarkiRAT","type":"software","techniques":["T1005","T1033","T1036.005","T1041","T1056.001","T1057","T1059.003","T1071.001","T1074.001","T1082","T1083","T1105","T1106","T1113","T1115","T1197","T1518","T1518.001","T1547.001","T1547.009","T1555.005","T1614.001"]},{"id":"S0167","name":"Matryoshka","type":"software","techniques":["T1027","T1053.005","T1055.001","T1056.001","T1059","T1071.004","T1113","T1218.011","T1547.001","T1555"]},{"id":"S0449","name":"Maze","type":"software","techniques":["T1027","T1027.016","T1036.004","T1047","T1049","T1053.005","T1055.001","T1057","T1059.003","T1070","T1071.001","T1082","T1106","T1218.007","T1486","T1489","T1490","T1529","T1547.001","T1562.001","T1564.006","T1568","T1614.001"]},{"id":"S0459","name":"MechaFlounder","type":"software","techniques":["T1033","T1036.005","T1041","T1059.003","T1059.006","T1071.001","T1105","T1132.001"]},{"id":"S1244","name":"Medusa Ransomware","type":"software","techniques":["T1007","T1027.013","T1057","T1059.001","T1059.003","T1070.004","T1082","T1083","T1106","T1124","T1135","T1140","T1486","T1489","T1490","T1518.001","T1543.003","T1559","T1562.001","T1564.003","T1679","T1680"]},{"id":"S0576","name":"MegaCortex","type":"software","techniques":["T1055.001","T1059.003","T1083","T1106","T1112","T1134","T1140","T1218.011","T1486","T1489","T1490","T1497.001","T1531","T1561.001","T1562.001","T1588.003"]},{"id":"S1191","name":"Megazord","type":"software","techniques":["T1057","T1059.003","T1083","T1486","T1489","T1654"]},{"id":"S0530","name":"Melcoz","type":"software","techniques":["T1027.002","T1059.005","T1059.010","T1105","T1115","T1185","T1204.001","T1218.007","T1555.003","T1565.002","T1566.002","T1574.001"]},{"id":"S0455","name":"Metamorfo","type":"software","techniques":["T1010","T1027.002","T1027.013","T1033","T1036.005","T1041","T1055.001","T1056.001","T1056.002","T1057","T1059.003","T1059.005","T1059.007","T1070","T1070.004","T1071.001","T1082","T1083","T1095","T1102.001","T1102.003","T1105","T1106","T1112","T1113","T1115","T1119","T1124","T1129","T1140","T1204.002","T1218.005","T1218.007","T1497","T1518","T1518.001","T1547.001","T1553.002","T1562.001","T1564.003","T1565.002","T1566.001","T1571","T1573.001","T1573.002","T1574.001"]},{"id":"S0688","name":"Meteor","type":"software","techniques":["T1036.004","T1047","T1053.005","T1057","T1059.001","T1059.003","T1070.001","T1070.004","T1082","T1105","T1106","T1484.001","T1485","T1489","T1490","T1491.001","T1518.001","T1531","T1562.001","T1564.003"]},{"id":"S1146","name":"MgBot","type":"software","techniques":["T1003","T1005","T1018","T1025","T1033","T1046","T1056.001","T1057","T1087.001","T1087.002","T1115","T1123","T1213.006","T1482","T1539","T1555","T1555.003"]},{"id":"S0339","name":"Micropsia","type":"software","techniques":["T1027.013","T1033","T1047","T1056.001","T1059.003","T1071.001","T1082","T1083","T1105","T1113","T1119","T1123","T1518.001","T1547.009","T1560.001","T1564.001"]},{"id":"S1015","name":"Milan","type":"software","techniques":["T1005","T1012","T1016","T1027.013","T1033","T1036","T1036.007","T1053.005","T1059.003","T1070.004","T1071.001","T1071.004","T1074.001","T1082","T1087.001","T1105","T1106","T1559.001","T1568.002","T1572"]},{"id":"S0002","name":"Mimikatz","type":"software","techniques":["T1003.001","T1003.002","T1003.004","T1003.006","T1098","T1134.005","T1207","T1547.005","T1550.002","T1550.003","T1552.004","T1555","T1555.003","T1555.004","T1558.001","T1558.002","T1649"]},{"id":"S0051","name":"MiniDuke","type":"software","techniques":["T1008","T1027","T1071.001","T1082","T1083","T1090.001","T1102.001","T1105","T1568.002"]},{"id":"S0280","name":"MirageFox","type":"software","techniques":["T1033","T1059.003","T1082","T1140","T1574.001"]},{"id":"S0084","name":"Mis-Type","type":"software","techniques":["T1005","T1008","T1016","T1033","T1036.005","T1041","T1055","T1059.003","T1071.001","T1074.001","T1082","T1087.001","T1095","T1105","T1106","T1132.001","T1136.001","T1547"]},{"id":"S0083","name":"Misdat","type":"software","techniques":["T1005","T1027.002","T1036.005","T1041","T1059.003","T1070.004","T1070.006","T1070.009","T1082","T1083","T1095","T1105","T1106","T1132.001","T1547","T1614.001"]},{"id":"S1122","name":"Mispadu","type":"software","techniques":["T1027.013","T1041","T1055","T1056.001","T1056.002","T1057","T1059.005","T1082","T1083","T1106","T1113","T1115","T1140","T1176.001","T1204.002","T1217","T1218.007","T1218.011","T1497.001","T1518.001","T1547.001","T1555","T1555.003","T1566.002","T1573.002","T1614.001"]},{"id":"S0080","name":"Mivast","type":"software","techniques":["T1003.002","T1059.003","T1105","T1547.001"]},{"id":"S0079","name":"MobileOrder","type":"software","techniques":["T1005","T1041","T1057","T1082","T1083","T1105","T1217"]},{"id":"S0553","name":"MoleNet","type":"software","techniques":["T1047","T1059.001","T1059.003","T1082","T1105","T1518.001","T1547.001"]},{"id":"S1137","name":"Moneybird","type":"software","techniques":["T1027.009","T1486"]},{"id":"S1026","name":"Mongall","type":"software","techniques":["T1005","T1027.002","T1041","T1055.001","T1071.001","T1082","T1105","T1120","T1132.001","T1140","T1204.002","T1218.011","T1547.001","T1573.001","T1680"]},{"id":"S0149","name":"MoonWind","type":"software","techniques":["T1016","T1033","T1056.001","T1057","T1059.003","T1070.004","T1074.001","T1082","T1083","T1095","T1120","T1124","T1543.003","T1571","T1573.001"]},{"id":"S0284","name":"More_eggs","type":"software","techniques":["T1016","T1016.001","T1027.013","T1033","T1059.003","T1070.004","T1071.001","T1082","T1105","T1132.001","T1140","T1218.010","T1518.001","T1553.002","T1573.001"]},{"id":"S1047","name":"Mori","type":"software","techniques":["T1001.001","T1012","T1070.004","T1071.001","T1071.004","T1112","T1132.001","T1140","T1218.010"]},{"id":"S0256","name":"Mosquito","type":"software","techniques":["T1016","T1027.011","T1027.013","T1033","T1047","T1057","T1059.001","T1059.003","T1070.004","T1105","T1106","T1112","T1218.011","T1518.001","T1546.015","T1547.001","T1573.001"]},{"id":"S1135","name":"MultiLayer Wiper","type":"software","techniques":["T1027.009","T1053.005","T1059.003","T1070","T1070.001","T1070.004","T1070.006","T1083","T1485","T1490","T1529","T1561.002","T1562.001","T1565.001"]},{"id":"S0699","name":"Mythic","type":"software","techniques":["T1008","T1030","T1071.001","T1071.002","T1071.004","T1090.001","T1090.002","T1090.004","T1095","T1119","T1132","T1572","T1573.002"]},{"id":"S0590","name":"NBTscan","type":"software","techniques":["T1016","T1018","T1033","T1040","T1046"]},{"id":"S0272","name":"NDiskMonitor","type":"software","techniques":["T1033","T1082","T1083","T1105","T1573.001"]},{"id":"S0034","name":"NETEAGLE","type":"software","techniques":["T1008","T1041","T1057","T1059.003","T1071","T1071.001","T1083","T1095","T1547.001","T1568","T1573.001"]},{"id":"S0198","name":"NETWIRE","type":"software","techniques":["T1010","T1016","T1027","T1027.002","T1027.011","T1036.001","T1036.005","T1049","T1053.003","T1053.005","T1055","T1055.012","T1056.001","T1057","T1059.001","T1059.003","T1059.004","T1059.005","T1071.001","T1074.001","T1082","T1083","T1090","T1095","T1102","T1105","T1106","T1112","T1113","T1119","T1204.001","T1204.002","T1543.001","T1547.001","T1547.013","T1547.015","T1555","T1555.003","T1560","T1560.003","T1564.001","T1566.001","T1566.002","T1573","T1573.001"]},{"id":"S1106","name":"NGLite","type":"software","techniques":["T1016","T1033","T1071.001","T1090.003","T1573.001"]},{"id":"S1192","name":"NICECURL","type":"software","techniques":["T1059","T1070.004","T1071.001","T1105","T1573.002"]},{"id":"S1107","name":"NKAbuse","type":"software","techniques":["T1016.001","T1053.003","T1057","T1059.004","T1082","T1090.003","T1113","T1498"]},{"id":"S0353","name":"NOKKI","type":"software","techniques":["T1016","T1027","T1033","T1036.005","T1056.004","T1070.004","T1071.001","T1071.002","T1074.001","T1082","T1105","T1124","T1140","T1218.011","T1547.001","T1680"]},{"id":"S1131","name":"NPPSPY","type":"software","techniques":["T1005","T1056","T1112","T1119","T1552","T1557","T1656"]},{"id":"S0205","name":"Naid","type":"software","techniques":["T1016","T1082","T1112","T1543.003"]},{"id":"S0228","name":"NanHaiShu","type":"software","techniques":["T1016","T1027.013","T1033","T1059.005","T1059.007","T1070.004","T1071.004","T1082","T1105","T1218.005","T1547.001","T1562.001"]},{"id":"S0336","name":"NanoCore","type":"software","techniques":["T1016","T1027","T1056.001","T1059.003","T1059.005","T1105","T1112","T1123","T1125","T1547.001","T1562.001","T1562.004","T1573.001"]},{"id":"S0637","name":"NativeZone","type":"software","techniques":["T1036","T1140","T1204.002","T1218.011","T1480","T1497.001"]},{"id":"S0247","name":"NavRAT","type":"software","techniques":["T1055","T1056.001","T1057","T1059.003","T1071.003","T1074.001","T1082","T1105","T1547.001"]},{"id":"S0630","name":"Nebulae","type":"software","techniques":["T1005","T1036.004","T1036.005","T1057","T1059.003","T1070.004","T1083","T1095","T1105","T1106","T1543.003","T1547.001","T1573.001","T1574.001","T1680"]},{"id":"S1189","name":"Neo-reGeorg","type":"software","techniques":["T1059.006","T1071.001","T1090","T1095","T1105","T1132.002","T1505.003","T1572"]},{"id":"S0691","name":"Neoichor","type":"software","techniques":["T1005","T1016","T1016.001","T1033","T1070","T1071.001","T1082","T1105","T1112","T1559.001","T1614.001"]},{"id":"S0210","name":"Nerex","type":"software","techniques":["T1105","T1112","T1543.003","T1553.002"]},{"id":"S0039","name":"Net","type":"software","techniques":["T1007","T1018","T1021.002","T1049","T1069.001","T1069.002","T1070.005","T1087.001","T1087.002","T1098.007","T1124","T1135","T1136.001","T1136.002","T1201","T1569.002"]},{"id":"S0056","name":"Net Crawler","type":"software","techniques":["T1003.001","T1021.002","T1110.002","T1569.002"]},{"id":"S0033","name":"NetTraveler","type":"software","techniques":["T1010","T1056.001"]},{"id":"S0457","name":"Netwalker","type":"software","techniques":["T1027.009","T1027.010","T1047","T1055.001","T1059.001","T1059.003","T1082","T1105","T1106","T1112","T1140","T1486","T1489","T1490","T1518.001","T1562.001","T1569.002","T1570"]},{"id":"S0118","name":"Nidiran","type":"software","techniques":["T1036.004","T1105","T1543.003"]},{"id":"S1090","name":"NightClub","type":"software","techniques":["T1005","T1010","T1027","T1036.004","T1036.005","T1041","T1056.001","T1057","T1070.006","T1071.003","T1071.004","T1074.001","T1083","T1105","T1106","T1112","T1113","T1120","T1123","T1132.002","T1543.003"]},{"id":"S1147","name":"Nightdoor","type":"software","techniques":["T1016","T1033","T1053.005","T1057","T1059.003","T1070.004","T1071","T1082","T1102","T1124","T1140","T1497.001","T1574","T1680"]},{"id":"S1100","name":"Ninja","type":"software","techniques":["T1001","T1001.003","T1016","T1027.013","T1027.015","T1029","T1036.005","T1055","T1057","T1070.006","T1071.001","T1082","T1083","T1090.001","T1090.003","T1095","T1106","T1132.002","T1140","T1204.002","T1218.011","T1480.001","T1543.003","T1559","T1566.003","T1573.001","T1574.001","T1680"]},{"id":"S0359","name":"Nltest","type":"software","techniques":["T1016","T1018","T1482"]},{"id":"S0368","name":"NotPetya","type":"software","techniques":["T1003.001","T1021.002","T1036","T1047","T1053.005","T1070.001","T1078.003","T1083","T1210","T1218.011","T1486","T1518.001","T1529","T1569.002"]},{"id":"S1170","name":"ODAgent","type":"software","techniques":["T1041","T1059.003","T1070.004","T1083","T1102.002","T1105","T1106","T1140","T1567.002"]},{"id":"S0138","name":"OLDBAIT","type":"software","techniques":["T1027","T1036.005","T1071.001","T1071.003","T1555","T1555.003"]},{"id":"S0165","name":"OSInfo","type":"software","techniques":["T1012","T1016","T1018","T1049","T1069.001","T1069.002","T1082","T1087.001","T1087.002","T1135"]},{"id":"S0402","name":"OSX/Shlayer","type":"software","techniques":["T1036.005","T1059.004","T1082","T1083","T1105","T1140","T1176.001","T1204.002","T1222.002","T1548.004","T1553.001","T1564","T1564.001","T1564.009","T1564.011"]},{"id":"S0352","name":"OSX_OCEANLOTUS.D","type":"software","techniques":["T1005","T1016","T1027.002","T1027.013","T1036.004","T1036.008","T1059.001","T1059.004","T1059.005","T1070.004","T1070.006","T1071.001","T1082","T1095","T1105","T1129","T1132.001","T1140","T1222.002","T1497.001","T1543.001","T1543.004","T1553.001","T1560.002","T1560.003","T1564.001","T1571","T1573.001"]},{"id":"S0644","name":"ObliqueRAT","type":"software","techniques":["T1025","T1027.003","T1030","T1033","T1057","T1074.001","T1082","T1083","T1113","T1120","T1125","T1204.001","T1497.001","T1547.001"]},{"id":"S0346","name":"OceanSalt","type":"software","techniques":["T1016","T1057","T1059.003","T1070.004","T1082","T1083","T1132.002","T1566.001"]},{"id":"S0340","name":"Octopus","type":"software","techniques":["T1005","T1016","T1033","T1036.005","T1041","T1047","T1071.001","T1074.001","T1082","T1083","T1105","T1113","T1132.001","T1204.002","T1547.001","T1560.001","T1566.001","T1567.002","T1680"]},{"id":"S1172","name":"OilBooster","type":"software","techniques":["T1008","T1033","T1041","T1059.003","T1071.001","T1074.001","T1082","T1102.002","T1105","T1106","T1140","T1559","T1564.003","T1567.002","T1573.002"]},{"id":"S1171","name":"OilCheck","type":"software","techniques":["T1102.002","T1105","T1567"]},{"id":"S0439","name":"Okrum","type":"software","techniques":["T1001","T1001.003","T1003.001","T1003.005","T1016","T1027.003","T1033","T1036.004","T1041","T1049","T1053.005","T1056.001","T1059.003","T1070.004","T1071.001","T1082","T1083","T1090.002","T1105","T1124","T1132.001","T1134.001","T1140","T1497.001","T1497.002","T1497.003","T1543.003","T1547.001","T1547.009","T1560.001","T1560.003","T1564.001","T1569.002","T1573.001"]},{"id":"S0365","name":"Olympic Destroyer","type":"software","techniques":["T1003.001","T1016","T1018","T1021.002","T1047","T1070.001","T1135","T1485","T1489","T1490","T1529","T1555.003","T1569.002","T1570"]},{"id":"S0052","name":"OnionDuke","type":"software","techniques":["T1003","T1071.001","T1102.003","T1140","T1499"]},{"id":"S0264","name":"OopsIE","type":"software","techniques":["T1027","T1027.002","T1030","T1041","T1047","T1053.005","T1059.003","T1059.005","T1070.004","T1071.001","T1074.001","T1082","T1105","T1124","T1132.001","T1140","T1497.001","T1560.001","T1560.003"]},{"id":"S0229","name":"Orz","type":"software","techniques":["T1016","T1027","T1055.012","T1057","T1059.003","T1070","T1082","T1083","T1102.002","T1105","T1112","T1218.010","T1518"]},{"id":"S0594","name":"Out1","type":"software","techniques":["T1005","T1027","T1059.003","T1071.001","T1114.001"]},{"id":"S1017","name":"OutSteel","type":"software","techniques":["T1005","T1020","T1036.005","T1041","T1057","T1059.003","T1059.010","T1070.004","T1071.001","T1083","T1105","T1119","T1204.001","T1204.002","T1566.001","T1566.002","T1570"]},{"id":"S0072","name":"OwaAuth","type":"software","techniques":["T1036.005","T1056.001","T1070.006","T1071.001","T1083","T1505.003","T1505.004","T1560.003"]},{"id":"S0598","name":"P.A.S. Webshell","type":"software","techniques":["T1005","T1027","T1046","T1059","T1070.004","T1071.001","T1083","T1087.001","T1105","T1110.001","T1140","T1213.006","T1222.002","T1505.003","T1518"]},{"id":"S0626","name":"P8RAT","type":"software","techniques":["T1001.001","T1057","T1105","T1497.001","T1497.003"]},{"id":"S1109","name":"PACEMAKER","type":"software","techniques":["T1003.007","T1055.008","T1059.004","T1074.001","T1083","T1119"]},{"id":"S1233","name":"PAKLOG","type":"software","techniques":["T1010","T1027.013","T1056.001","T1057","T1074.001","T1106","T1115","T1124","T1553.002","T1574.001"]},{"id":"S0158","name":"PHOREAL","type":"software","techniques":["T1059.003","T1095","T1112"]},{"id":"S1123","name":"PITSTOP","type":"software","techniques":["T1059.004","T1140","T1205.002","T1559","T1573.002"]},{"id":"S0254","name":"PLAINTEE","type":"software","techniques":["T1016","T1057","T1059.003","T1082","T1105","T1112","T1547.001","T1548.002","T1573.001"]},{"id":"S0435","name":"PLEAD","type":"software","techniques":["T1001.001","T1010","T1057","T1059.003","T1070.004","T1071.001","T1083","T1090","T1105","T1106","T1204.001","T1204.002","T1555","T1555.003","T1573.001"]},{"id":"S0216","name":"POORAIM","type":"software","techniques":["T1057","T1082","T1083","T1102.002","T1113","T1189"]},{"id":"S0150","name":"POSHSPY","type":"software","techniques":["T1027","T1030","T1059.001","T1070.006","T1105","T1546.003","T1568.002","T1573.002"]},{"id":"S0145","name":"POWERSOURCE","type":"software","techniques":["T1012","T1059.001","T1071.004","T1105","T1547.001","T1564.004"]},{"id":"S0223","name":"POWERSTATS","type":"software","techniques":["T1005","T1016","T1027.010","T1027.016","T1029","T1033","T1036.004","T1047","T1053.005","T1057","T1059.001","T1059.005","T1059.007","T1070.004","T1082","T1087.001","T1090.002","T1105","T1113","T1132.001","T1140","T1218.005","T1518.001","T1559.001","T1559.002","T1562.001","T1573.002"]},{"id":"S0371","name":"POWERTON","type":"software","techniques":["T1003.002","T1059.001","T1071.001","T1546.003","T1547.001","T1573.001"]},{"id":"S0184","name":"POWRUNER","type":"software","techniques":["T1012","T1016","T1033","T1047","T1049","T1053.005","T1057","T1059.001","T1059.003","T1069.001","T1069.002","T1071.001","T1071.004","T1082","T1083","T1087.002","T1105","T1113","T1132.001","T1518.001"]},{"id":"S0613","name":"PS1","type":"software","techniques":["T1027.013","T1055.001","T1059.001","T1105","T1140"]},{"id":"S1228","name":"PUBLOAD","type":"software","techniques":["T1001.003","T1007","T1012","T1016","T1016.001","T1016.002","T1027","T1027.015","T1033","T1036.005","T1047","T1048.003","T1049","T1053.005","T1057","T1059.003","T1071.001","T1071.002","T1082","T1105","T1106","T1124","T1140","T1205","T1480.001","T1518","T1518.001","T1547.001","T1553.002","T1560.001","T1573.001","T1574.001","T1614.001","T1622","T1680"]},{"id":"S1108","name":"PULSECHECK","type":"software","techniques":["T1059.004","T1071.001","T1132.001","T1505.003"]},{"id":"S0196","name":"PUNCHBUGGY","type":"software","techniques":["T1027","T1036.005","T1059.001","T1059.006","T1070.004","T1071.001","T1074.001","T1082","T1087.001","T1105","T1129","T1140","T1218.011","T1518.001","T1546.009","T1547.001","T1560.001"]},{"id":"S0197","name":"PUNCHTRACK","type":"software","techniques":["T1005","T1027","T1074.001"]},{"id":"S1091","name":"Pacu","type":"software","techniques":["T1049","T1059.009","T1069.003","T1078.004","T1087.004","T1098.001","T1119","T1518.001","T1526","T1530","T1546","T1552","T1555.006","T1562.007","T1562.008","T1578.001","T1580","T1619","T1648","T1651","T1654"]},{"id":"S0664","name":"Pandora","type":"software","techniques":["T1027.015","T1055","T1057","T1068","T1071.001","T1105","T1112","T1205","T1543.003","T1553.006","T1569.002","T1573.001","T1574.001"]},{"id":"S0208","name":"Pasam","type":"software","techniques":["T1005","T1057","T1070.004","T1082","T1083","T1105","T1547.008","T1680"]},{"id":"S0556","name":"Pay2Key","type":"software","techniques":["T1016","T1070.004","T1082","T1090.001","T1095","T1486","T1489","T1573.002"]},{"id":"S1050","name":"PcShare","type":"software","techniques":["T1005","T1012","T1016","T1027.013","T1027.015","T1036.001","T1036.005","T1041","T1055","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1106","T1112","T1113","T1125","T1140","T1218.011","T1546.015"]},{"id":"S1102","name":"Pcexter","type":"software","techniques":["T1005","T1083","T1567.002","T1574.001"]},{"id":"S0683","name":"Peirates","type":"software","techniques":["T1046","T1078.004","T1528","T1530","T1550.001","T1552.005","T1552.007","T1609","T1610","T1611","T1613","T1619"]},{"id":"S0587","name":"Penquin","type":"software","techniques":["T1016","T1027.005","T1027.013","T1036.005","T1040","T1041","T1053.003","T1059.004","T1070.004","T1082","T1083","T1095","T1105","T1205","T1205.002","T1222.002","T1573.002","T1680"]},{"id":"S0643","name":"Peppy","type":"software","techniques":["T1020","T1056.001","T1059.003","T1071.001","T1083","T1105","T1113"]},{"id":"S1145","name":"Pikabot","type":"software","techniques":["T1016","T1027.003","T1027.009","T1027.011","T1041","T1055.002","T1055.003","T1059.003","T1082","T1087.001","T1106","T1132.001","T1140","T1480.001","T1482","T1497.001","T1547.001","T1571","T1573.001","T1620","T1622"]},{"id":"S0517","name":"Pillowmint","type":"software","techniques":["T1005","T1012","T1027","T1027.011","T1027.015","T1055.004","T1057","T1059.001","T1070.004","T1070.009","T1106","T1112","T1140","T1546.011","T1560"]},{"id":"S0048","name":"PinchDuke","type":"software","techniques":["T1003","T1005","T1071.001","T1082","T1083","T1555","T1555.003"]},{"id":"S1031","name":"PingPull","type":"software","techniques":["T1005","T1016","T1036.004","T1041","T1059.003","T1070.006","T1071.001","T1082","T1083","T1095","T1132.001","T1140","T1543.003","T1571","T1573.001"]},{"id":"S0501","name":"PipeMon","type":"software","techniques":["T1008","T1016","T1027.011","T1027.013","T1036.005","T1055.001","T1057","T1082","T1095","T1105","T1106","T1112","T1124","T1129","T1134.002","T1134.004","T1140","T1518.001","T1543.003","T1547.012","T1548.002","T1553.002","T1573.001"]},{"id":"S0124","name":"Pisloader","type":"software","techniques":["T1016","T1027","T1059.003","T1071.004","T1082","T1083","T1105","T1132.001","T1547.001"]},{"id":"S1162","name":"Playcrypt","type":"software","techniques":["T1083","T1486","T1490"]},{"id":"S0013","name":"PlugX","type":"software","techniques":["T1012","T1016","T1027","T1027.001","T1027.007","T1027.013","T1033","T1036.004","T1036.005","T1041","T1049","T1053.005","T1056.001","T1057","T1059.003","T1070.004","T1070.009","T1071.001","T1071.004","T1074.001","T1082","T1083","T1091","T1095","T1102.001","T1105","T1106","T1112","T1113","T1120","T1124","T1127.001","T1135","T1140","T1204.002","T1480.002","T1497.001","T1543.003","T1547.001","T1562.004","T1564.001","T1564.003","T1571","T1573.001","T1574.001","T1614","T1620","T1622","T1680"]},{"id":"S0428","name":"PoetRAT","type":"software","techniques":["T1003.001","T1018","T1027","T1027.010","T1033","T1041","T1048","T1048.003","T1056.001","T1057","T1059.003","T1059.005","T1059.006","T1059.011","T1070.004","T1071.001","T1071.002","T1082","T1083","T1105","T1112","T1113","T1119","T1125","T1140","T1204.002","T1497.001","T1547.001","T1555.003","T1559.002","T1560.001","T1564.001","T1566.001","T1571","T1573.002"]},{"id":"S0012","name":"PoisonIvy","type":"software","techniques":["T1005","T1010","T1014","T1027","T1055.001","T1056.001","T1059.003","T1074.001","T1105","T1112","T1480.002","T1543.003","T1547.001","T1547.014","T1573.001"]},{"id":"S0518","name":"PolyglotDuke","type":"software","techniques":["T1027","T1027.003","T1027.011","T1071.001","T1102.001","T1105","T1106","T1112","T1140","T1218.011"]},{"id":"S0453","name":"Pony","type":"software","techniques":["T1027.015","T1027.016","T1036","T1059.003","T1070.004","T1071.001","T1082","T1087.001","T1105","T1106","T1110.001","T1204.001","T1204.002","T1497.003","T1566.001","T1566.002"]},{"id":"S0378","name":"PoshC2","type":"software","techniques":["T1003.001","T1007","T1016","T1040","T1046","T1047","T1049","T1055","T1056.001","T1068","T1069.001","T1071.001","T1082","T1083","T1087.001","T1087.002","T1090","T1110","T1119","T1134","T1134.002","T1201","T1210","T1482","T1546.003","T1548.002","T1550.002","T1552.001","T1555","T1557.001","T1560.001","T1569.002"]},{"id":"S1046","name":"PowGoop","type":"software","techniques":["T1036","T1036.005","T1059.001","T1071.001","T1132.002","T1140","T1573","T1574.001"]},{"id":"S0139","name":"PowerDuke","type":"software","techniques":["T1010","T1016","T1027.003","T1033","T1057","T1059.003","T1070.004","T1082","T1083","T1105","T1124","T1218.011","T1485","T1547.001","T1564.004"]},{"id":"S1173","name":"PowerExchange","type":"software","techniques":["T1041","T1059.001","T1071.003","T1105","T1140"]},{"id":"S1012","name":"PowerLess","type":"software","techniques":["T1005","T1056.001","T1059.001","T1074.001","T1105","T1140","T1217","T1560","T1573"]},{"id":"S0685","name":"PowerPunch","type":"software","techniques":["T1027.010","T1059.001","T1105","T1480.001"]},{"id":"S0441","name":"PowerShower","type":"software","techniques":["T1016","T1033","T1041","T1057","T1059.001","T1059.005","T1070.004","T1071.001","T1082","T1112","T1132.001","T1547.001","T1560.001","T1564.003"]},{"id":"S0194","name":"PowerSploit","type":"software","techniques":["T1003.001","T1005","T1012","T1027.005","T1027.010","T1047","T1053.005","T1055.001","T1056.001","T1057","T1059.001","T1087.001","T1113","T1123","T1134","T1482","T1543.003","T1547.001","T1547.005","T1552.002","T1552.006","T1555.004","T1558.003","T1574.001","T1574.007","T1574.008","T1574.009","T1620"]},{"id":"S0393","name":"PowerStallion","type":"software","techniques":["T1027","T1057","T1059.001","T1070.006","T1102.002"]},{"id":"S1058","name":"Prestige","type":"software","techniques":["T1053.005","T1059.001","T1083","T1106","T1112","T1484.001","T1486","T1489","T1490"]},{"id":"S0113","name":"Prikormka","type":"software","techniques":["T1016","T1025","T1027.013","T1033","T1056.001","T1070.004","T1074.001","T1082","T1083","T1113","T1120","T1132.001","T1218.011","T1518.001","T1547.001","T1555","T1555.003","T1560","T1573.001","T1574.001"]},{"id":"S0654","name":"ProLock","type":"software","techniques":["T1027.003","T1047","T1068","T1070.004","T1197","T1486","T1490"]},{"id":"S0279","name":"Proton","type":"software","techniques":["T1021.005","T1056.001","T1056.002","T1059.004","T1070.002","T1070.004","T1113","T1140","T1543.001","T1548.003","T1555.001","T1555.003","T1555.005","T1560","T1562.001"]},{"id":"S0238","name":"Proxysvc","type":"software","techniques":["T1005","T1012","T1016","T1041","T1057","T1059.003","T1070.004","T1071.001","T1082","T1083","T1119","T1124","T1485","T1569.002","T1680"]},{"id":"S0029","name":"PsExec","type":"software","techniques":["T1021.002","T1136.002","T1543.003","T1569.002","T1570"]},{"id":"S0078","name":"Psylo","type":"software","techniques":["T1041","T1070.006","T1071.001","T1083","T1105"]},{"id":"S0147","name":"Pteranodon","type":"software","techniques":["T1027.007","T1041","T1053.005","T1059.003","T1059.005","T1070.004","T1071.001","T1074.001","T1083","T1105","T1106","T1113","T1140","T1218.005","T1218.011","T1497","T1547.001"]},{"id":"S0192","name":"Pupy","type":"software","techniques":["T1003.001","T1003.004","T1003.005","T1016","T1021.001","T1033","T1041","T1046","T1049","T1055.001","T1056.001","T1057","T1059.001","T1059.006","T1070.001","T1071.001","T1082","T1083","T1087.001","T1105","T1113","T1114.001","T1123","T1125","T1134.001","T1135","T1136.001","T1136.002","T1497.001","T1543.002","T1547.001","T1547.013","T1548.002","T1550.003","T1552.001","T1555","T1555.003","T1557.001","T1560.001","T1569.002","T1573.002"]},{"id":"S1032","name":"PyDCrypt","type":"software","techniques":["T1027.013","T1033","T1036.005","T1047","T1049","T1059.001","T1059.003","T1059.006","T1070.004","T1140","T1562.004"]},{"id":"S0583","name":"Pysa","type":"software","techniques":["T1003.001","T1016","T1021.001","T1036.005","T1046","T1059.001","T1059.006","T1070.004","T1110","T1112","T1486","T1489","T1490","T1552.001","T1562.001","T1569.002"]},{"id":"S0269","name":"QUADAGENT","type":"software","techniques":["T1008","T1012","T1016","T1027.010","T1027.011","T1033","T1036.005","T1053.005","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1071.004","T1112","T1132.001","T1140"]},{"id":"S1076","name":"QUIETCANARY","type":"software","techniques":["T1012","T1016","T1071.001","T1074","T1106","T1132.001","T1140","T1564.003","T1573.001"]},{"id":"S1084","name":"QUIETEXIT","type":"software","techniques":["T1008","T1036.005","T1071","T1090.002","T1095"]},{"id":"S0650","name":"QakBot","type":"software","techniques":["T1005","T1010","T1016","T1016.001","T1018","T1027","T1027.001","T1027.002","T1027.005","T1027.006","T1027.010","T1027.011","T1033","T1036.008","T1041","T1047","T1049","T1053.005","T1055","T1055.012","T1056.001","T1057","T1059.001","T1059.003","T1059.005","T1059.007","T1069.001","T1070.004","T1071.001","T1074.001","T1082","T1083","T1090.002","T1091","T1095","T1105","T1106","T1110","T1112","T1114.001","T1120","T1124","T1132.001","T1135","T1140","T1185","T1204.001","T1204.002","T1210","T1218.007","T1218.010","T1218.011","T1482","T1497.001","T1497.003","T1518","T1518.001","T1539","T1543.003","T1547.001","T1553.002","T1553.005","T1555.003","T1562.001","T1564.001","T1566.001","T1566.002","T1568.002","T1572","T1573.001","T1574.001"]},{"id":"S1242","name":"Qilin","type":"software","techniques":["T1003.001","T1007","T1012","T1016","T1018","T1021.002","T1027.013","T1053.005","T1055.001","T1057","T1059.001","T1070.001","T1070.004","T1083","T1087.001","T1106","T1112","T1134","T1135","T1190","T1204.001","T1204.002","T1222","T1480","T1480.002","T1484.001","T1486","T1489","T1490","T1491.001","T1529","T1547.001","T1547.004","T1548.002","T1562.001","T1562.009","T1566.001","T1566.002","T1673","T1680"]},{"id":"S0262","name":"QuasarRAT","type":"software","techniques":["T1005","T1016","T1021.001","T1033","T1053.005","T1056.001","T1059.003","T1082","T1090","T1095","T1105","T1112","T1125","T1547.001","T1548.002","T1552.001","T1553.002","T1555","T1555.003","T1564.001","T1564.003","T1571","T1573.001","T1614"]},{"id":"S1209","name":"Quick Assist","type":"software","techniques":["T1071.001","T1113","T1125"]},{"id":"S0686","name":"QuietSieve","type":"software","techniques":["T1005","T1016.001","T1071.001","T1083","T1105","T1113","T1120","T1135","T1564.003"]},{"id":"S1113","name":"RAPIDPULSE","type":"software","techniques":["T1005","T1027.013","T1140","T1505.003"]},{"id":"S0055","name":"RARSTONE","type":"software","techniques":["T1055.001","T1083","T1095","T1105"]},{"id":"S0241","name":"RATANKBA","type":"software","techniques":["T1007","T1012","T1016","T1018","T1033","T1047","T1049","T1055.001","T1057","T1059.001","T1059.003","T1071.001","T1082","T1087.001","T1105"]},{"id":"S0662","name":"RCSession","type":"software","techniques":["T1005","T1027.011","T1027.015","T1033","T1036","T1055.012","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1082","T1095","T1105","T1106","T1112","T1113","T1218.007","T1547.001","T1548.002","T1573","T1574.001"]},{"id":"S0495","name":"RDAT","type":"software","techniques":["T1001","T1001.002","T1008","T1027.003","T1030","T1036.004","T1036.005","T1041","T1059.003","T1070.004","T1071.001","T1071.003","T1071.004","T1105","T1113","T1132.001","T1132.002","T1140","T1543.003","T1573.001"]},{"id":"S0416","name":"RDFSNIFFER","type":"software","techniques":["T1056.004","T1070.004","T1106"]},{"id":"S1219","name":"REPTILE","type":"software","techniques":["T1014","T1059.004","T1095","T1140","T1205","T1205.001","T1543.004","T1546.017","T1547.006","T1564.001","T1573.002"]},{"id":"S0496","name":"REvil","type":"software","techniques":["T1007","T1012","T1027.011","T1027.013","T1036.005","T1041","T1047","T1055","T1059.001","T1059.003","T1059.005","T1069.002","T1070.004","T1071.001","T1082","T1083","T1105","T1106","T1112","T1134.001","T1134.002","T1140","T1189","T1204.002","T1480.002","T1485","T1486","T1489","T1490","T1562.001","T1562.009","T1566.001","T1573.002","T1614.001","T1680"]},{"id":"S0258","name":"RGDoor","type":"software","techniques":["T1033","T1059.003","T1071.001","T1105","T1140","T1505.004","T1560.003"]},{"id":"S1222","name":"RIFLESPINE","type":"software","techniques":["T1059.004","T1071.001","T1074.001","T1082","T1102.002","T1105","T1140","T1543.002","T1567.002","T1573.001"]},{"id":"S0003","name":"RIPTIDE","type":"software","techniques":["T1071.001","T1573.001"]},{"id":"S1150","name":"ROADSWEEP","type":"software","techniques":["T1027.013","T1059.003","T1070.004","T1083","T1120","T1140","T1480","T1486","T1489","T1490","T1491.001","T1547.001","T1553.002","T1559","T1680"]},{"id":"S0684","name":"ROADTools","type":"software","techniques":["T1018","T1069.003","T1078.004","T1087.004","T1119","T1526"]},{"id":"S0240","name":"ROKRAT","type":"software","techniques":["T1005","T1010","T1012","T1027","T1033","T1041","T1055","T1056.001","T1057","T1059.005","T1070.004","T1071.001","T1082","T1083","T1102.002","T1105","T1106","T1112","T1113","T1115","T1123","T1140","T1204.002","T1480.001","T1497.001","T1555.003","T1555.004","T1566.001","T1567.002","T1622"]},{"id":"S0148","name":"RTM","type":"software","techniques":["T1027","T1027.015","T1033","T1036","T1036.004","T1053.005","T1056.001","T1057","T1059.003","T1070.004","T1070.009","T1071.001","T1082","T1083","T1102.001","T1105","T1106","T1112","T1113","T1115","T1119","T1120","T1124","T1204.002","T1218.011","T1219","T1497","T1518","T1518.001","T1547.001","T1548.002","T1553.002","T1553.004","T1559.002","T1566.001","T1568","T1571","T1573.001"]},{"id":"S1148","name":"Raccoon Stealer","type":"software","techniques":["T1005","T1012","T1020","T1027.007","T1027.013","T1033","T1041","T1070.004","T1071.001","T1082","T1083","T1087.001","T1105","T1113","T1119","T1124","T1140","T1195","T1213","T1518","T1539","T1555.003","T1560","T1614"]},{"id":"S0481","name":"Ragnar Locker","type":"software","techniques":["T1059.003","T1120","T1218.007","T1218.010","T1218.011","T1486","T1489","T1490","T1543.003","T1562.001","T1564.006","T1569.002","T1614"]},{"id":"S0565","name":"Raindrop","type":"software","techniques":["T1027.002","T1027.003","T1027.013","T1036","T1036.005","T1140","T1497.003"]},{"id":"S0629","name":"RainyDay","type":"software","techniques":["T1005","T1007","T1008","T1027.013","T1036.004","T1036.005","T1053.005","T1057","T1059.003","T1070.004","T1071.001","T1074.001","T1083","T1090","T1095","T1105","T1106","T1113","T1140","T1543.003","T1555.003","T1555.004","T1567.002","T1573.001","T1574.001"]},{"id":"S0458","name":"Ramsay","type":"software","techniques":["T1005","T1014","T1016","T1025","T1027","T1027.003","T1036","T1036.005","T1039","T1046","T1049","T1053.005","T1055.001","T1057","T1059.005","T1071.001","T1074.001","T1080","T1083","T1091","T1106","T1113","T1119","T1120","T1132.001","T1135","T1140","T1203","T1204.002","T1546.010","T1547.001","T1548.002","T1559.001","T1559.002","T1560.001","T1560.003","T1566.001","T1574.001","T1680"]},{"id":"S1212","name":"RansomHub","type":"software","techniques":["T1018","T1021.002","T1027.013","T1057","T1059.001","T1059.003","T1070.001","T1070.004","T1082","T1083","T1090","T1135","T1140","T1480","T1486","T1489","T1490","T1491.001","T1497.003","T1547.001","T1562.009"]},{"id":"S1130","name":"Raspberry Robin","type":"software","techniques":["T1027","T1027.002","T1033","T1036.004","T1036.008","T1047","T1055.012","T1057","T1059","T1059.003","T1070.004","T1070.009","T1071","T1071.001","T1082","T1083","T1091","T1102","T1105","T1140","T1204","T1218.007","T1218.008","T1218.010","T1218.011","T1480","T1497","T1497.001","T1518.001","T1547.001","T1548","T1548.002","T1559","T1559.001","T1562.001","T1571","T1574","T1574.001","T1583.001","T1583.008","T1622"]},{"id":"S0364","name":"RawDisk","type":"software","techniques":["T1485","T1561.001","T1561.002"]},{"id":"S0169","name":"RawPOS","type":"software","techniques":["T1005","T1036.004","T1074.001","T1543.003","T1560.003"]},{"id":"S1040","name":"Rclone","type":"software","techniques":["T1030","T1048.002","T1048.003","T1083","T1560.001","T1567.002"]},{"id":"S0172","name":"Reaver","type":"software","techniques":["T1012","T1016","T1027.013","T1033","T1070.004","T1071.001","T1082","T1095","T1218.002","T1543.003","T1547.001","T1547.009","T1560.003","T1680"]},{"id":"S0153","name":"RedLeaves","type":"software","techniques":["T1016","T1027.013","T1033","T1049","T1059.003","T1070.004","T1071.001","T1082","T1083","T1105","T1113","T1547.001","T1547.009","T1555.003","T1571","T1573.001","T1574.001"]},{"id":"S1240","name":"RedLine Stealer","type":"software","techniques":["T1005","T1012","T1016","T1027.002","T1027.010","T1027.013","T1033","T1036","T1041","T1053.005","T1059.003","T1059.011","T1071.001","T1082","T1087.001","T1102","T1105","T1113","T1132.001","T1140","T1204.002","T1217","T1218.007","T1480","T1497","T1518","T1518.001","T1539","T1553.002","T1555","T1555.003","T1562.001","T1614","T1614.001","T1657"]},{"id":"S0075","name":"Reg","type":"software","techniques":["T1012","T1112","T1552.002"]},{"id":"S0511","name":"RegDuke","type":"software","techniques":["T1027","T1027.003","T1027.011","T1059.001","T1102.002","T1105","T1112","T1140","T1546.003"]},{"id":"S0019","name":"Regin","type":"software","techniques":["T1021.002","T1036.001","T1040","T1056.001","T1071.001","T1071.002","T1090.002","T1095","T1112","T1564.004","T1564.005"]},{"id":"S0332","name":"Remcos","type":"software","techniques":["T1027","T1055","T1056.001","T1059.003","T1059.006","T1083","T1090","T1105","T1112","T1113","T1115","T1123","T1125","T1497.001","T1547.001","T1548.002"]},{"id":"S0375","name":"Remexi","type":"software","techniques":["T1010","T1027.013","T1041","T1047","T1053.005","T1056.001","T1059.003","T1059.005","T1071.001","T1083","T1113","T1115","T1140","T1547.001","T1547.004","T1560"]},{"id":"S0166","name":"RemoteCMD","type":"software","techniques":["T1053.005","T1105","T1569.002"]},{"id":"S0592","name":"RemoteUtilities","type":"software","techniques":["T1083","T1105","T1113","T1218.007"]},{"id":"S0125","name":"Remsec","type":"software","techniques":["T1003.002","T1016","T1018","T1025","T1027.013","T1033","T1036.005","T1046","T1048.003","T1049","T1052.001","T1053.005","T1055.001","T1056.001","T1057","T1059.011","T1068","T1070.004","T1071.001","T1071.003","T1071.004","T1082","T1083","T1087.001","T1095","T1105","T1518.001","T1556.002","T1562.004","T1652"]},{"id":"S0174","name":"Responder","type":"software","techniques":["T1040","T1557.001"]},{"id":"S0379","name":"Revenge RAT","type":"software","techniques":["T1003","T1016","T1021.001","T1033","T1053.005","T1056.001","T1059.001","T1059.003","T1082","T1102.002","T1105","T1113","T1123","T1125","T1132.001","T1202","T1218.005","T1547.004"]},{"id":"S0433","name":"Rifdoor","type":"software","techniques":["T1016","T1027.001","T1027.013","T1033","T1082","T1204.002","T1547.001","T1566.001","T1573.001"]},{"id":"S0448","name":"Rising Sun","type":"software","techniques":["T1005","T1012","T1016","T1016.001","T1027.013","T1033","T1041","T1057","T1059.003","T1070","T1070.004","T1071.001","T1082","T1083","T1106","T1140","T1560.003","T1564.001","T1573.002","T1680"]},{"id":"S0400","name":"RobbinHood","type":"software","techniques":["T1059.003","T1070.005","T1486","T1489","T1490","T1562.001"]},{"id":"S0270","name":"RogueRobin","type":"software","techniques":["T1016","T1027.010","T1033","T1047","T1057","T1059.001","T1059.003","T1082","T1102.002","T1105","T1113","T1132.001","T1140","T1218.010","T1497.001","T1518.001","T1547.001","T1547.009"]},{"id":"S1078","name":"RotaJakiro","type":"software","techniques":["T1036.005","T1037","T1041","T1057","T1082","T1095","T1106","T1119","T1129","T1132.001","T1140","T1543.002","T1546.004","T1547.013","T1559","T1571","T1573.001"]},{"id":"S0090","name":"Rover","type":"software","techniques":["T1005","T1020","T1025","T1056.001","T1074.001","T1083","T1112","T1113","T1119","T1547.001"]},{"id":"S1073","name":"Royal","type":"software","techniques":["T1016","T1021.002","T1046","T1057","T1059.012","T1082","T1083","T1095","T1106","T1135","T1486","T1489","T1490","T1566","T1680"]},{"id":"S1071","name":"Rubeus","type":"software","techniques":["T1482","T1558.001","T1558.002","T1558.003","T1558.004"]},{"id":"S0358","name":"Ruler","type":"software","techniques":["T1087.003","T1137.003","T1137.004","T1137.005"]},{"id":"S0253","name":"RunningRAT","type":"software","techniques":["T1056.001","T1059.003","T1070.001","T1070.004","T1082","T1115","T1547.001","T1560","T1562.001","T1680"]},{"id":"S0446","name":"Ryuk","type":"software","techniques":["T1016","T1021.002","T1027","T1036","T1036.005","T1053.005","T1055","T1057","T1059.003","T1078.002","T1083","T1106","T1134","T1205","T1222.001","T1486","T1489","T1490","T1547.001","T1562.001","T1614.001","T1680"]},{"id":"S0085","name":"S-Type","type":"software","techniques":["T1007","T1008","T1016","T1027.002","T1033","T1036.005","T1041","T1059.003","T1070.004","T1070.009","T1071.001","T1082","T1087.001","T1105","T1106","T1132.001","T1136.001","T1547.001","T1547.009","T1614.001"]},{"id":"S0461","name":"SDBbot","type":"software","techniques":["T1005","T1016","T1021.001","T1027","T1027.002","T1033","T1041","T1055.001","T1057","T1059.003","T1070","T1070.004","T1082","T1083","T1090","T1095","T1105","T1125","T1140","T1218.011","T1546.011","T1546.012","T1547.001","T1614"]},{"id":"S0195","name":"SDelete","type":"software","techniques":["T1070.004","T1485"]},{"id":"S0185","name":"SEASHARPEE","type":"software","techniques":["T1059.003","T1070.006","T1105","T1505.003"]},{"id":"S0450","name":"SHARPSTATS","type":"software","techniques":["T1016","T1027.010","T1033","T1059.001","T1082","T1105","T1124"]},{"id":"S0028","name":"SHIPSHAPE","type":"software","techniques":["T1091","T1547.001","T1547.009"]},{"id":"S0063","name":"SHOTPUT","type":"software","techniques":["T1018","T1027","T1049","T1057","T1083","T1087.001"]},{"id":"S0217","name":"SHUTTERSPEED","type":"software","techniques":["T1082","T1105","T1113"]},{"id":"S0692","name":"SILENTTRINITY","type":"software","techniques":["T1003.001","T1007","T1010","T1012","T1018","T1021.003","T1021.006","T1033","T1041","T1046","T1047","T1055","T1056.001","T1056.002","T1057","T1059.001","T1059.003","T1059.006","T1069.001","T1069.002","T1070","T1070.004","T1082","T1083","T1087.002","T1105","T1106","T1112","T1113","T1115","T1124","T1134.001","T1134.003","T1135","T1518.001","T1543.003","T1546.001","T1546.003","T1546.015","T1547.001","T1548.002","T1552.006","T1555.003","T1555.004","T1556","T1558.003","T1559.001","T1562.001","T1562.003","T1562.010","T1564.003","T1620","T1680"]},{"id":"S1110","name":"SLIGHTPULSE","type":"software","techniques":["T1005","T1059","T1071.001","T1074.001","T1105","T1132.001","T1140","T1505.003","T1573.001"]},{"id":"S0533","name":"SLOTHFULMEDIA","type":"software","techniques":["T1001","T1005","T1007","T1033","T1036.004","T1036.005","T1041","T1049","T1055","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1082","T1083","T1105","T1112","T1113","T1489","T1543.003","T1564.001","T1569.002","T1680"]},{"id":"S0218","name":"SLOWDRIFT","type":"software","techniques":["T1082","T1102.002","T1105"]},{"id":"S1104","name":"SLOWPULSE","type":"software","techniques":["T1027","T1074.001","T1111","T1554","T1556.004","T1556.006"]},{"id":"S0649","name":"SMOKEDHAM","type":"software","techniques":["T1027.009","T1033","T1041","T1056.001","T1059.001","T1071.001","T1082","T1087.001","T1090.004","T1098.007","T1102","T1105","T1112","T1113","T1132.001","T1136.001","T1204.001","T1547.001","T1564.002","T1573.001","T1598.003"]},{"id":"S0159","name":"SNUGRIDE","type":"software","techniques":["T1059.003","T1071.001","T1547.001","T1573.001"]},{"id":"S0157","name":"SOUNDBITE","type":"software","techniques":["T1010","T1071.004","T1082","T1083","T1112"]},{"id":"S0035","name":"SPACESHIP","type":"software","techniques":["T1052.001","T1074.001","T1083","T1547.001","T1547.009","T1560.003"]},{"id":"S0390","name":"SQLRat","type":"software","techniques":["T1027.010","T1053.005","T1059.001","T1059.003","T1070.004","T1105","T1140","T1204.002"]},{"id":"S1037","name":"STARWHALE","type":"software","techniques":["T1005","T1016","T1027.013","T1033","T1041","T1059.003","T1059.005","T1071.001","T1074.001","T1082","T1132.001","T1204.002","T1543.003","T1547.001"]},{"id":"S1238","name":"STATICPLUGIN","type":"software","techniques":["T1036.005","T1036.008","T1204.002","T1553.002","T1559.001"]},{"id":"S1112","name":"STEADYPULSE","type":"software","techniques":["T1071.001","T1105","T1132.001","T1140","T1505.003"]},{"id":"S1042","name":"SUGARDUMP","type":"software","techniques":["T1036.004","T1036.005","T1041","T1053.005","T1071.001","T1071.003","T1074.001","T1083","T1204.002","T1217","T1518","T1555.003","T1560.003"]},{"id":"S1049","name":"SUGARUSH","type":"software","techniques":["T1016.001","T1059.003","T1095","T1543.003","T1571","T1680"]},{"id":"S0559","name":"SUNBURST","type":"software","techniques":["T1001.001","T1001.002","T1001.003","T1005","T1007","T1012","T1016","T1027","T1027.005","T1027.015","T1033","T1036.005","T1047","T1057","T1059.005","T1070","T1070.004","T1070.007","T1070.009","T1071.001","T1071.004","T1082","T1083","T1105","T1112","T1124","T1132.001","T1218.011","T1497.001","T1497.003","T1518.001","T1546.012","T1553.002","T1562.001","T1568","T1573.001"]},{"id":"S0562","name":"SUNSPOT","type":"software","techniques":["T1027","T1036.005","T1057","T1070.004","T1083","T1106","T1134","T1140","T1195.002","T1480","T1480.002","T1565.001"]},{"id":"S0578","name":"SUPERNOVA","type":"software","techniques":["T1027.013","T1036.005","T1071.001","T1203","T1505.003"]},{"id":"S1064","name":"SVCReady","type":"software","techniques":["T1005","T1012","T1027","T1033","T1036.004","T1041","T1047","T1053.005","T1057","T1059.005","T1071.001","T1082","T1105","T1106","T1113","T1120","T1124","T1204.002","T1218.011","T1497.001","T1497.003","T1518","T1546.015","T1566.001"]},{"id":"S0519","name":"SYNful Knock","type":"software","techniques":["T1205","T1556.004","T1601.001"]},{"id":"S0464","name":"SYSCON","type":"software","techniques":["T1057","T1059.003","T1071.002","T1082","T1204.002"]},{"id":"S1210","name":"Sagerunex","type":"software","techniques":["T1016","T1027.002","T1027.013","T1041","T1055.001","T1057","T1071.001","T1074.001","T1082","T1090","T1102.002","T1102.003","T1106","T1134","T1140","T1480","T1560.001","T1573.002"]},{"id":"S1018","name":"Saint Bot","type":"software","techniques":["T1005","T1012","T1016","T1027","T1027.002","T1033","T1036","T1036.005","T1053.005","T1055.001","T1055.004","T1055.012","T1057","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1082","T1083","T1105","T1106","T1132.001","T1140","T1204.001","T1204.002","T1218.004","T1218.010","T1497.001","T1497.003","T1547.001","T1548.002","T1566.001","T1566.002","T1574","T1614","T1622"]},{"id":"S0074","name":"Sakula","type":"software","techniques":["T1027.013","T1059.003","T1070.004","T1071.001","T1105","T1218.011","T1543.003","T1547.001","T1548.002","T1573.001","T1574.001"]},{"id":"S0370","name":"SamSam","type":"software","techniques":["T1027.013","T1027.016","T1059.003","T1070.004","T1486"]},{"id":"S1168","name":"SampleCheck5000","type":"software","techniques":["T1059.003","T1071.001","T1074.001","T1082","T1102.002","T1105","T1140","T1560.001","T1567","T1680"]},{"id":"S1099","name":"Samurai","type":"software","techniques":["T1005","T1012","T1027","T1027.004","T1027.007","T1027.015","T1036.005","T1059.003","T1071.001","T1083","T1090","T1095","T1105","T1106","T1112","T1132.001","T1518","T1543.003","T1573.001"]},{"id":"S1085","name":"Sardonic","type":"software","techniques":["T1005","T1007","T1016","T1027","T1027.010","T1047","T1049","T1055.004","T1057","T1059.001","T1059.003","T1070","T1082","T1095","T1105","T1106","T1132.001","T1135","T1140","T1546.003","T1571","T1573.001","T1573.002","T1620","T1680"]},{"id":"S0053","name":"SeaDuke","type":"software","techniques":["T1027.002","T1059.001","T1059.003","T1070.004","T1071.001","T1078","T1105","T1114.002","T1132.001","T1546.003","T1547.001","T1547.009","T1550.003","T1560.002","T1573.001"]},{"id":"S0345","name":"Seasalt","type":"software","techniques":["T1027.013","T1036.004","T1057","T1059.003","T1070.004","T1071.001","T1083","T1105","T1543.003","T1547.001"]},{"id":"S0382","name":"ServHelper","type":"software","techniques":["T1021.001","T1033","T1036.010","T1053.005","T1059.001","T1059.003","T1070.004","T1071.001","T1082","T1098.007","T1105","T1136.001","T1218.011","T1547.001","T1573.002"]},{"id":"S0639","name":"Seth-Locker","type":"software","techniques":["T1059.003","T1105","T1486"]},{"id":"S0596","name":"ShadowPad","type":"software","techniques":["T1016","T1027","T1027.011","T1029","T1033","T1055","T1055.001","T1057","T1070","T1071.001","T1071.002","T1071.004","T1082","T1095","T1105","T1112","T1124","T1132.002","T1140","T1568.002","T1680"]},{"id":"S0140","name":"Shamoon","type":"software","techniques":["T1012","T1016","T1018","T1021.002","T1027","T1036.004","T1053.005","T1070.006","T1071.001","T1078.002","T1082","T1105","T1112","T1124","T1134.001","T1140","T1485","T1486","T1529","T1543.003","T1548.002","T1561.002","T1569.002","T1570"]},{"id":"S1019","name":"Shark","type":"software","techniques":["T1005","T1008","T1012","T1027.013","T1029","T1036.005","T1041","T1059.003","T1070.004","T1071.001","T1071.004","T1074","T1082","T1105","T1140","T1497.001","T1568.002"]},{"id":"S1089","name":"SharpDisco","type":"software","techniques":["T1005","T1041","T1053.005","T1059.003","T1071.002","T1083","T1105","T1106","T1120","T1564.003","T1680"]},{"id":"S0546","name":"SharpStage","type":"software","techniques":["T1047","T1053.005","T1059.001","T1059.003","T1082","T1102","T1105","T1113","T1140","T1547.001","T1614.001"]},{"id":"S0444","name":"ShimRat","type":"software","techniques":["T1005","T1008","T1027.002","T1027.015","T1029","T1036.004","T1059.003","T1070.004","T1071.001","T1083","T1090.002","T1105","T1106","T1112","T1135","T1140","T1543.003","T1546.011","T1547.001","T1548.002","T1574"]},{"id":"S0445","name":"ShimRatReporter","type":"software","techniques":["T1016","T1020","T1027","T1036.005","T1041","T1049","T1057","T1069","T1071.001","T1082","T1087","T1105","T1106","T1119","T1518","T1560"]},{"id":"S1178","name":"ShrinkLocker","type":"software","techniques":["T1016","T1041","T1047","T1057","T1059.001","T1059.005","T1070.001","T1070.004","T1071.001","T1082","T1102","T1112","T1124","T1480","T1485","T1486","T1491.001","T1529","T1562.001","T1562.004"]},{"id":"S0589","name":"Sibot","type":"software","techniques":["T1012","T1016","T1027.010","T1027.011","T1036.005","T1047","T1049","T1053.005","T1059.005","T1070","T1070.004","T1071.001","T1102","T1105","T1112","T1140","T1218.005","T1218.011"]},{"id":"S0610","name":"SideTwist","type":"software","techniques":["T1001","T1005","T1008","T1016","T1033","T1041","T1059.003","T1071.001","T1082","T1083","T1105","T1106","T1132.001","T1140","T1573.001"]},{"id":"S0623","name":"Siloscape","type":"software","techniques":["T1027","T1059.003","T1068","T1069","T1071","T1083","T1090.003","T1106","T1134.001","T1140","T1190","T1518","T1609","T1611"]},{"id":"S0468","name":"Skidmap","type":"software","techniques":["T1014","T1027.013","T1036.005","T1053.003","T1057","T1059.004","T1082","T1083","T1098.004","T1105","T1140","T1496.001","T1518.001","T1547.006","T1556.003","T1562.001"]},{"id":"S0633","name":"Sliver","type":"software","techniques":["T1001.002","T1003.001","T1016","T1027","T1027.004","T1027.013","T1041","T1049","T1055","T1059.001","T1071","T1071.001","T1071.004","T1083","T1090.001","T1105","T1113","T1132.001","T1134","T1548.002","T1558.001","T1573.001","T1573.002"]},{"id":"S1035","name":"Small Sieve","type":"software","techniques":["T1016","T1027","T1033","T1036.005","T1059.003","T1059.006","T1071.001","T1102.002","T1105","T1132.002","T1480","T1547.001","T1573.002"]},{"id":"S0226","name":"Smoke Loader","type":"software","techniques":["T1027.013","T1053.005","T1055","T1055.012","T1059.005","T1071.001","T1083","T1105","T1114.001","T1140","T1497.001","T1547.001","T1552.001","T1555.003"]},{"id":"S1163","name":"SnappyTCP","type":"software","techniques":["T1059.004","T1071.001","T1095","T1505.003","T1573.002"]},{"id":"S1086","name":"Snip3","type":"software","techniques":["T1027","T1027.001","T1047","T1055.012","T1059.001","T1059.005","T1082","T1102","T1104","T1105","T1140","T1189","T1204.001","T1204.002","T1497.001","T1497.003","T1547.001","T1564.003","T1566.001","T1566.002"]},{"id":"S1124","name":"SocGholish","type":"software","techniques":["T1016","T1027.013","T1027.015","T1033","T1036.005","T1047","T1048.003","T1057","T1059.007","T1074.001","T1082","T1102","T1105","T1189","T1204.001","T1482","T1518","T1566.002","T1614"]},{"id":"S0273","name":"Socksbot","type":"software","techniques":["T1055.001","T1057","T1059.001","T1090","T1113"]},{"id":"S0627","name":"SodaMaster","type":"software","techniques":["T1012","T1027","T1033","T1057","T1082","T1105","T1106","T1497.001","T1497.003","T1573.001","T1573.002"]},{"id":"S1166","name":"Solar","type":"software","techniques":["T1020","T1041","T1053.005","T1070.004","T1082","T1105","T1132.001","T1573.001"]},{"id":"S0615","name":"SombRAT","type":"software","techniques":["T1005","T1007","T1027","T1033","T1036","T1041","T1055.001","T1057","T1070.004","T1071.004","T1074.001","T1082","T1083","T1090","T1095","T1105","T1106","T1124","T1140","T1560.003","T1564.010","T1568.002","T1573.001","T1573.002"]},{"id":"S0516","name":"SoreFang","type":"software","techniques":["T1016","T1027","T1053.005","T1057","T1069.002","T1071.001","T1082","T1083","T1087.001","T1087.002","T1105","T1140","T1190","T1680"]},{"id":"S0543","name":"Spark","type":"software","techniques":["T1027.002","T1033","T1041","T1059.003","T1071.001","T1082","T1132.001","T1140","T1497.002","T1614.001"]},{"id":"S0374","name":"SpeakUp","type":"software","techniques":["T1016","T1027.013","T1033","T1046","T1049","T1053.003","T1059","T1059.006","T1070.004","T1071.001","T1082","T1105","T1110.001","T1132.001","T1203"]},{"id":"S1140","name":"Spica","type":"software","techniques":["T1036.004","T1053.005","T1059.001","T1083","T1095","T1105","T1140","T1539","T1560"]},{"id":"S0646","name":"SpicyOmelette","type":"software","techniques":["T1005","T1016","T1018","T1059.007","T1082","T1105","T1204.001","T1518","T1518.001","T1553.002","T1566.002"]},{"id":"S1234","name":"SplatCloak","type":"software","techniques":["T1036.001","T1082","T1083","T1106","T1518.001","T1562.001"]},{"id":"S1232","name":"SplatDropper","type":"software","techniques":["T1027.007","T1027.013","T1070.009","T1106","T1140","T1543.003","T1553.002","T1574.001"]},{"id":"S1030","name":"Squirrelwaffle","type":"software","techniques":["T1016","T1027.002","T1027.013","T1033","T1041","T1059.001","T1059.003","T1059.005","T1071.001","T1082","T1105","T1132.001","T1140","T1204.001","T1204.002","T1218.010","T1218.011","T1497","T1560.003","T1566.001","T1566.002"]},{"id":"S0058","name":"SslMM","type":"software","techniques":["T1008","T1033","T1036.005","T1056.001","T1082","T1134","T1547.001","T1547.009","T1562.001"]},{"id":"S1227","name":"StarProxy","type":"software","techniques":["T1001.003","T1059","T1090.001","T1095","T1106","T1124","T1140","T1573.001","T1574.001"]},{"id":"S0188","name":"Starloader","type":"software","techniques":["T1036.005","T1140"]},{"id":"S1200","name":"StealBit","type":"software","techniques":["T1005","T1027.013","T1030","T1070.004","T1071.001","T1082","T1083","T1095","T1106","T1140","T1480","T1559","T1562.006","T1614.001","T1622"]},{"id":"S0380","name":"StoneDrill","type":"software","techniques":["T1012","T1027.013","T1047","T1055","T1059.005","T1070.004","T1082","T1105","T1113","T1124","T1485","T1497","T1518.001","T1561.001","T1561.002"]},{"id":"S0142","name":"StreamEx","type":"software","techniques":["T1027","T1057","T1059.003","T1082","T1083","T1112","T1218.011","T1518.001","T1543.003"]},{"id":"S1183","name":"StrelaStealer","type":"software","techniques":["T1001","T1020","T1027","T1027.002","T1027.013","T1027.015","T1027.016","T1036","T1036.003","T1036.005","T1036.008","T1041","T1059.001","T1059.003","T1059.007","T1071.001","T1082","T1105","T1119","T1132.001","T1140","T1204.002","T1218.011","T1480","T1480.002","T1497","T1518","T1552.001","T1552.002","T1553.002","T1566.001","T1574.001","T1614.001","T1622"]},{"id":"S1034","name":"StrifeWater","type":"software","techniques":["T1005","T1033","T1036.005","T1041","T1053.005","T1059.003","T1070.004","T1082","T1083","T1105","T1106","T1113","T1124","T1497.003","T1573.001"]},{"id":"S0491","name":"StrongPity","type":"software","techniques":["T1016","T1020","T1027.013","T1036.004","T1036.005","T1041","T1057","T1059.001","T1070.004","T1071.001","T1083","T1090.003","T1105","T1119","T1204.002","T1518.001","T1543.003","T1547.001","T1553.002","T1560.003","T1562.001","T1564.003","T1569.002","T1571","T1573.002","T1680"]},{"id":"S0603","name":"Stuxnet","type":"software","techniques":["T1008","T1012","T1014","T1016","T1021","T1021.002","T1027.013","T1041","T1047","T1053.005","T1055.001","T1068","T1070","T1070.004","T1070.006","T1071.001","T1078.001","T1078.002","T1080","T1082","T1083","T1087.001","T1087.002","T1090.001","T1091","T1106","T1112","T1120","T1124","T1129","T1132.001","T1134.001","T1135","T1140","T1210","T1480","T1505.001","T1518.001","T1543.003","T1553.002","T1560.003","T1562","T1570","T1573.001"]},{"id":"S0018","name":"Sykipot","type":"software","techniques":["T1007","T1016","T1018","T1049","T1055.001","T1056.001","T1057","T1087.002","T1111","T1547.001","T1573.002"]},{"id":"S0242","name":"SynAck","type":"software","techniques":["T1007","T1012","T1027","T1033","T1055.013","T1057","T1070.001","T1082","T1083","T1106","T1112","T1486","T1497.001","T1614.001"]},{"id":"S0060","name":"Sys10","type":"software","techniques":["T1016","T1033","T1069.001","T1071.001","T1082","T1573.001"]},{"id":"S0663","name":"SysUpdate","type":"software","techniques":["T1005","T1007","T1016","T1016.001","T1027.002","T1027.011","T1027.013","T1033","T1036.004","T1041","T1047","T1057","T1070.004","T1071.004","T1082","T1083","T1105","T1106","T1112","T1113","T1132.001","T1140","T1543.002","T1543.003","T1547.001","T1553.002","T1564.001","T1569.002","T1573.001","T1574.001","T1680"]},{"id":"S0098","name":"T9000","type":"software","techniques":["T1016","T1033","T1082","T1113","T1119","T1120","T1123","T1124","T1125","T1518.001","T1546.010","T1560.003","T1574.001"]},{"id":"S0586","name":"TAINTEDSCRIBE","type":"software","techniques":["T1001.003","T1008","T1018","T1027.001","T1036.005","T1057","T1059.003","T1070.004","T1070.006","T1083","T1105","T1124","T1547.001","T1560","T1573.001","T1680"]},{"id":"S1193","name":"TAMECAT","type":"software","techniques":["T1047","T1059.001","T1059.003","T1059.005","T1071.001","T1105","T1132.001","T1518.001","T1573.001"]},{"id":"S0164","name":"TDTESS","type":"software","techniques":["T1059.003","T1070.004","T1070.006","T1105","T1543.003"]},{"id":"S0560","name":"TEARDROP","type":"software","techniques":["T1012","T1027","T1036.005","T1112","T1140","T1543.003"]},{"id":"S0146","name":"TEXTMATE","type":"software","techniques":["T1059.003","T1071.004"]},{"id":"S1223","name":"THINCRUST","type":"software","techniques":["T1059.006","T1071.001","T1140","T1562.004","T1573.001"]},{"id":"S0131","name":"TINYTYPHON","type":"software","techniques":["T1020","T1027.013","T1083","T1547.001"]},{"id":"S1239","name":"TONESHELL","type":"software","techniques":["T1001.003","T1010","T1027.001","T1027.007","T1027.012","T1033","T1036.004","T1036.005","T1047","T1053.005","T1055.001","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1082","T1087","T1095","T1105","T1106","T1113","T1132.002","T1134.002","T1140","T1205","T1218.010","T1218.013","T1480","T1480.001","T1480.002","T1497.002","T1518.001","T1543.003","T1547.001","T1553.002","T1559","T1560.001","T1573.001","T1574.001","T1622","T1678","T1680"]},{"id":"S1201","name":"TRANSLATEXT","type":"software","techniques":["T1012","T1036.005","T1041","T1059.001","T1071.001","T1102.001","T1102.002","T1112","T1113","T1114","T1176.001","T1185","T1205","T1539","T1555.003"]},{"id":"S0436","name":"TSCookie","type":"software","techniques":["T1016","T1055","T1057","T1059.003","T1071.001","T1083","T1090","T1095","T1105","T1140","T1204.001","T1555.003","T1573.001"]},{"id":"S0199","name":"TURNEDUP","type":"software","techniques":["T1055.004","T1059.003","T1082","T1105","T1113","T1547.001"]},{"id":"S0263","name":"TYPEFRAME","type":"software","techniques":["T1027.011","T1027.013","T1059.003","T1059.005","T1070.004","T1083","T1090","T1105","T1112","T1140","T1204.002","T1543.003","T1562.004","T1571","T1680"]},{"id":"S0011","name":"Taidoor","type":"software","techniques":["T1005","T1012","T1016","T1027.013","T1055.001","T1057","T1059.003","T1070.004","T1071.001","T1083","T1095","T1105","T1106","T1112","T1124","T1140","T1204.002","T1547.001","T1566.001","T1573.001"]},{"id":"S0467","name":"TajMahal","type":"software","techniques":["T1005","T1016","T1020","T1025","T1027","T1041","T1055.001","T1056.001","T1057","T1082","T1083","T1112","T1113","T1115","T1119","T1120","T1123","T1124","T1125","T1129","T1518","T1518.001","T1539","T1560.002"]},{"id":"S1011","name":"Tarrask","type":"software","techniques":["T1036.004","T1036.005","T1053.005","T1059.003","T1112","T1134.001","T1564"]},{"id":"S0057","name":"Tasklist","type":"software","techniques":["T1007","T1057","T1518.001"]},{"id":"S0595","name":"ThiefQuest","type":"software","techniques":["T1036.005","T1041","T1056.001","T1057","T1059.002","T1071.001","T1105","T1106","T1486","T1497.003","T1518.001","T1543.001","T1543.004","T1554","T1562.001","T1564.001","T1620","T1622"]},{"id":"S0665","name":"ThreatNeedle","type":"software","techniques":["T1005","T1027.011","T1027.013","T1027.015","T1036.005","T1082","T1083","T1105","T1112","T1140","T1204.002","T1543.003","T1547.001","T1566.001"]},{"id":"S0668","name":"TinyTurla","type":"software","techniques":["T1005","T1008","T1012","T1027.011","T1029","T1036.004","T1036.005","T1059.003","T1071.001","T1105","T1106","T1112","T1569.002","T1573.002"]},{"id":"S0004","name":"TinyZBot","type":"software","techniques":["T1056.001","T1059.003","T1113","T1115","T1543.003","T1547.001","T1547.009","T1562.001"]},{"id":"S0671","name":"Tomiris","type":"software","techniques":["T1005","T1027.002","T1041","T1053.005","T1071.001","T1105","T1497.003","T1568"]},{"id":"S0183","name":"Tor","type":"software","techniques":["T1090.003","T1573.002"]},{"id":"S0678","name":"Torisma","type":"software","techniques":["T1016","T1027.002","T1027.013","T1041","T1049","T1071.001","T1106","T1124","T1132.001","T1140","T1480","T1573.001","T1680"]},{"id":"S0682","name":"TrailBlazer","type":"software","techniques":["T1001","T1001.001","T1036","T1071.001","T1546.003"]},{"id":"S0266","name":"TrickBot","type":"software","techniques":["T1005","T1007","T1008","T1016","T1018","T1021.005","T1027","T1027.002","T1027.013","T1033","T1036","T1041","T1053.005","T1055","T1055.012","T1056.004","T1057","T1059.001","T1059.003","T1069","T1071.001","T1082","T1083","T1087.001","T1087.003","T1090.002","T1105","T1106","T1110.004","T1112","T1132.001","T1135","T1140","T1185","T1204.002","T1210","T1219","T1482","T1495","T1497.003","T1542.003","T1543.003","T1547.001","T1552.001","T1552.002","T1553.002","T1555.003","T1555.005","T1559.001","T1562.001","T1564.003","T1566.001","T1566.002","T1571","T1573.001"]},{"id":"S0094","name":"Trojan.Karagany","type":"software","techniques":["T1003","T1010","T1016","T1027","T1027.002","T1033","T1049","T1055.003","T1056.001","T1057","T1059.003","T1070.004","T1071.001","T1074.001","T1082","T1083","T1105","T1113","T1497.001","T1547.001","T1555.003","T1573.002"]},{"id":"S1196","name":"Troll Stealer","type":"software","techniques":["T1005","T1016","T1027.002","T1036.005","T1041","T1059.001","T1059.003","T1070.004","T1071.001","T1074.001","T1082","T1083","T1113","T1132.001","T1213","T1217","T1218.011","T1480.002","T1552.004","T1553.002","T1560","T1573.001"]},{"id":"S0178","name":"Truvasys","type":"software","techniques":["T1036.004","T1547.001"]},{"id":"S0647","name":"Turian","type":"software","techniques":["T1001.001","T1016","T1027","T1033","T1036.004","T1059.003","T1059.004","T1059.006","T1071.001","T1074.001","T1082","T1083","T1105","T1113","T1120","T1140","T1547.001","T1560.001"]},{"id":"S0333","name":"UBoatRAT","type":"software","techniques":["T1057","T1059.003","T1071.001","T1102.002","T1105","T1197","T1497.001","T1573.001"]},{"id":"S0275","name":"UPPERCUT","type":"software","techniques":["T1016","T1033","T1059.003","T1071.001","T1082","T1083","T1105","T1113","T1124","T1573.001"]},{"id":"S1164","name":"UPSTYLE","type":"software","techniques":["T1001.001","T1027.013","T1036","T1057","T1059.006","T1070.002","T1070.004","T1070.006","T1102.003","T1140","T1546","T1665"]},{"id":"S0136","name":"USBStealer","type":"software","techniques":["T1020","T1025","T1027.013","T1036.005","T1052.001","T1070.004","T1070.006","T1074.001","T1083","T1091","T1092","T1119","T1120","T1547.001"]},{"id":"S0452","name":"USBferry","type":"software","techniques":["T1005","T1016","T1018","T1049","T1057","T1059.003","T1083","T1087.001","T1091","T1120","T1218.011"]},{"id":"S0221","name":"Umbreon","type":"software","techniques":["T1014","T1059.003","T1078.003","T1095","T1205"]},{"id":"S0130","name":"Unknown Logger","type":"software","techniques":["T1016","T1033","T1056.001","T1082","T1091","T1105","T1555.003","T1562.001"]},{"id":"S0022","name":"Uroburos","type":"software","techniques":["T1001.001","T1001.003","T1005","T1008","T1012","T1014","T1027.002","T1027.009","T1027.011","T1027.013","T1036.004","T1055.001","T1057","T1059.003","T1070.004","T1071.001","T1071.003","T1071.004","T1082","T1083","T1090.003","T1095","T1104","T1105","T1106","T1112","T1132.002","T1140","T1205","T1543.003","T1559","T1564.005","T1572","T1573.001","T1573.002","T1620"]},{"id":"S0386","name":"Ursnif","type":"software","techniques":["T1005","T1007","T1012","T1027.010","T1027.013","T1036.005","T1041","T1047","T1055.005","T1055.012","T1056.004","T1057","T1059.001","T1059.005","T1070.004","T1071.001","T1074.001","T1080","T1082","T1090","T1090.003","T1091","T1105","T1106","T1112","T1113","T1132","T1140","T1185","T1497.003","T1543.003","T1547.001","T1559.001","T1564.003","T1568.002"]},{"id":"S0442","name":"VBShower","type":"software","techniques":["T1059.005","T1070.004","T1071.001","T1105","T1547.001"]},{"id":"S0257","name":"VERMIN","type":"software","techniques":["T1016","T1027.002","T1027.013","T1033","T1056.001","T1057","T1070.004","T1071.001","T1082","T1105","T1113","T1115","T1119","T1123","T1140","T1518.001","T1560"]},{"id":"S1218","name":"VIRTUALPIE","type":"software","techniques":["T1059.006","T1059.012","T1505.006","T1570","T1571","T1573.001"]},{"id":"S1217","name":"VIRTUALPITA","type":"software","techniques":["T1036.004","T1036.005","T1037","T1059.004","T1059.006","T1105","T1489","T1562.003","T1570","T1571","T1673","T1675"]},{"id":"S0476","name":"Valak","type":"software","techniques":["T1008","T1012","T1016","T1027","T1027.002","T1027.011","T1033","T1041","T1047","T1053.005","T1057","T1059.001","T1059.007","T1071.001","T1082","T1087.001","T1087.002","T1104","T1105","T1112","T1113","T1114.002","T1119","T1132.001","T1140","T1204.002","T1218.010","T1518.001","T1552.002","T1555.004","T1559.002","T1564.004","T1566.001","T1566.002"]},{"id":"S0636","name":"VaporRage","type":"software","techniques":["T1071.001","T1105","T1140","T1480"]},{"id":"S0207","name":"Vasport","type":"software","techniques":["T1071.001","T1090","T1105","T1547.001"]},{"id":"S1154","name":"VersaMem","type":"software","techniques":["T1027.013","T1040","T1056.004","T1059","T1070.004","T1074.001","T1129","T1203"]},{"id":"S0180","name":"Volgmer","type":"software","techniques":["T1007","T1012","T1016","T1027.011","T1027.013","T1036.004","T1049","T1057","T1059.003","T1070.004","T1082","T1083","T1105","T1106","T1112","T1140","T1543.003","T1573.001","T1573.002"]},{"id":"S1116","name":"WARPWIRE","type":"software","techniques":["T1048.003","T1056.003","T1059.007","T1132.001","T1554"]},{"id":"S0109","name":"WEBC2","type":"software","techniques":["T1059.003","T1105","T1574.001"]},{"id":"S0155","name":"WINDSHIELD","type":"software","techniques":["T1012","T1033","T1070.004","T1082","T1095"]},{"id":"S0219","name":"WINERACK","type":"software","techniques":["T1007","T1010","T1033","T1057","T1059","T1082","T1083"]},{"id":"S1115","name":"WIREFIRE","type":"software","techniques":["T1071.001","T1105","T1132.001","T1140","T1505.003","T1554","T1573.001"]},{"id":"S0366","name":"WannaCry","type":"software","techniques":["T1016","T1018","T1047","T1083","T1090.003","T1120","T1210","T1222.001","T1486","T1489","T1490","T1543.003","T1563.002","T1564.001","T1570","T1573.002"]},{"id":"S0670","name":"WarzoneRAT","type":"software","techniques":["T1005","T1014","T1021.001","T1021.005","T1041","T1055","T1056.001","T1057","T1059.001","T1059.003","T1082","T1083","T1090","T1095","T1105","T1106","T1112","T1125","T1140","T1204.002","T1221","T1546.015","T1547.001","T1548.002","T1555.003","T1562.001","T1564","T1564.003","T1566.001","T1573.001"]},{"id":"S0612","name":"WastedLocker","type":"software","techniques":["T1012","T1027.013","T1027.016","T1059.003","T1083","T1106","T1112","T1120","T1135","T1140","T1222.001","T1486","T1490","T1497.001","T1543.003","T1548.002","T1564.001","T1564.004","T1569.002","T1574.001"]},{"id":"S0579","name":"Waterbear","type":"software","techniques":["T1012","T1027.005","T1027.013","T1049","T1055","T1055.003","T1057","T1105","T1106","T1112","T1140","T1518.001","T1562.006","T1574.001"]},{"id":"S0515","name":"WellMail","type":"software","techniques":["T1005","T1016","T1033","T1095","T1105","T1140","T1560","T1571","T1573.002"]},{"id":"S0514","name":"WellMess","type":"software","techniques":["T1001.001","T1005","T1016","T1033","T1059.001","T1059.003","T1069.002","T1071.001","T1071.004","T1082","T1105","T1132.001","T1140","T1573.001","T1573.002"]},{"id":"S0645","name":"Wevtutil","type":"software","techniques":["T1005","T1070.001","T1562.002"]},{"id":"S0689","name":"WhisperGate","type":"software","techniques":["T1027.013","T1036","T1055.012","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1083","T1102","T1105","T1106","T1134.002","T1135","T1140","T1218.004","T1485","T1497.001","T1497.003","T1518.001","T1529","T1542.003","T1561.001","T1561.002","T1562.001","T1569.002","T1620","T1680"]},{"id":"S0206","name":"Wiarp","type":"software","techniques":["T1055","T1059.003","T1105","T1543.003"]},{"id":"S0059","name":"WinMM","type":"software","techniques":["T1008","T1033","T1057","T1071.001","T1082","T1083"]},{"id":"S0466","name":"WindTail","type":"software","techniques":["T1027.013","T1027.015","T1036","T1036.001","T1048.003","T1059.004","T1070.004","T1071.001","T1083","T1106","T1119","T1124","T1140","T1560.001","T1564.003"]},{"id":"S0176","name":"Wingbird","type":"software","techniques":["T1055","T1068","T1070.004","T1082","T1518.001","T1543.003","T1547.008","T1569.002","T1574.001"]},{"id":"S0430","name":"Winnti for Linux","type":"software","techniques":["T1014","T1027.013","T1071.001","T1095","T1105","T1140","T1205","T1573.001"]},{"id":"S0141","name":"Winnti for Windows","type":"software","techniques":["T1027.013","T1027.015","T1036.005","T1057","T1070.004","T1070.006","T1071.001","T1082","T1083","T1090.001","T1090.002","T1095","T1105","T1106","T1140","T1218.011","T1480.001","T1543.003","T1547.001","T1548.002","T1569.002","T1573.001"]},{"id":"S1065","name":"Woody RAT","type":"software","techniques":["T1005","T1012","T1016","T1016.001","T1027.013","T1033","T1041","T1055","T1055.012","T1057","T1059.001","T1059.003","T1070.004","T1071.001","T1082","T1083","T1087","T1105","T1106","T1113","T1140","T1203","T1204.002","T1518","T1518.001","T1562.006","T1566.001","T1573.001","T1573.002","T1680"]},{"id":"S0161","name":"XAgentOSX","type":"software","techniques":["T1033","T1056.001","T1057","T1070.004","T1071.002","T1082","T1083","T1106","T1113","T1555.003"]},{"id":"S0658","name":"XCSSET","type":"software","techniques":["T1005","T1027.013","T1036","T1041","T1056.002","T1059.004","T1068","T1082","T1083","T1087","T1098.004","T1105","T1113","T1195.001","T1222.002","T1486","T1497.003","T1518","T1518.001","T1539","T1543.004","T1546","T1546.004","T1548.006","T1553.001","T1554","T1560","T1564.001","T1569.001","T1573.001","T1574.006","T1614.001","T1647"]},{"id":"S1207","name":"XLoader","type":"software","techniques":["T1027.002","T1027.013","T1033","T1053.005","T1055.004","T1055.012","T1056.001","T1059.010","T1070.004","T1071.001","T1082","T1106","T1113","T1115","T1140","T1185","T1203","T1497","T1497.001","T1529","T1539","T1547.001","T1555","T1555.003","T1562.001","T1566.001","T1583.001","T1622"]},{"id":"S1248","name":"XORIndex Loader","type":"software","techniques":["T1016","T1027.010","T1027.013","T1033","T1036.005","T1041","T1059.007","T1071.001","T1082","T1105","T1140","T1614"]},{"id":"S0117","name":"XTunnel","type":"software","techniques":["T1008","T1027","T1027.016","T1046","T1059.003","T1090","T1552.001","T1573.002"]},{"id":"S0341","name":"Xbash","type":"software","techniques":["T1016","T1046","T1053.003","T1059.001","T1059.005","T1059.007","T1071.001","T1102.001","T1105","T1110.001","T1203","T1218.005","T1218.010","T1485","T1486","T1547.001"]},{"id":"S0388","name":"YAHOYAH","type":"software","techniques":["T1027.013","T1071.001","T1082","T1105","T1140","T1518.001"]},{"id":"S1114","name":"ZIPLINE","type":"software","techniques":["T1057","T1059.004","T1083","T1090","T1095","T1105","T1205","T1562.001","T1573.001"]},{"id":"S0086","name":"ZLib","type":"software","techniques":["T1007","T1036.005","T1041","T1059.003","T1071.001","T1082","T1083","T1105","T1113","T1543.003","T1560.002"]},{"id":"S0251","name":"Zebrocy","type":"software","techniques":["T1012","T1016","T1027.002","T1033","T1037.001","T1041","T1047","T1049","T1053.005","T1056.004","T1057","T1059.003","T1070.004","T1071.001","T1071.003","T1074.001","T1082","T1083","T1105","T1113","T1119","T1120","T1124","T1132.001","T1135","T1140","T1547.001","T1555.003","T1560","T1573.002","T1680"]},{"id":"S1151","name":"ZeroCleare","type":"software","techniques":["T1059","T1059.001","T1068","T1070.004","T1106","T1553.002","T1561.002","T1680"]},{"id":"S0230","name":"ZeroT","type":"software","techniques":["T1001.002","T1016","T1027.002","T1027.013","T1027.016","T1071.001","T1082","T1105","T1140","T1543.003","T1548.002","T1573.001","T1574.001"]},{"id":"S0027","name":"Zeroaccess","type":"software","techniques":["T1014","T1564.004"]},{"id":"S0330","name":"Zeus Panda","type":"software","techniques":["T1012","T1027.010","T1027.013","T1055.002","T1056.001","T1056.004","T1057","T1059","T1059.001","T1059.003","T1070.004","T1071.001","T1082","T1083","T1105","T1112","T1113","T1115","T1124","T1140","T1518.001","T1547.001","T1614.001"]},{"id":"S0672","name":"Zox","type":"software","techniques":["T1001.002","T1005","T1021.002","T1027.013","T1057","T1068","T1083","T1105","T1680"]},{"id":"S0412","name":"ZxShell","type":"software","techniques":["T1005","T1007","T1012","T1021.001","T1021.005","T1033","T1046","T1055.001","T1056.001","T1056.004","T1057","T1059.003","T1070.001","T1070.004","T1071.001","T1071.002","T1082","T1083","T1090","T1105","T1106","T1112","T1113","T1125","T1134.002","T1136.001","T1190","T1218.011","T1499","T1543.003","T1562.001","T1562.004","T1569.002","T1571"]},{"id":"S1013","name":"ZxxZ","type":"software","techniques":["T1005","T1012","T1027.013","T1033","T1036.004","T1053.005","T1057","T1082","T1105","T1106","T1140","T1204.002","T1518.001","T1566.001"]},{"id":"S0202","name":"adbupd","type":"software","techniques":["T1059.003","T1546.003","T1573.002"]},{"id":"S0471","name":"build_downer","type":"software","techniques":["T1027.003","T1036.004","T1105","T1106","T1124","T1518.001","T1547.001","T1680"]},{"id":"S1043","name":"ccf32","type":"software","techniques":["T1005","T1048.003","T1053.005","T1059.003","T1070.004","T1074.001","T1074.002","T1083","T1119","T1124","T1560.001","T1564.001"]},{"id":"S1204","name":"cd00r","type":"software","techniques":["T1016","T1040","T1095","T1205.001"]},{"id":"S0160","name":"certutil","type":"software","techniques":["T1105","T1140","T1553.004","T1560.001"]},{"id":"S0106","name":"cmd","type":"software","techniques":["T1059.003","T1070.004","T1082","T1083","T1105","T1570"]},{"id":"S0472","name":"down_new","type":"software","techniques":["T1016","T1057","T1071.001","T1083","T1105","T1132.001","T1518","T1518.001","T1573.001","T1680"]},{"id":"S0105","name":"dsquery","type":"software","techniques":["T1069.002","T1082","T1087.002","T1482"]},{"id":"S0404","name":"esentutl","type":"software","techniques":["T1003.003","T1005","T1006","T1105","T1564.004","T1570"]},{"id":"S0095","name":"ftp","type":"software","techniques":["T1048.003","T1105","T1570"]},{"id":"S0032","name":"gh0st RAT","type":"software","techniques":["T1012","T1055","T1056.001","T1057","T1059","T1070.001","T1070.004","T1082","T1095","T1105","T1106","T1112","T1113","T1129","T1132.001","T1140","T1218.011","T1543.003","T1547.001","T1568.001","T1569.002","T1573","T1573.001","T1574.001"]},{"id":"S0008","name":"gsecdump","type":"software","techniques":["T1003.002","T1003.004"]},{"id":"S0071","name":"hcdLoader","type":"software","techniques":["T1059.003","T1543.003"]},{"id":"S0068","name":"httpclient","type":"software","techniques":["T1059.003","T1071.001","T1573.001"]},{"id":"S0278","name":"iKitten","type":"software","techniques":["T1016","T1037.004","T1056.002","T1057","T1555.001","T1560.001","T1564.001"]},{"id":"S0283","name":"jRAT","type":"software","techniques":["T1007","T1016","T1021.001","T1027","T1027.002","T1029","T1037.005","T1047","T1049","T1056.001","T1057","T1059.003","T1059.005","T1059.007","T1070.004","T1082","T1083","T1090","T1105","T1113","T1115","T1120","T1123","T1125","T1518.001","T1552.001","T1552.004","T1555.003"]},{"id":"S1048","name":"macOS.OSAMiner","type":"software","techniques":["T1027.008","T1027.009","T1057","T1059.002","T1082","T1105","T1497.001","T1543.001","T1562.001","T1569.001","T1680"]},{"id":"S1059","name":"metaMain","type":"software","techniques":["T1005","T1027.013","T1033","T1041","T1055","T1056","T1056.001","T1057","T1070.004","T1070.006","T1071.001","T1074.001","T1082","T1083","T1090.001","T1095","T1105","T1106","T1112","T1113","T1140","T1205.001","T1497.003","T1546.003","T1560.003","T1573.001","T1574.001","T1620"]},{"id":"S0102","name":"nbtstat","type":"software","techniques":["T1016","T1049"]},{"id":"S0108","name":"netsh","type":"software","techniques":["T1090","T1518.001","T1546.007","T1562.004"]},{"id":"S0508","name":"ngrok","type":"software","techniques":["T1090","T1102","T1567","T1568.002","T1572"]},{"id":"S0385","name":"njRAT","type":"software","techniques":["T1005","T1010","T1012","T1018","T1021.001","T1027.004","T1027.013","T1033","T1041","T1056.001","T1057","T1059.001","T1059.003","T1070.004","T1070.009","T1071.001","T1082","T1083","T1091","T1105","T1106","T1112","T1113","T1120","T1125","T1132.001","T1547.001","T1555.003","T1562.004","T1568.001","T1571"]},{"id":"S0067","name":"pngdowner","type":"software","techniques":["T1070.004","T1071.001","T1552.001"]},{"id":"S1187","name":"reGeorg","type":"software","techniques":["T1021.001","T1021.002","T1021.004","T1059.006","T1071.001","T1090","T1095","T1105","T1505.003","T1572"]},{"id":"S0653","name":"xCaon","type":"software","techniques":["T1005","T1016","T1059.003","T1071.001","T1105","T1106","T1132.001","T1140","T1518.001","T1547","T1573.001"]},{"id":"S0248","name":"yty","type":"software","techniques":["T1005","T1016","T1018","T1027.002","T1027.016","T1033","T1053.005","T1056.001","T1057","T1082","T1083","T1102.002","T1113","T1497.001","T1680"]},{"id":"S0350","name":"zwShell","type":"software","techniques":["T1016","T1021.001","T1021.002","T1033","T1053.005","T1059.003","T1070.004","T1082","T1083","T1112","T1543.003"]}]}