Last active
May 21, 2019 06:27
-
-
Save colindix/d6b28788286a74379e6a0a78fe441ba6 to your computer and use it in GitHub Desktop.
Prioritised_TG_Scored
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"name": "Priority_Threat_Groups_Scoring", | |
"version": "2.1", | |
"domain": "mitre-enterprise", | |
"description": "", | |
"filters": { | |
"stages": [ | |
"act" | |
], | |
"platforms": [ | |
"windows", | |
"linux", | |
"mac" | |
] | |
}, | |
"sorting": 0, | |
"viewMode": 0, | |
"hideDisabled": true, | |
"techniques": [ | |
{ | |
"techniqueID": "T1156", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1134", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1134", | |
"tactic": "privilege-escalation", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1015", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1015", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1087", | |
"tactic": "discovery", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1098", | |
"tactic": "credential-access", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1098", | |
"tactic": "persistence", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1182", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1182", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1103", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1103", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1155", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1155", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1017", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1138", | |
"tactic": "persistence", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1138", | |
"tactic": "privilege-escalation", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1010", | |
"tactic": "discovery", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1123", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1131", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1119", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1020", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1197", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1197", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1139", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1009", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1067", | |
"tactic": "persistence", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1217", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1176", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1110", | |
"tactic": "credential-access", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1088", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1088", | |
"tactic": "privilege-escalation", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1191", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1191", | |
"tactic": "execution", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1042", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1146", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1115", | |
"tactic": "collection", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1116", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1059", | |
"tactic": "execution", | |
"score": 37, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1043", | |
"tactic": "command-and-control", | |
"score": 19, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1092", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1500", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1223", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1223", | |
"tactic": "execution", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1109", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1109", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1122", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1122", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1090", | |
"tactic": "command-and-control", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1196", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1196", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1136", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1003", | |
"tactic": "credential-access", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1081", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1214", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1094", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1024", | |
"tactic": "command-and-control", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1207", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1038", | |
"tactic": "persistence", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1038", | |
"tactic": "privilege-escalation", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1038", | |
"tactic": "defense-evasion", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1073", | |
"tactic": "defense-evasion", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1002", | |
"tactic": "exfiltration", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1485", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1132", | |
"tactic": "command-and-control", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1022", | |
"tactic": "exfiltration", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1486", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1001", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1074", | |
"tactic": "collection", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1030", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1213", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1005", | |
"tactic": "collection", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1039", | |
"tactic": "collection", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1025", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1491", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1140", | |
"tactic": "defense-evasion", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1089", | |
"tactic": "defense-evasion", | |
"score": 19, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1488", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1487", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1175", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1172", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1483", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1482", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1189", | |
"tactic": "initial-access", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1157", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1157", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1173", | |
"tactic": "execution", | |
"score": 20, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1114", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1499", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1480", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1106", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1129", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1048", | |
"tactic": "exfiltration", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1041", | |
"tactic": "exfiltration", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1011", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1052", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1190", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1203", | |
"tactic": "execution", | |
"score": 27, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1212", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1211", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1068", | |
"tactic": "privilege-escalation", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1210", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1133", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1133", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1181", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1181", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1008", | |
"tactic": "command-and-control", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1107", | |
"tactic": "defense-evasion", | |
"score": 27, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1222", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1006", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1044", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1044", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1083", | |
"tactic": "discovery", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1495", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1187", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1144", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1061", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1484", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1148", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1200", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1158", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1158", | |
"tactic": "persistence", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1147", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1143", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1179", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1179", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1179", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1062", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1183", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1183", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1183", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1054", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1066", | |
"tactic": "defense-evasion", | |
"score": 5, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1070", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1202", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1490", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1056", | |
"tactic": "collection", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1056", | |
"tactic": "credential-access", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1141", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1130", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1118", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1118", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1208", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1215", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1142", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1161", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1149", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1171", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1177", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1177", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1159", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1160", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1160", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1152", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1152", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1152", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1168", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1168", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1162", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1037", | |
"tactic": "lateral-movement", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1037", | |
"tactic": "persistence", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1185", | |
"tactic": "collection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1036", | |
"tactic": "defense-evasion", | |
"score": 18, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1031", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1112", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1170", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1170", | |
"tactic": "execution", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1104", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1188", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1026", | |
"tactic": "command-and-control", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1079", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1096", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1128", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1498", | |
"tactic": "impact", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1046", | |
"tactic": "discovery", | |
"score": 18, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1126", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1135", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1040", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1040", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1050", | |
"tactic": "persistence", | |
"score": 29, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1050", | |
"tactic": "privilege-escalation", | |
"score": 29, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1027", | |
"tactic": "defense-evasion", | |
"score": 37, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1137", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1075", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1097", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1174", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1201", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1034", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1034", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1120", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1069", | |
"tactic": "discovery", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1150", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1150", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1150", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1205", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1205", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1205", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1013", | |
"tactic": "persistence", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1013", | |
"tactic": "privilege-escalation", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1086", | |
"tactic": "execution", | |
"score": 41, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1145", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1057", | |
"tactic": "discovery", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1186", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1093", | |
"tactic": "defense-evasion", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1055", | |
"tactic": "defense-evasion", | |
"score": 24, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1055", | |
"tactic": "privilege-escalation", | |
"score": 24, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1012", | |
"tactic": "discovery", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1163", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1164", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1108", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1108", | |
"tactic": "persistence", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1060", | |
"tactic": "persistence", | |
"score": 34, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1121", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1121", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1117", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1117", | |
"tactic": "execution", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1219", | |
"tactic": "command-and-control", | |
"score": 20, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1076", | |
"tactic": "lateral-movement", | |
"score": 27, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1105", | |
"tactic": "command-and-control", | |
"score": 42, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1105", | |
"tactic": "lateral-movement", | |
"score": 42, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1021", | |
"tactic": "lateral-movement", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1018", | |
"tactic": "discovery", | |
"score": 13, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1091", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1091", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1496", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1014", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1085", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1085", | |
"tactic": "execution", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1494", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1178", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1198", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1198", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1184", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1053", | |
"tactic": "execution", | |
"score": 28, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1053", | |
"tactic": "persistence", | |
"score": 28, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1053", | |
"tactic": "privilege-escalation", | |
"score": 28, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1029", | |
"tactic": "exfiltration", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1113", | |
"tactic": "collection", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1180", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1064", | |
"tactic": "defense-evasion", | |
"score": 45, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1064", | |
"tactic": "execution", | |
"score": 45, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1063", | |
"tactic": "discovery", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1101", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1167", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1035", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1058", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1058", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1489", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1166", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1166", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1051", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1023", | |
"tactic": "persistence", | |
"score": 19, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1218", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1218", | |
"tactic": "execution", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1216", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1216", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1045", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1153", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1151", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1151", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1193", | |
"tactic": "initial-access", | |
"score": 50, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1192", | |
"tactic": "initial-access", | |
"score": 15, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1194", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1071", | |
"tactic": "command-and-control", | |
"score": 34, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1032", | |
"tactic": "command-and-control", | |
"score": 19, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1095", | |
"tactic": "command-and-control", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1165", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1165", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1492", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1169", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1206", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1195", | |
"tactic": "initial-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1019", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1082", | |
"tactic": "discovery", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1016", | |
"tactic": "discovery", | |
"score": 22, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1049", | |
"tactic": "discovery", | |
"score": 13, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1033", | |
"tactic": "discovery", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1007", | |
"tactic": "discovery", | |
"score": 5, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1124", | |
"tactic": "discovery", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1501", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1080", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1221", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1072", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1072", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1209", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1099", | |
"tactic": "defense-evasion", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1493", | |
"tactic": "impact", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1154", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1154", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1127", | |
"tactic": "defense-evasion", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1127", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1199", | |
"tactic": "initial-access", | |
"score": 8, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1111", | |
"tactic": "credential-access", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1065", | |
"tactic": "command-and-control", | |
"score": 9, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1204", | |
"tactic": "execution", | |
"score": 50, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "defense-evasion", | |
"score": 18, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "persistence", | |
"score": 18, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "privilege-escalation", | |
"score": 18, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1078", | |
"tactic": "initial-access", | |
"score": 18, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1125", | |
"tactic": "collection", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1497", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1497", | |
"tactic": "discovery", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1102", | |
"tactic": "command-and-control", | |
"score": 15, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1102", | |
"tactic": "defense-evasion", | |
"score": 15, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1100", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1100", | |
"tactic": "privilege-escalation", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1077", | |
"tactic": "lateral-movement", | |
"score": 14, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1047", | |
"tactic": "execution", | |
"score": 17, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1084", | |
"tactic": "persistence", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1028", | |
"tactic": "execution", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1028", | |
"tactic": "lateral-movement", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1004", | |
"tactic": "persistence", | |
"score": 5, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1220", | |
"tactic": "defense-evasion", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1220", | |
"tactic": "execution", | |
"score": 10, | |
"color": "", | |
"comment": "", | |
"enabled": true, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1266", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1247", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1277", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1329", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1307", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1308", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1330", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1310", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1332", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1275", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1293", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1288", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1301", | |
"tactic": "organizational-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1287", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1294", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1300", | |
"tactic": "organizational-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1289", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1297", | |
"tactic": "people-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1303", | |
"tactic": "organizational-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1295", | |
"tactic": "people-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1306", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1229", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1236", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1224", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1299", | |
"tactic": "organizational-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1302", | |
"tactic": "organizational-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1296", | |
"tactic": "people-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1298", | |
"tactic": "organizational-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1238", | |
"tactic": "priority-definition-direction", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1228", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1347", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1349", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1341", | |
"tactic": "persona-development", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1328", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1352", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1391", | |
"tactic": "persona-development", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1343", | |
"tactic": "persona-development", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1321", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1312", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1334", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1354", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1254", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1226", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1253", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1279", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1268", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1249", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1339", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1345", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1232", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1355", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1231", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1324", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1320", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1230", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1284", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1260", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1245", | |
"tactic": "target-selection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1285", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1250", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1259", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1258", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1243", | |
"tactic": "target-selection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1242", | |
"tactic": "target-selection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1282", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1244", | |
"tactic": "target-selection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1241", | |
"tactic": "target-selection", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1227", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1342", | |
"tactic": "persona-development", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1350", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1255", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1379", | |
"tactic": "stage-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1394", | |
"tactic": "stage-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1326", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1286", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1311", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1333", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1262", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1261", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1325", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1344", | |
"tactic": "persona-development", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1364", | |
"tactic": "stage-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1234", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1365", | |
"tactic": "stage-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1314", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1233", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1280", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1272", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1283", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1225", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1270", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1248", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1278", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1267", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1269", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1271", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1348", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1263", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1274", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1276", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1246", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1265", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1264", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1389", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1256", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1336", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1252", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1273", | |
"tactic": "people-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1257", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1322", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1315", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1316", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1390", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1309", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1331", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1318", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1319", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1313", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1392", | |
"tactic": "persona-development", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1396", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1251", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1281", | |
"tactic": "organizational-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1346", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1363", | |
"tactic": "stage-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1353", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1305", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1335", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1304", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1239", | |
"tactic": "priority-definition-direction", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1235", | |
"tactic": "priority-definition-planning", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1351", | |
"tactic": "build-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1291", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1290", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1358", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1337", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1338", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1317", | |
"tactic": "adversary-opsec", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1340", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1397", | |
"tactic": "technical-information-gathering", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1237", | |
"tactic": "priority-definition-direction", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1240", | |
"tactic": "priority-definition-direction", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1393", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1356", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1357", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1359", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1360", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1292", | |
"tactic": "technical-weakness-identification", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1361", | |
"tactic": "test-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1362", | |
"tactic": "stage-capabilities", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
}, | |
{ | |
"techniqueID": "T1327", | |
"tactic": "establish-&-maintain-infrastructure", | |
"color": "", | |
"comment": "", | |
"enabled": false, | |
"metadata": [] | |
} | |
], | |
"gradient": { | |
"colors": [ | |
"#ffe766", | |
"#ef8034", | |
"#f33030" | |
], | |
"minValue": 5, | |
"maxValue": 60 | |
}, | |
"legendItems": [], | |
"metadata": [], | |
"showTacticRowBackground": true, | |
"tacticRowBackground": "#dddddd", | |
"selectTechniquesAcrossTactics": true | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment