MITRE ATT&CK · CVEKit

LIVE

Top ATT&CK

50 · technique

Techniques

260

Sub-techniques

437

Mapped

178

Coverage

68.5%

CVE mappings

6.3k

Tactics

14

MITRE ATT&CK Matrix

drag to scroll →

Reconnaissance

TA00437/12

Active Scanning

Gather Victim Identity Information

Gather Victim Host Information

Gather Victim Network Information

Search Open Websites/Domains

Search Open Technical Databases

Search Closed Sources

Gather Victim Org Information

Search Victim-Owned Websites

Phishing for Information

Search Threat Vendor Data

Query Public AI Services

Resource Development

TA00425/9

Stage Capabilities

Acquire Infrastructure

Obtain Capabilities

Develop Capabilities

Compromise Infrastructure

Establish Accounts

Compromise Accounts

Generate Content

Execution

TA000220/28

Exploitation for Client Execution

Exploitation for Client Execution

Exploitation for Client Execution

Hijack Execution Flow

Windows Management Instrumentation

Windows Management Instrumentation

Scheduled Task/Job

Scheduled Task/Job

System Services

Trusted Developer Utilities Proxy Execution

Trusted Developer Utilities Proxy Execution

Trusted Developer Utilities Proxy Execution

Container Administration Command

Deploy Container

Serverless Execution

Cloud Administration Command

Input Injection

ESXi Administration Command

Poisoned Pipeline Execution

Privilege Escalation

TA00048/10

Process Injection

Process Injection

Scheduled Task/Job

Scheduled Task/Job

Access Token Manipulation

Access Token Manipulation

Access Token Manipulation

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts

Defense Evasion

TA00050/0

no techniques

Credential Access

TA000611/13

OS Credential Dumping

OS Credential Dumping

Network Sniffing

Network Sniffing

Exploitation for Credential Access

Exploitation for Credential Access

Exploitation for Credential Access

Forced Authentication

Forced Authentication

Forced Authentication

Forge Web Credentials

Multi-Factor Authentication Request Generation

Steal or Forge Authentication Certificates

Discovery

TA000732/43

Remote System Discovery

Remote System Discovery

System Owner/User Discovery

System Owner/User Discovery

System Network Configuration Discovery

System Network Configuration Discovery

Network Service Discovery

Network Service Discovery

Application Window Discovery

Application Window Discovery

System Network Connections Discovery

System Network Connections Discovery

Network Sniffing

Network Sniffing

System Time Discovery

System Time Discovery

System Time Discovery

Network Share Discovery

Network Share Discovery

Network Share Discovery

System Location Discovery

Peripheral Device Discovery

Peripheral Device Discovery

Peripheral Device Discovery

System Service Discovery

System Service Discovery

Browser Information Discovery

Browser Information Discovery

Browser Information Discovery

Container and Resource Discovery

Password Policy Discovery

Password Policy Discovery

Password Policy Discovery

Cloud Infrastructure Discovery

Group Policy Discovery

Cloud Storage Object Discovery

Debugger Evasion

Device Driver Discovery

Log Enumeration

Virtual Machine Discovery

Local Storage Discovery

Lateral Movement

TA00086/6

Remote Services

Remote Services

Exploitation of Remote Services

Exploitation of Remote Services

Exploitation of Remote Services

Lateral Tool Transfer

Command and Control

TA001114/19

Encrypted Channel

Data Obfuscation

Data Obfuscation

Non-Standard Port

Protocol Tunneling

Remote Access Tools

Remote Access Tools

Remote Access Tools

Fallback Channels

Fallback Channels

Dynamic Resolution

Traffic Signaling

Traffic Signaling

Traffic Signaling

Content Injection

Hide Infrastructure

Exfiltration

TA00108/14

Exfiltration Over C2 Channel

Exfiltration Over C2 Channel

Automated Exfiltration

Automated Exfiltration

Exfiltration Over Alternative Protocol

Exfiltration Over Alternative Protocol

Data Transfer Size Limits

Data Transfer Size Limits

Exfiltration Over Other Network Medium

Exfiltration Over Other Network Medium

Scheduled Transfer

Scheduled Transfer

Exfiltration Over Physical Medium

Exfiltration Over Physical Medium

Impact

TA00400/2

Financial Theft

Tactic Coverage

14 tactics

Reconnaissance7/12
Resource Development5/9
Initial Access18/20
Execution20/28
Persistence11/25
Privilege Escalation8/10
Defense Evasion0/0
Credential Access11/13
Discovery32/43
Lateral Movement6/6
Collection22/25
Command and Control14/19
Exfiltration8/14
Impact0/2

Legend:50+10–491–90