|
96 | 96 | { |
97 | 97 | "techniqueID": "T1190", |
98 | 98 | "tactic": "initial-access", |
99 | | - "score": 143, |
| 99 | + "score": 145, |
100 | 100 | "color": "", |
101 | 101 | "comment": "", |
102 | 102 | "enabled": true, |
|
305 | 305 | { |
306 | 306 | "techniqueID": "T1003", |
307 | 307 | "tactic": "credential-access", |
308 | | - "score": 34, |
| 308 | + "score": 35, |
309 | 309 | "color": "", |
310 | 310 | "comment": "", |
311 | 311 | "enabled": true, |
|
404 | 404 | { |
405 | 405 | "techniqueID": "T1562.001", |
406 | 406 | "tactic": "defense-evasion", |
407 | | - "score": 114, |
| 407 | + "score": 118, |
408 | 408 | "color": "", |
409 | 409 | "comment": "", |
410 | 410 | "enabled": true, |
|
800 | 800 | { |
801 | 801 | "techniqueID": "T1059", |
802 | 802 | "tactic": "execution", |
803 | | - "score": 91, |
| 803 | + "score": 93, |
804 | 804 | "color": "", |
805 | 805 | "comment": "", |
806 | 806 | "enabled": true, |
|
1053 | 1053 | { |
1054 | 1054 | "techniqueID": "T1105", |
1055 | 1055 | "tactic": "command-and-control", |
1056 | | - "score": 71, |
| 1056 | + "score": 74, |
1057 | 1057 | "color": "", |
1058 | 1058 | "comment": "", |
1059 | 1059 | "enabled": true, |
|
1196 | 1196 | { |
1197 | 1197 | "techniqueID": "T1102.002", |
1198 | 1198 | "tactic": "command-and-control", |
1199 | | - "score": 3, |
| 1199 | + "score": 4, |
1200 | 1200 | "color": "", |
1201 | 1201 | "comment": "", |
1202 | 1202 | "enabled": true, |
|
1350 | 1350 | { |
1351 | 1351 | "techniqueID": "T1003.001", |
1352 | 1352 | "tactic": "credential-access", |
1353 | | - "score": 77, |
| 1353 | + "score": 78, |
1354 | 1354 | "color": "", |
1355 | 1355 | "comment": "", |
1356 | 1356 | "enabled": true, |
|
2439 | 2439 | { |
2440 | 2440 | "techniqueID": "T1036.003", |
2441 | 2441 | "tactic": "defense-evasion", |
2442 | | - "score": 27, |
| 2442 | + "score": 28, |
2443 | 2443 | "color": "", |
2444 | 2444 | "comment": "", |
2445 | 2445 | "enabled": true, |
|
2846 | 2846 | { |
2847 | 2847 | "techniqueID": "T1566.001", |
2848 | 2848 | "tactic": "initial-access", |
2849 | | - "score": 22, |
| 2849 | + "score": 23, |
2850 | 2850 | "color": "", |
2851 | 2851 | "comment": "", |
2852 | 2852 | "enabled": true, |
|
2945 | 2945 | { |
2946 | 2946 | "techniqueID": "T1087", |
2947 | 2947 | "tactic": "discovery", |
2948 | | - "score": 15, |
| 2948 | + "score": 16, |
2949 | 2949 | "color": "", |
2950 | 2950 | "comment": "", |
2951 | 2951 | "enabled": true, |
|
3638 | 3638 | { |
3639 | 3639 | "techniqueID": "T1071", |
3640 | 3640 | "tactic": "command-and-control", |
3641 | | - "score": 6, |
| 3641 | + "score": 7, |
3642 | 3642 | "color": "", |
3643 | 3643 | "comment": "", |
3644 | 3644 | "enabled": true, |
|
5297 | 5297 | "showSubtechniques": false |
5298 | 5298 | }, |
5299 | 5299 | { |
5300 | | - "techniqueID": "T1546.004", |
5301 | | - "tactic": "privilege-escalation", |
5302 | | - "score": 1, |
| 5300 | + "techniqueID": "T1574.006", |
| 5301 | + "tactic": "persistence", |
| 5302 | + "score": 2, |
5303 | 5303 | "color": "", |
5304 | 5304 | "comment": "", |
5305 | 5305 | "enabled": true, |
|
5308 | 5308 | "showSubtechniques": false |
5309 | 5309 | }, |
5310 | 5310 | { |
5311 | | - "techniqueID": "T1546.004", |
5312 | | - "tactic": "persistence", |
5313 | | - "score": 1, |
| 5311 | + "techniqueID": "T1574.006", |
| 5312 | + "tactic": "privilege-escalation", |
| 5313 | + "score": 2, |
5314 | 5314 | "color": "", |
5315 | 5315 | "comment": "", |
5316 | 5316 | "enabled": true, |
|
5319 | 5319 | "showSubtechniques": false |
5320 | 5320 | }, |
5321 | 5321 | { |
5322 | | - "techniqueID": "T1543.002", |
5323 | | - "tactic": "persistence", |
| 5322 | + "techniqueID": "T1574.006", |
| 5323 | + "tactic": "defense-evasion", |
5324 | 5324 | "score": 2, |
5325 | 5325 | "color": "", |
5326 | 5326 | "comment": "", |
|
5330 | 5330 | "showSubtechniques": false |
5331 | 5331 | }, |
5332 | 5332 | { |
5333 | | - "techniqueID": "T1543.002", |
| 5333 | + "techniqueID": "T1546.004", |
5334 | 5334 | "tactic": "privilege-escalation", |
5335 | | - "score": 2, |
| 5335 | + "score": 1, |
5336 | 5336 | "color": "", |
5337 | 5337 | "comment": "", |
5338 | 5338 | "enabled": true, |
|
5341 | 5341 | "showSubtechniques": false |
5342 | 5342 | }, |
5343 | 5343 | { |
5344 | | - "techniqueID": "T1030", |
5345 | | - "tactic": "exfiltration", |
5346 | | - "score": 2, |
| 5344 | + "techniqueID": "T1546.004", |
| 5345 | + "tactic": "persistence", |
| 5346 | + "score": 1, |
5347 | 5347 | "color": "", |
5348 | 5348 | "comment": "", |
5349 | 5349 | "enabled": true, |
|
5352 | 5352 | "showSubtechniques": false |
5353 | 5353 | }, |
5354 | 5354 | { |
5355 | | - "techniqueID": "T1547.006", |
| 5355 | + "techniqueID": "T1543.002", |
5356 | 5356 | "tactic": "persistence", |
5357 | | - "score": 1, |
| 5357 | + "score": 2, |
5358 | 5358 | "color": "", |
5359 | 5359 | "comment": "", |
5360 | 5360 | "enabled": true, |
|
5363 | 5363 | "showSubtechniques": false |
5364 | 5364 | }, |
5365 | 5365 | { |
5366 | | - "techniqueID": "T1547.006", |
| 5366 | + "techniqueID": "T1543.002", |
5367 | 5367 | "tactic": "privilege-escalation", |
5368 | | - "score": 1, |
| 5368 | + "score": 2, |
5369 | 5369 | "color": "", |
5370 | 5370 | "comment": "", |
5371 | 5371 | "enabled": true, |
|
5374 | 5374 | "showSubtechniques": false |
5375 | 5375 | }, |
5376 | 5376 | { |
5377 | | - "techniqueID": "T1574.006", |
5378 | | - "tactic": "persistence", |
| 5377 | + "techniqueID": "T1499", |
| 5378 | + "tactic": "impact", |
5379 | 5379 | "score": 2, |
5380 | 5380 | "color": "", |
5381 | 5381 | "comment": "", |
|
5385 | 5385 | "showSubtechniques": false |
5386 | 5386 | }, |
5387 | 5387 | { |
5388 | | - "techniqueID": "T1574.006", |
5389 | | - "tactic": "privilege-escalation", |
| 5388 | + "techniqueID": "T1030", |
| 5389 | + "tactic": "exfiltration", |
5390 | 5390 | "score": 2, |
5391 | 5391 | "color": "", |
5392 | 5392 | "comment": "", |
|
5396 | 5396 | "showSubtechniques": false |
5397 | 5397 | }, |
5398 | 5398 | { |
5399 | | - "techniqueID": "T1574.006", |
5400 | | - "tactic": "defense-evasion", |
5401 | | - "score": 2, |
| 5399 | + "techniqueID": "T1547.006", |
| 5400 | + "tactic": "persistence", |
| 5401 | + "score": 1, |
5402 | 5402 | "color": "", |
5403 | 5403 | "comment": "", |
5404 | 5404 | "enabled": true, |
|
5407 | 5407 | "showSubtechniques": false |
5408 | 5408 | }, |
5409 | 5409 | { |
5410 | | - "techniqueID": "T1499", |
5411 | | - "tactic": "impact", |
5412 | | - "score": 2, |
| 5410 | + "techniqueID": "T1547.006", |
| 5411 | + "tactic": "privilege-escalation", |
| 5412 | + "score": 1, |
5413 | 5413 | "color": "", |
5414 | 5414 | "comment": "", |
5415 | 5415 | "enabled": true, |
|
5626 | 5626 | "links": [], |
5627 | 5627 | "showSubtechniques": false |
5628 | 5628 | }, |
| 5629 | + { |
| 5630 | + "techniqueID": "T1598.002", |
| 5631 | + "tactic": "reconnaissance", |
| 5632 | + "score": 1, |
| 5633 | + "color": "", |
| 5634 | + "comment": "", |
| 5635 | + "enabled": true, |
| 5636 | + "metadata": [], |
| 5637 | + "links": [], |
| 5638 | + "showSubtechniques": false |
| 5639 | + }, |
5629 | 5640 | { |
5630 | 5641 | "techniqueID": "T1090.004", |
5631 | 5642 | "tactic": "command-and-control", |
|
0 commit comments