mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

691 controls.

Reference	Family	Title
T1001	n/a	Data Obfuscation
T1001.001	n/a	Junk Data
T1001.002	n/a	Steganography
T1001.003	n/a	Protocol or Service Impersonation
T1003	n/a	OS Credential Dumping
T1003.001	n/a	LSASS Memory
T1003.002	n/a	Security Account Manager
T1003.003	n/a	NTDS
T1003.004	n/a	LSA Secrets
T1003.005	n/a	Cached Domain Credentials
T1003.006	n/a	DCSync
T1003.007	n/a	Proc Filesystem
T1003.008	n/a	/etc/passwd and /etc/shadow
T1005	n/a	Data from Local System
T1006	n/a	Direct Volume Access
T1007	n/a	System Service Discovery
T1008	n/a	Fallback Channels
T1010	n/a	Application Window Discovery
T1011	n/a	Exfiltration Over Other Network Medium
T1011.001	n/a	Exfiltration Over Bluetooth
T1012	n/a	Query Registry
T1014	n/a	Rootkit
T1016	n/a	System Network Configuration Discovery
T1016.001	n/a	Internet Connection Discovery
T1016.002	n/a	Wi-Fi Discovery
T1018	n/a	Remote System Discovery
T1020	n/a	Automated Exfiltration
T1020.001	n/a	Traffic Duplication
T1021	n/a	Remote Services
T1021.001	n/a	Remote Desktop Protocol
T1021.002	n/a	SMB/Windows Admin Shares
T1021.003	n/a	Distributed Component Object Model
T1021.004	n/a	SSH
T1021.005	n/a	VNC
T1021.006	n/a	Windows Remote Management
T1021.007	n/a	Cloud Services
T1021.008	n/a	Direct Cloud VM Connections
T1025	n/a	Data from Removable Media
T1027	n/a	Obfuscated Files or Information
T1027.001	n/a	Binary Padding
T1027.002	n/a	Software Packing
T1027.003	n/a	Steganography
T1027.004	n/a	Compile After Delivery
T1027.005	n/a	Indicator Removal from Tools
T1027.006	n/a	HTML Smuggling
T1027.007	n/a	Dynamic API Resolution
T1027.008	n/a	Stripped Payloads
T1027.009	n/a	Embedded Payloads
T1027.010	n/a	Command Obfuscation
T1027.011	n/a	Fileless Storage

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.