mitre-attack-enterpriseversion v18.1

MITRE ATT&CK Enterprise

691 controls.

Reference	Family	Title
T1055.004	n/a	Asynchronous Procedure Call
T1055.005	n/a	Thread Local Storage
T1055.008	n/a	Ptrace System Calls
T1055.009	n/a	Proc Memory
T1055.011	n/a	Extra Window Memory Injection
T1055.012	n/a	Process Hollowing
T1055.013	n/a	Process Doppelgänging
T1055.014	n/a	VDSO Hijacking
T1055.015	n/a	ListPlanting
T1056	n/a	Input Capture
T1056.001	n/a	Keylogging
T1056.002	n/a	GUI Input Capture
T1056.003	n/a	Web Portal Capture
T1056.004	n/a	Credential API Hooking
T1057	n/a	Process Discovery
T1059	n/a	Command and Scripting Interpreter
T1059.001	n/a	PowerShell
T1059.002	n/a	AppleScript
T1059.003	n/a	Windows Command Shell
T1059.004	n/a	Unix Shell
T1059.005	n/a	Visual Basic
T1059.006	n/a	Python
T1059.007	n/a	JavaScript
T1059.008	n/a	Network Device CLI
T1059.009	n/a	Cloud API
T1059.010	n/a	AutoHotKey & AutoIT
T1059.011	n/a	Lua
T1059.012	n/a	Hypervisor CLI
T1059.013	n/a	Container CLI/API
T1068	n/a	Exploitation for Privilege Escalation
T1069	n/a	Permission Groups Discovery
T1069.001	n/a	Local Groups
T1069.002	n/a	Domain Groups
T1069.003	n/a	Cloud Groups
T1070	n/a	Indicator Removal
T1070.001	n/a	Clear Windows Event Logs
T1070.002	n/a	Clear Linux or Mac System Logs
T1070.003	n/a	Clear Command History
T1070.004	n/a	File Deletion
T1070.005	n/a	Network Share Connection Removal
T1070.006	n/a	Timestomp
T1070.007	n/a	Clear Network Connection History and Configurations
T1070.008	n/a	Clear Mailbox Data
T1070.009	n/a	Clear Persistence
T1070.010	n/a	Relocate Malware
T1071	n/a	Application Layer Protocol
T1071.001	n/a	Web Protocols
T1071.002	n/a	File Transfer Protocols
T1071.003	n/a	Mail Protocols
T1071.004	n/a	DNS

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.