Heatmap ATT&CK pessoal

As 14 táticas do MITRE ATT&CK Enterprise, com as técnicas que cubro defensivamente acesas. O meu CV na linguagem nativa da indústria — passa o rato (ou foca) numa técnica para ver o que a cobre.

Controlo em produçãoExperiência pontual / labFora do meu âmbito40 técnicas mapeadas · 23 prod · 17 lab

Reconnaissance

T1595Active Scanning

T1592Gather Victim Host Info

T1589Gather Victim Identity Info

Resource Development

T1583Acquire Infrastructure

T1587Develop Capabilities

Initial Access

T1190Exploit Public-Facing App

T1566Phishing

T1133External Remote Services

T1078Valid Accounts

Execution

T1059Command & Scripting Interpreter

T1204User Execution

T1053Scheduled Task/Job

Persistence

T1098Account Manipulation

T1547Boot/Logon Autostart

T1136Create Account

Privilege Escalation

T1068Exploit for Privilege Escalation

T1548Abuse Elevation Control

T1078Valid Accounts

Defense Evasion

T1562Impair Defenses

T1070Indicator Removal

T1027Obfuscated Files/Info

T1036Masquerading

Credential Access

T1110Brute Force

T1003OS Credential Dumping

T1555Credentials from Stores

Discovery

T1046Network Service Discovery

T1087Account Discovery

T1018Remote System Discovery

Lateral Movement

T1021Remote Services

T1570Lateral Tool Transfer

Collection

T1005Data from Local System

T1114Email Collection

Command & Control

T1071Application Layer Protocol

T1573Encrypted Channel

T1090Proxy

Exfiltration

T1041Exfiltration Over C2 Channel

T1048Exfil Over Alternative Protocol

Impact

T1486Data Encrypted for Impact

T1490Inhibit System Recovery

T1498Network Denial of Service