Technique Explorer
117 unique MITRE ATT&CK techniques across 143 adversary profiles
117
Unique Techniques
832
Total TTP Uses
14
Tactics Covered
143
Adversary Profiles
Kill-Chain Coverage
Reconnaissance
7
Resource Development
13
Initial Access
131
Execution
86
Persistence
97
Privilege Escalation
53
Defense Evasion
64
Credential Access
24
Discovery
20
Lateral Movement
26
Collection
65
Command and Control
75
Exfiltration
51
Impact
120
Most Prevalent Techniques
Coverage Heatmap
Each cell is one technique. Brightness = how many adversary groups use it. Click to open MITRE ATT&CK.
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact
RECONReconnaissance4 techniques
RESOURCEResource Development7 techniques
INIT ACCESSInitial Access13 techniques
T1566.001
Spearphishing Attachment
APT28APT1Lazarus GroupKimsukyAPT33APT34FIN7APT40Bronze ButlerMustang PandaGamaredonBitterSideWinderTransparent TribeTA413MuddyWaterAPT-C-36FIN8TA505TA558MoleratsEvilnumGorgon GroupMacheteCarbanakTrickBot / RyukEmotet / MealybugIcedID / BokbotTA2101APT31APT32APT37APT39Cadet BlizzardOnyx SleetMoonstone SleetEvil CorpBlack BastaAkiraRhysidaAPT12APT30NaikonKe3changTropic TrooperTonto TeamAoqin DragonDarkHydrusWIRTEEmber BearInceptionStealth Falcon
52×
T1190
Exploit Public-Facing Application
APT41REvilBlackCat / ALPHVAnonymousAPT10HafniumSalt TyphoonPredatory SparrowMoses StaffGhostSecGuacamayaYellow GarudaCl0pMagecartAquatic PandaEarth LuscaFlax TyphoonBerserk BearCyber Army of Russia RebornPioneer KittenPlayRansomHubLightBasinShinyHuntersAPT3APT27Earth EstriesGhostEmperorToddyCatVelvet AntCobalt MirageEmber BearRoyal / BlackSuitINC Ransom8BaseCactusHandalaSiegedSecKillSec
39×
EXECExecution8 techniques
PERSISTPersistence6 techniques
T1078
Valid Accounts
Equation GroupAPT28APT29SandwormAPT41Volt TyphoonAPT35REvilLockBitContiScattered SpiderBlackCat / ALPHVAPT10Salt TyphoonCyber Av3ngersRedHackOperation AuroraLapsus$UNC3944SilverFishDarkSideHiveBlackMatterVice SocietyFIN6FIN5APT31APT39APT42Aquatic PandaFlax TyphoonStorm-0558Berserk BearOnyx SleetPioneer KittenEvil CorpBlack BastaAkiraPlayRhysidaRansomHubLightBasinShinyHuntersThe ComViLEAPT3APT17APT27Earth EstriesLiminal PandaGhostEmperorVelvet AntCobalt MirageBlueNoroffMedusaINC RansomQilinHunters International8BaseCactusBrain CipherHandalaSiegedSecKillSec
64×
PRIV ESCPrivilege Escalation3 techniques
DEF EVASIONDefense Evasion11 techniques
T1027
Obfuscated Files or Information
APT40Mustang PandaSideWinderAPT31BlackTechEarth LuscaAPT3APT12APT17APT19APT27APT30NaikonKe3changTropic TrooperTonto TeamEarth EstriesGhostEmperorToddyCatAoqin DragonVelvet AntDarkHydrusWIRTEAPT43BlueNoroffEmber BearInceptionStealth FalconPROMETHIUMMoustachedBouncerINC RansomQilinHunters International8BaseBrain Cipher
35×
CRED ACCESSCredential Access8 techniques
DISCOVERYDiscovery4 techniques
LAT MOVELateral Movement5 techniques
COLLECTIONCollection15 techniques
C2Command and Control11 techniques
T1071.001
Web Protocols
APT1APT38APT34FIN7Bronze ButlerMustang PandaSideWinderAPT-C-36TA558MoleratsBahamutEmotet / MealybugIcedID / BokbotAPT31Aquatic PandaEarth LuscaCyber Army of Russia RebornLightBasinAPT12APT17APT19APT27APT30Ke3changTropic TrooperTonto TeamEarth EstriesLiminal PandaGhostEmperorToddyCatAoqin DragonDarkHydrusWIRTEAPT43BlueNoroffInceptionStealth FalconPROMETHIUMMoustachedBouncer
39×
EXFILExfiltration5 techniques
IMPACTImpact17 techniques
T1486
Data Encrypted for Impact
APT41Lazarus GroupAPT33REvilLockBitContiBlackCat / ALPHVMoses StaffGhostSecFIN8TA505Cl0pDarkSideHiveBlackMatterVice SocietyFIN6TrickBot / RyukIcedID / BokbotTA2101Cadet BlizzardMoonstone SleetPioneer KittenEvil CorpBlack BastaAkiraPlayRhysidaRansomHubCobalt MirageRoyal / BlackSuitMedusaINC RansomQilinHunters International8BaseCactusBrain CipherHandalaKillSec
40×
Data sourced from MITRE ATT&CK. For educational purposes.