mitre_id technique_name tactics ability_count T1005 Data from Local System collection 4 T1016 System Network Configuration Discovery discovery 3 T1018 Remote System Discovery discovery 3 T1021.004 Remote Services: SSH lateral-movement 1 T1029 Scheduled Transfer exfiltration 1 T1030 Data Transfer Size Limits exfiltration 1 T1033 System Owner/User Discovery discovery 2 T1041 Exfiltration Over C2 Channel exfiltration 1 T1046 Network Service Scanning discovery 2 T1048.003 Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol exfiltration 1 T1049 System Network Connections Discovery discovery 1 T1053.003 Scheduled Task/Job: Cron persistence 1 T1057 Process Discovery discovery 4 T1059.004 Command and Scripting Interpreter: Unix Shell execution 1 T1069.001 Permission Groups Discovery: Local Groups discovery 1 T1070.003 Indicator Removal on Host: Clear Command History defense-evasion 1 T1070.004 Indicator Removal on Host: File Deletion defense-evasion 2 T1071.001 Application Layer Protocol: Web Protocols command-and-control 1 T1074.001 Data Staged: Local Data Staging collection 2 T1082 System Information Discovery discovery 2 T1083 File and Directory Discovery discovery 3 T1087.001 Account Discovery: Local Account discovery 1 T1105 Ingress Tool Transfer command-and-control 2 T1115 Clipboard Data collection 1 T1119 Automated Collection collection 1 T1120 Peripheral Device Discovery discovery 1 T1124 System Time Discovery discovery 1 T1201 Password Policy Discovery discovery 1 T1254 Conduct active scanning technical-information-gathering 1 T1349 Build or acquire exploits build-capabilities 1 T1491 Defacement impact 1 T1496 Resource Hijacking impact 1 T1497.003 Virtualization/Sandbox Evasion: Time Based Evasion defense-evasion 1 T1499 Endpoint Denial of Service impact 2 T1503.003 Scheduled Task/Job: Cron persistence 1 T1518 Software Discovery discovery 3 T1537 Transfer Data to Cloud Account exfiltration 1 T1548 Abuse Elevation Control Mechanism privilege-escalation 1 T1548.001 Abuse Elevation Control Mechanism: Setuid and Setgid privilege-escalation 1 T1552.003 Unsecured Credentials: Bash History credential-access 1 T1552.004 Unsecured Credentials: Private Keys credential-access 1 T1560.001 Archive Collected Data: Archive via Utility collection, exfiltration 3 T1565.001 Data Manipulation: Stored Data Manipulation impact 1 T1567.001 Exfiltration to Code Repository exfiltration 3 T1567.002 Exfiltration to Cloud Storage exfiltration 3 T1570 Lateral Tool Transfer lateral-movement 1 T1574.010 Hijack Execution Flow: Services File Permissions Weakness privilege-escalation 1