Isolatetechnique

D3-CMContent Modification

Content Modification

Definition

Modify content that does not comply with policy.

Defends against99

TypeTargetConfidenceTier
SubTechniqueOffice Template Macrost1137.001100%live
SubTechniqueLaunchdt1053.004100%live
SubTechniqueArchive via Custom Methodt1560.003100%live
SubTechniqueRe-opened Applicationst1547.007100%live
SubTechniqueShortcut Modificationt1547.009100%live
SubTechniqueAppCert DLLst1546.009100%live
TechniqueAutomated Collectiont1119100%live
SubTechniqueRun Virtual Instancet1564.006100%live
SubTechniqueThread Execution Hijackingt1055.003100%live
SubTechniqueProc Memoryt1055.009100%live
SubTechniquePortable Executable Injectiont1055.002100%live
SubTechniqueSpearphishing Attachmentt1566.001100%live
SubTechniqueMalicious Filet1204.002100%live
SubTechniqueLaunch Agentt1543.001100%live
SubTechniqueAppInit DLLst1546.010100%live
SubTechniqueCOR_PROFILERt1574.012100%live
SubTechniqueWeb Protocolst1071.001100%live
SubTechniqueBinary Paddingt1027.001100%live
SubTechniqueMshtat1218.005100%live
SubTechniquePluggable Authentication Modulest1556.003100%live
SubTechniqueDLL Search Order Hijackingt1574.001100%live
SubTechniquePath Interception by PATH Environment Variablet1574.007100%live
SubTechniqueRegistry Run Keys / Startup Foldert1547.001100%live
SubTechniqueLocal Email Collectiont1114.001100%live
TechniqueData from Local Systemt1005100%live
TechniqueXSL Script Processingt1220100%live
SubTechniqueCompile After Deliveryt1027.004100%live
SubTechniqueArchive via Libraryt1560.002100%live
SubTechniqueStored Data Manipulationt1565.001100%live
SubTechniqueDylib Hijackingt1574.004100%live

Showing top 30 of 99 by confidence. Click any target to see the full neighbourhood.

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Defence
Content Validation
Defence
Content Quarantine
Defence
Content Substitution
Defence
Content Rebuild
Defence
Content Filtering
Defence
Content Format Conversion
Sourced from MITRE D3FEND ontology. Curated by Adam Lundqvist, SQUR.