Modeltechnique
D3-OAMOperational Activity Mapping
Operational Activity Mapping
Definition
Defends against24
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Technique | Group Policy Discoveryt1615 | 100% | live |
| SubTechnique | Domain Accountt1087.002 | 100% | live |
| SubTechnique | Default Accountst1078.001 | 100% | live |
| SubTechnique | Setuid and Setgidt1548.001 | 100% | live |
| Technique | Account Access Removalt1531 | 100% | live |
| Technique | Create Accountt1136 | 100% | live |
| Technique | Valid Accountst1078 | 100% | live |
| SubTechnique | Cloud Accountt1087.004 | 100% | live |
| SubTechnique | Additional Cloud Rolest1098.003 | 100% | live |
| SubTechnique | Local Accountst1078.003 | 100% | live |
| SubTechnique | Cloud Accountst1078.004 | 100% | live |
| SubTechnique | Domain Accountt1136.002 | 100% | live |
| Technique | Domain Policy Modificationt1484 | 100% | live |
| SubTechnique | Additional Email Delegate Permissionst1098.002 | 100% | live |
| SubTechnique | SID-History Injectiont1134.005 | 100% | live |
| SubTechnique | Cloud Accountt1136.003 | 100% | live |
| Technique | File and Directory Permissions Modificationt1222 | 100% | live |
| Technique | t1556.009 | 100% | live |
| SubTechnique | Local Accountt1087.001 | 100% | live |
| SubTechnique | Temporary Elevated Cloud Accesst1548.005 | 100% | live |
| SubTechnique | Group Policy Preferencest1552.006 | 100% | live |
| Technique | Account Manipulationt1098 | 100% | live |
| SubTechnique | Local Accountt1136.001 | 100% | live |
| SubTechnique | Domain Accountst1078.002 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.