212 indexed

ATT&CKATT&CK techniques

212 top-level MITRE ATT&CK Enterprise techniques (T-IDs), grouped by tactic. Filter to a tactic or browse the full kill chain, then click into a technique for sub-techniques and mitigations. Authored by Adam Lundqvist.

5 in Privilege Escalation · 212 total

IDTitleSummary
T1068Exploitation for Privilege EscalationAdversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes a…
T1514Elevated Execution with PromptAdversaries may leverage the AuthorizationExecuteWithPrivileges API to escalate privileges by prompting the user for credentials.(Citation: AppleDocs Authoriza…
T1546Event Triggered ExecutionAdversaries may establish persistence and/or elevate privileges using system mechanisms that trigger execution based on specific events. Various operating syst…
T1548Abuse Elevation Control MechanismAdversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation con…
T1611Escape to HostAdversaries may break out of a container to gain access to the underlying host. This can allow an adversary access to other containerized resources from the ho…
Sourced from MITRE ATT&CK Enterprise (current release). Curated by Adam Lundqvist, Founder at SQUR.
MITRE ATT&CK techniques — by tactic | SQUR Knowledge Base