TA0001 6
Initial Access
T1021.001Remote Services: Remote Desktop Protocol
T1133External Remote Services
T1190Exploit Public-Facing Application
T1566Phishing
T1566.001Phishing: Spear phishing Attachment
T1566.002Phishing: Spear phishing Link
TA0004 2
Privilege Escalation
T1078Valid Accounts
T1078.002Valid Accounts: Domain Accounts
TA0005 5
Defense Evasion
T1021.001Remote Services: Remote Desktop Protocol
T1070.001Indicator Removal: Clear Windows Event Logs
T1119Automated Collection
T1484.001Domain Policy Modification: Group Policy Modification
T1562.001Impair Defenses: Disable or Modify Tools
TA0006 0
Credential Access
TA0011 2
Command & Control
T1105Ingress Tool Transfer
T1572Protocol Tunneling
TA0040 2
Impact
T1486Data Encrypted for Impact
T1490Inhibit System Recovery