TA0001 1
Initial Access
T1190Exploit Public-Facing Application
TA0002 2
Execution
T1053.005Scheduled Task/Job: Scheduled Task
T1072Software Deployment Tools
TA0003 1
Persistence
T1136Create Account
TA0004 0
Privilege Escalation
TA0005 3
Defense Evasion
T1027Obfuscated Files or Information
T1027.002Obfuscated Files or Information: Software Packing
T1562.001Disable or Modify Tools
TA0006 2
Credential Access
T1003.001OS Credential Dumping
T1555.003Credentials from Web Browsers
TA0007 4
Discovery
T1018Remote System Discovery
T1049System Network Connections Discovery
T1087Account Discovery
T1087.002Account Discovery: Domain Account
TA0008 3
Lateral Movement
T1021.001Remote Desktop Protocol
T1021.004Remote Services: SSH
T1570Lateral Tool Transfer
TA0010 1
Exfiltration
T1567.002Exfiltration to Cloud Storage
TA0011 2
Command & Control
T1090Proxy
T1219Remote Access Software
TA0040 1
Impact
T1486Data Encrypted for Impact