New version: MITRE ATT&CK Enterprise (20.0) – 0 new, 1252 changed, 0 removed
- Document: MITRE ATT&CK Enterprise (https://raw.githubusercontent.com/mitre-attack/attack-stix-data/master/enterprise-attack/enterprise-attack-20.0.json)
- Version: 20.0
- Project: MITREATTACK
- Import: #613, 20.10.2026 17:06, mitre
The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).
Taken over directly (additional fields, HTML of an unchanged text): 1630 issues.
Review: 0 open, 1252 applied, 0 rejected.
Changed sections (1252)
- Password Filter DLL Mitigation – text [applied]
course-of-action--00d7d21b-69d6-4797-88a2-c86f3fc97651 - HISTCONTROL Mitigation – text [applied]
course-of-action--03c0c586-50ed-45a7-95f4-f496d7eb5330 - Credentials in Files Mitigation – text [applied]
course-of-action--0472af99-f25c-4abe-9fce-010fa3450e72 - Exploitation for Credential Access Mitigation – text [applied]
course-of-action--06160d81-62be-46e5-aa37-4b9c645ffa31 - Query Registry Mitigation – text [applied]
course-of-action--0640214c-95af-4c04-a574-2a1ba6dda00b - Login Item Mitigation – text [applied]
course-of-action--06824aa2-94a5-474c-97f6-57c2e983d885 - Compiled HTML File Mitigation – text [applied]
course-of-action--08e02f67-ea09-4f77-a70b-414963c29fc2 - Data Destruction Mitigation – text [applied]
course-of-action--0b3ee33e-430b-476f-9525-72d120c90f8d - Windows Management Instrumentation Event Subscription Mitigation – text [applied]
course-of-action--0bc3ce00-83bc-4a92-a042-79ffbc6af259 - File System Permissions Weakness Mitigation – text [applied]
course-of-action--1022138b-497c-40e6-b53a-13351cbd4090 - AppInit DLLs Mitigation – text [applied]
course-of-action--10571bf2-8073-4edf-a71c-23bad225532e - Regsvr32 Mitigation – text [applied]
course-of-action--12c13879-b7bd-4bc5-8def-aacec386d432 - Data from Information Repositories Mitigation – text [applied]
course-of-action--13cad982-35e3-4340-9095-7124b653df4b - Exploitation of Remote Services Mitigation – text [applied]
course-of-action--14b63e6b-7531-4476-9e60-02cc5db48b62 - Vulnerability Scanning – text [applied]
course-of-action--15437c6d-b998-4a36-be41-4ace3d54d266 - Domain Trust Discovery Mitigation – text [applied]
course-of-action--159b4ee4-8fa1-44a5-b095-2973f3c7e25e - Third-party Software Mitigation – text [applied]
course-of-action--160af6af-e733-4b6a-a04a-71c620ac0930 - Binary Padding Mitigation – text [applied]
course-of-action--16a8ac85-a06f-460f-ad22-910167bd7332 - Audio Capture Mitigation – text [applied]
course-of-action--16dd03c6-0dfb-4d77-89cd-9ff3ee6e533d - System Owner/User Discovery Mitigation – text [applied]
course-of-action--16f144e4-c780-4ed2-98b4-55d14e2dfa44 - Peripheral Device Discovery Mitigation – text [applied]
course-of-action--1881da33-fdf2-4eea-afd0-e04caf9c000f - Clipboard Data Mitigation – text [applied]
course-of-action--19edfa02-1a5f-47e4-ad82-3288f57f64cf - Scheduled Transfer Mitigation – text [applied]
course-of-action--1c0711c8-2a73-48a1-893d-ff88bcd23824 - Browser Bookmark Discovery Mitigation – text [applied]
course-of-action--1c0b39f9-a0c5-42b2-abd8-dc8f1eb74e67 - Port Monitors Mitigation – text [applied]
course-of-action--1c6bc7f3-d517-4971-aed4-8f939090846b - Limit Access to Resource Over Network – text [applied]
course-of-action--1dcaeb21-9348-42ea-950a-f842aaf1ae1f - AppleScript Mitigation – text [applied]
course-of-action--1e4ef2c7-ee96-4484-9baa-3b5777561301 - Indirect Command Execution Mitigation – text [applied]
course-of-action--1e614ba5-2fc5-4464-b512-2ceafb14d76d - Network Share Discovery Mitigation – text [applied]
course-of-action--1f34230d-b6ae-4dc7-8599-78c18820bd21 - Remote Data Storage – text [applied]
course-of-action--20a2baeb-98c2-4901-bad7-dc62d0a03dea - Filter Network Traffic – text [applied]
course-of-action--20f6a9df-37c4-4e20-9e47-025983b1b39d - Restrict Web-Based Content – text [applied]
course-of-action--21da4fd4-27ad-4e9c-b93d-0b9b14d02c96 - Install Root Certificate Mitigation – text [applied]
course-of-action--23061b40-a7b6-454f-8950-95d5ff80331c - Limit Software Installation – text [applied]
course-of-action--23843cff-f7b9-4659-a7b7-713ef347f547 - Multilayer Encryption Mitigation – text [applied]
course-of-action--24478001-2eb3-4b06-a02e-96b3d61d27ec - Automated Exfiltration Mitigation – text [applied]
course-of-action--2497ac92-e751-4391-82c6-1b86e34d0294 - Application Window Discovery Mitigation – text [applied]
course-of-action--25d5e1d8-c6fb-4735-bc57-115a21222f4b - Application Developer Guidance – text [applied]
course-of-action--25dc1ce8-eb55-4333-ae30-a7cb4f5894a1 - System Firmware Mitigation – text [applied]
course-of-action--25e53928-6f33-49b7-baee-8180578286f6 - Data Compressed Mitigation – text [applied]
course-of-action--28adf6fd-ab6c-4553-9aa7-cef18a191f33 - Limit Hardware Installation – text [applied]
course-of-action--2995bc22-2851-4345-ad19-4e7e295be264 - User Training – text [applied]
course-of-action--2a4f6c11-a4a7-4cb9-b0ef-6ae1bb3a718a - Data Encrypted Mitigation – text [applied]
course-of-action--2a8de25c-f743-4348-b101-3ee33ab5871b - File and Directory Discovery Mitigation – text [applied]
course-of-action--2ace01f8-67c8-43eb-b7b1-a7b9f1fe67e1 - User Account Control – text [applied]
course-of-action--2c2ad92a-d710-41ab-a996-1db143bb4808 - Operating System Configuration – text [applied]
course-of-action--2f316f6c-ae42-44fe-adf8-150989e0f6d3 - Windows Admin Shares Mitigation – text [applied]
course-of-action--308855d1-078b-47ad-8d2a-8f9b2713ffb5 - Winlogon Helper DLL Mitigation – text [applied]
course-of-action--313c8b20-4d49-40c1-9ac0-4c573aca28f3 - Runtime Data Manipulation Mitigation – text [applied]
course-of-action--337172b1-b003-4034-8a3f-1d89a71da628 - Image File Execution Options Injection Mitigation – text [applied]
course-of-action--33f76731-b840-446f-bee0-53687dad24d9 - Process Doppelgänging Mitigation – text [applied]
course-of-action--34d6a2ef-370e-4d21-a34b-6208b7c78f31 - File Deletion Mitigation – text [applied]
course-of-action--34efb2fd-4dc2-40d4-a564-0c147c85034d - Exploitation for Defense Evasion Mitigation – text [applied]
course-of-action--37a3f3f5-76e6-43fe-b935-f1f494c95725 - Email Collection Mitigation – text [applied]
course-of-action--383caaa3-c46a-4f61-b2e3-653eb132f0e7 - Data from Removable Media Mitigation – text [applied]
course-of-action--39706d54-0d06-4a25-816a-78cc43455100 - Standard Non-Application Layer Protocol Mitigation – text [applied]
course-of-action--399d9038-b100-43ef-b28d-a5065106b935 - Control Panel Items Mitigation – text [applied]
course-of-action--3a41b366-cfd6-4af2-a6e7-3c6e3c4ebcef - Pass the Ticket Mitigation – text [applied]
course-of-action--3a476d83-43eb-4fad-9b75-b1febd834e3d - Domain Generation Algorithms Mitigation – text [applied]
course-of-action--3bd2cf87-1ceb-4317-9aee-3e7dc713261b - Clear Command History Mitigation – text [applied]
course-of-action--3e7018e9-7389-48e7-9208-0bdbcbba9483 - Windows Remote Management Mitigation – text [applied]
course-of-action--3e9f8875-d2f7-4380-a578-84393bd3b025 - Data Backup – text [applied]
course-of-action--3efe43d1-6f3f-4fcb-ab39-4a730971f70b - SSH Hijacking Mitigation – text [applied]
course-of-action--41cff8e9-fd05-408e-b3d5-d98c54c20bcf - Data Encrypted for Impact Mitigation – text [applied]
course-of-action--429a5c0c-e132-45c0-a4aa-c1f736c92a1c - Shared Webroot Mitigation – text [applied]
course-of-action--43b366a4-b5ff-4d4e-8a3b-f09a9d2faff5 - Kernel Modules and Extensions Mitigation – text [applied]
course-of-action--44155d14-ca75-4fdf-b033-ab3d732e2884 - Masquerading Mitigation – text [applied]
course-of-action--45e7f570-6a0b-4095-bf02-4bca05da6bae - Web Service Mitigation – text [applied]
course-of-action--4689b9fb-dca4-473e-831b-34717ad50c97 - Resource Hijacking Mitigation – text [applied]
course-of-action--46acc565-11aa-40ba-b629-33ba0ab9b07b - Network Sniffing Mitigation – text [applied]
course-of-action--46b7ef91-4e1d-43c5-a2eb-00fa9444f6f4 - Execution Prevention – text [applied]
course-of-action--47e0e9fe-96ce-4f65-8bb1-8be1feacb5db - Password Policy Discovery Mitigation – text [applied]
course-of-action--49961e75-b493-423a-9ec7-ac2d6f55384a - Credential Access Protection – text [applied]
course-of-action--49c06d54-9002-491d-9147-8efb537fbd26 - Brute Force Mitigation – text [applied]
course-of-action--4a99fecc-680b-448e-8fe7-8144c60d272c - Indicator Removal from Tools Mitigation – text [applied]
course-of-action--4b998a71-7b8f-4dcc-8f3f-277f2e740271 - Multi-Stage Channels Mitigation – text [applied]
course-of-action--514e7371-a344-4de7-8ec3-3aa42b801d52 - Fallback Channels Mitigation – text [applied]
course-of-action--515f6584-fa98-44fe-a4e8-e428c7188514 - Screen Capture Mitigation – text [applied]
course-of-action--51b37302-b844-4c08-ac98-ae6955ed1f55 - Remote Desktop Protocol Mitigation – text [applied]
course-of-action--53b3b027-bed3-480c-9101-1247047d0fe6 - LLMNR/NBT-NS Poisoning Mitigation – text [applied]
course-of-action--54246e2e-683f-4bf2-be4c-d7d5a60e7d22 - User Execution Mitigation – text [applied]
course-of-action--548bf7ad-e19c-4d74-84bf-84ac4e57f505 - Hardware Additions Mitigation – text [applied]
course-of-action--54e8722d-2faf-4b1b-93b6-6cbf9551669f - Scripting Mitigation – text [applied]
course-of-action--57019a80-8523-46b6-be7d-f763a15a2cc6 - Code Signing – text [applied]
course-of-action--590777b3-b475-4c7c-aaf8-f4a73b140312 - Timestomp Mitigation – text [applied]
course-of-action--5c167af7-c2cb-42c8-ae67-3fb275bf8488 - Account Discovery Mitigation – text [applied]
course-of-action--5c49bc54-9929-48ca-b581-7018219b5a97 - Defacement Mitigation – text [applied]
course-of-action--5d8507c4-603e-4fe1-8a4a-b8241f58734b - Environment Variable Permissions – text [applied]
course-of-action--609191bf-7d06-40e4-b1f8-9e11eb3ff8a6 - Re-opened Applications Mitigation – text [applied]
course-of-action--61d02387-351a-453e-a575-160a9abc3e04 - Netsh Helper DLL Mitigation – text [applied]
course-of-action--624d063d-cda8-4616-b4e4-54c04e427aec - Domain Fronting Mitigation – text [applied]
course-of-action--62ae52c9-7197-4f5b-be1d-10d2e1df2c96 - Data Loss Prevention – text [applied]
course-of-action--65401701-019d-44ff-b223-08d520bb0e7b - Network Denial of Service Mitigation – text [applied]
course-of-action--654addf1-47ab-410a-8578-e1a0dc2a49b8 - System Network Configuration Discovery Mitigation – text [applied]
course-of-action--684feec3-f9ba-4049-9d8f-52d52f3e0e40 - Forced Authentication Mitigation – text [applied]
course-of-action--7009ba4d-83d4-4851-9fbb-e09e28497765 - Privileged Process Integrity – text [applied]
course-of-action--72dade3e-1cba-4182-b3b3-a77ca52f02a1 - Multi-hop Proxy Mitigation – text [applied]
course-of-action--752db800-ea54-4e7a-b4c1-2a0292350ea7 - XSL Script Processing Mitigation – text [applied]
course-of-action--7708ac15-4beb-4863-a1a5-da2d63fb8a3c - Do Not Mitigate – text [applied]
course-of-action--787fb64d-c87b-4ee5-a341-0ef17ec4c15c - Pre-compromise – text [applied]
course-of-action--78bb71be-92b4-46de-acd6-5f998fedf1cc - Drive-by Compromise Mitigation – text [applied]
course-of-action--7a4d0054-53cd-476f-88af-955dddc80ee0 - LSASS Driver Mitigation – text [applied]
course-of-action--7a6e5ca3-562f-4185-a323-f3b62b5b2e6b - SSL/TLS Inspection – text [applied]
course-of-action--7bb5fae9-53ad-4424-866b-f0ea2a8b731d - Commonly Used Port Mitigation – text [applied]
course-of-action--7c1796c7-9fc3-4c3e-9416-527295bf5d95 - Process Hollowing Mitigation – text [applied]
course-of-action--7c39ebbf-244e-4d1c-b0ac-b282453ece43 - Boot Integrity – text [applied]
course-of-action--7da0387c-ba92-4553-b291-b636ee42b2eb - Data from Local System Mitigation – text [applied]
course-of-action--7ee0879d-ce4f-4f54-a96b-c532dfb98ffd - Out-of-Band Communications Channel – text [applied]
course-of-action--80a0e940-f683-4fbd-ac00-e9f935f2f808 - Dynamic Data Exchange Mitigation – text [applied]
course-of-action--80c91478-ac87-434f-bee7-11f37aec4d74 - Endpoint Denial of Service Mitigation – text [applied]
course-of-action--82c21600-ccb6-4232-8c04-ef3792b56628 - System Time Discovery Mitigation – text [applied]
course-of-action--82d8e990-c901-4aed-8596-cc002e7eb307 - Code Signing Mitigation – text [applied]
course-of-action--82fbc58b-171d-4a2d-9a20-c6b2a716bd08 - Network Segmentation – text [applied]
course-of-action--86598de0-b347-4928-9eb0-0acbfc21908c - Threat Intelligence Program – text [applied]
course-of-action--874c0166-e407-45c2-a1d9-e4e3a6570fd8 - Registry Run Keys / Startup Folder Mitigation – text [applied]
course-of-action--8b36d944-f274-4d46-9acd-dbba6927ce7a - Automated Collection Mitigation – text [applied]
course-of-action--8bd1ae32-a686-48f4-a6f8-470287f76152 - Rundll32 Mitigation – text [applied]
course-of-action--8c918d8a-11c5-4ffd-af10-e74bc06bdfae - Spearphishing Attachment Mitigation – text [applied]
course-of-action--8f6b5ca6-263a-4ea9-98f3-afd2a3cd8119 - File System Logical Offsets Mitigation – text [applied]
course-of-action--902286b2-96cc-4dd7-931f-e7340c9961da - Password Policies – text [applied]
course-of-action--90c218c3-fbf8-4830-98a7-e8cfb7eaa485 - Behavior Prevention on Endpoint – text [applied]
course-of-action--90f39ee1-d5a3-4aaa-9f28-3b42815b0d46 - Distributed Component Object Model Mitigation – text [applied]
course-of-action--910482b1-6749-4934-abcb-3e34d58294fc - CMSTP Mitigation – text [applied]
course-of-action--91816292-3686-4a6e-83c4-4c08513b9b57 - Exfiltration Over Command and Control Channel Mitigation – text [applied]
course-of-action--92c28497-2820-445e-9f3e-a03dd77dc0c8 - Exploitation for Privilege Escalation Mitigation – text [applied]
course-of-action--92e6d080-ca3f-4f95-bc45-172a32c4e502 - Service Registry Permissions Weakness Mitigation – text [applied]
course-of-action--9378f139-10ef-4e4b-b679-2255a0818902 - User Account Management – text [applied]
course-of-action--93e7968a-9074-4eac-8ae9-9f5200ec3317 - Authentication Package Mitigation – text [applied]
course-of-action--943d370b-2054-44df-8be2-ab4139bde1c5 - Network Share Connection Removal Mitigation – text [applied]
course-of-action--94e95eeb-7cdb-4bd7-afba-f32fda303dbb - Man in the Browser Mitigation – text [applied]
course-of-action--94f6b4f5-b528-4f50-91d5-f66457c2f8f7 - AppCert DLLs Mitigation – text [applied]
course-of-action--95c29444-49f9-49f7-8b20-bcd68d8fcaa6 - Rootkit Mitigation – text [applied]
course-of-action--95ddb356-7ba0-4bd9-a889-247262b8946f - Bootkit Mitigation – text [applied]
course-of-action--96150c35-466f-4f0a-97a9-ae87ee27f751 - DLL Search Order Hijacking Mitigation – text [applied]
course-of-action--96913243-2b5e-4483-a65c-bb152ddd2f04 - Supply Chain Compromise Mitigation – text [applied]
course-of-action--97d8eadb-0459-4c1d-bf1a-e053bd75df61 - Restrict File and Directory Permissions – text [applied]
course-of-action--987988f0-cf86-4680-a875-2f6456ab2448 - Create Account Mitigation – text [applied]
course-of-action--9a5b7194-88e0-4579-b82f-e3c27b8cca80 - Remote System Discovery Mitigation – text [applied]
course-of-action--9a902722-cecd-4fbe-a6c9-49333aa0f8c2 - Logon Scripts Mitigation – text [applied]
course-of-action--9ab7de33-99b2-4d8d-8cf3-182fa0015cc2 - Privileged Account Management – text [applied]
course-of-action--9bb9e696-bff8-4ae1-9454-961fc7d91d5f - Screensaver Mitigation – text [applied]
course-of-action--9da16278-c6c5-4410-8a6b-9c16ce8005b3 - Security Support Provider Mitigation – text [applied]
course-of-action--9e57c770-5a39-49a2-bb91-253ba629e3ac - Uncommonly Used Port Mitigation – text [applied]
course-of-action--a0d8db1d-a731-4428-8209-c07175f4b1fe - Shortcut Modification Mitigation – text [applied]
course-of-action--a13e35cc-8c90-4d77-a965-5461042c1612 - Time Providers Mitigation – text [applied]
course-of-action--a1482e43-f3ff-4fbd-94de-ad1244738166 - Restrict Registry Permissions – text [applied]
course-of-action--a2c36a5d-4058-475e-8e77-fff75e50d3b9 - Kerberoasting Mitigation – text [applied]
course-of-action--a3e12b04-8598-4909-8855-2c97c1e7d549 - Custom Cryptographic Protocol Mitigation – text [applied]
course-of-action--a569295c-a093-4db4-9fb4-7105edef85ad - Antivirus/Antimalware – text [applied]
course-of-action--a6a47a06-08fc-4ec4-bdc3-20373375ebb9 - Standard Cryptographic Protocol Mitigation – text [applied]
course-of-action--a766ce73-5583-48f3-b7c0-0bb43c6ef8c7 - Exfiltration Over Other Network Medium Mitigation – text [applied]
course-of-action--a98be93b-a75b-4dd4-8a72-4dfd0b5e25bb - Graphical User Interface Mitigation – text [applied]
course-of-action--aaa92b37-f96c-4a0a-859c-b1cb6faeb13d - NTFS File Attributes Mitigation – text [applied]
course-of-action--ac008435-af58-4f77-988a-c9b96c5920f5 - Spearphishing Link Mitigation – text [applied]
course-of-action--ad7f983d-d5a8-4fce-a38c-b68eda61bf4e - Compile After Delivery Mitigation – text [applied]
course-of-action--ae56a49d-5281-45c5-ab95-70a1439c338e - Credential Dumping Mitigation – text [applied]
course-of-action--aeff5887-8f9e-48d5-a523-9b395e2ce80a - Multi-factor Authentication – text [applied]
course-of-action--b045d015-6bed-4490-bd38-56b41ece59a0 - Browser Extensions Mitigation – text [applied]
course-of-action--b52f41b9-ccf6-4da7-a6c0-167eeb71fbd8 - Software Configuration – text [applied]
course-of-action--b5dbb4c5-b0b1-40b1-80b6-e9e84ab90067 - New Service Mitigation – text [applied]
course-of-action--b7b2c89c-09c1-4b71-ae7c-000ec2893aab - Communication Through Removable Media Mitigation – text [applied]
course-of-action--b8d57b16-d8e2-428c-a645-1083795b3445 - SID-History Injection Mitigation – text [applied]
course-of-action--b91c2f9e-c1a0-44df-95f0-9e7c9d1d5e55 - Application Isolation and Sandboxing – text [applied]
course-of-action--b9f0c069-abbe-4a07-a245-2481219a1463 - Data Transfer Size Limits Mitigation – text [applied]
course-of-action--ba06d68a-4891-4eb5-b634-152e05ec60ee - Inhibit System Recovery Mitigation – text [applied]
course-of-action--bb25b897-bfc7-4128-839d-52e9764dbfa6 - Web Shell Mitigation – text [applied]
course-of-action--bcc91b8c-f104-4710-964e-1d5409666736 - Pass the Hash Mitigation – text [applied]
course-of-action--bcee7b05-89a6-41a5-b7aa-fce4da7ede9e - Security Software Discovery Mitigation – text [applied]
course-of-action--bd2554b8-634f-4434-a986-9b49c29da2ae - Bypass User Account Control Mitigation – text [applied]
course-of-action--beb45abb-11e8-4aef-9778-1f9ac249784f - Accessibility Features Mitigation – text [applied]
course-of-action--c085476e-1964-4d7f-86e1-d8657a7741e8 - System Network Connections Discovery Mitigation – text [applied]
course-of-action--c1676218-c16a-41c9-8f7a-023779916e39 - Access Token Manipulation Mitigation – text [applied]
course-of-action--c61fee9f-16fb-4f8c-bbf0-869093fcd4a6 - System Information Discovery Mitigation – text [applied]
course-of-action--c620e3a1-fff5-424f-abea-d2b0f3616f67 - Template Injection Mitigation – text [applied]
course-of-action--c7e49501-6021-414f-bfa1-94519d8ec314 - Application Deployment Software Mitigation – text [applied]
course-of-action--c88151a5-fe3f-4773-8147-d801587065a4 - Software Packing Mitigation – text [applied]
course-of-action--c95c8b5c-b431-43c9-9557-f494805e2502 - BITS Jobs Mitigation – text [applied]
course-of-action--cb825b86-3f3b-4686-ba99-44878f5d3173 - Extra Window Memory Injection Mitigation – text [applied]
course-of-action--cba5667e-e3c6-44a4-811c-266dbc00e440 - Audit – text [applied]
course-of-action--cc2399fd-3cd3-4319-8d0a-fbd6420cdaf8 - Remote File Copy Mitigation – text [applied]
course-of-action--cdecc44a-1dbf-4c1f-881c-f21e3f47272a - Deobfuscate/Decode Files or Information Mitigation – text [applied]
course-of-action--d01f473f-3cdc-4867-9e55-1de9cf1986f0 - PowerShell Mitigation – text [applied]
course-of-action--d0415180-51e9-40ce-b57c-c332b0b441f2 - Data Obfuscation Mitigation – text [applied]
course-of-action--d0fcf37a-b6c4-4745-9c43-4fcdb8bfc88e - Network Service Scanning Mitigation – text [applied]
course-of-action--d256cb63-b021-4b4a-bb6d-1b42eea179a3 - Exploit Protection – text [applied]
course-of-action--d2a24649-9694-4c97-9c62-ce7b270bf6a3 - Valid Accounts Mitigation – text [applied]
course-of-action--d45f03a8-790a-4f90-b956-cd7e5b8886bf - External Remote Services Mitigation – text [applied]
course-of-action--d4fd04e0-d1a4-4b5a-a5bb-16683cdbcce2 - Service Execution Mitigation – text [applied]
course-of-action--d5dce4b9-f1fa-4c03-aff9-ce177246cb64 - Change Default File Association Mitigation – text [applied]
course-of-action--d7c49196-b40e-42bc-8eed-b803113692ed - System Service Discovery Mitigation – text [applied]
course-of-action--d8787791-d22e-45bb-a9a8-251d8d0a1ff2 - Data from Network Shared Drive Mitigation – text [applied]
course-of-action--d9727aee-48b8-4fdb-89e2-4c49746ba4dd - Video Capture Mitigation – text [applied]
course-of-action--d9f4b5fa-2a39-4bdf-b40a-ea998933cd6d - Multiband Communication Mitigation – text [applied]
course-of-action--da987565-27b6-4b31-bbcd-74b909847116 - Permission Groups Discovery Mitigation – text [applied]
course-of-action--dd9a85ad-6a92-4986-a215-b01d0ce7b987 - Path Interception Mitigation – text [applied]
course-of-action--e0703d4f-3972-424a-8277-84004817e024 - Active Directory Configuration – text [applied]
course-of-action--e3388c78-2a8d-47c2-8422-c1398b324462 - Exfiltration Over Physical Medium Mitigation – text [applied]
course-of-action--e547ed6a-f1ca-40df-8613-2ce27927f145 - Update Software – text [applied]
course-of-action--e5d930e9-775a-40ad-9bdb-b941d8dfe86b - Restrict Library Loading – text [applied]
course-of-action--e8242a33-481c-4891-af63-4cf3e4cf6aff - Two-Factor Authentication Interception Mitigation – text [applied]
course-of-action--e8d22ec6-2236-48de-954b-974d17492782 - … and 1052 more
Kwistjonijiet marbuta
| Tip ta’ link | Kwistjoni |
|---|---|
| is related to | Enterprise ATT&CK |
| is related to | English |
| is related to | Major |
| is related to | New version |
| is related to | Information Security |
- MITREATTACK -
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. https://attack.mitre.org/
Terms of Use
LICENSE
The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
"© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation."
DISCLAIMERS
MITRE does not claim ATT&CK enumerates all possibilities for the types of actions and behaviors documented as part of its adversary model and framework of techniques. Using the information contained within ATT&CK to address or cover full categories of techniques will not guarantee full defensive coverage as there may be undisclosed techniques or variations on existing techniques not documented by ATT&CK.
ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
See our FAQ for more information on how to use and represent the ATT&CK name.