Entities

Merged by type-aware id across episodes. Same name + different type stay distinct (for example Sandworm the group vs Sandworm the book).

Person Organisation Technique Software Concept Website Incident Tool Hardware Malware Threat actor Network component Vulnerability Protocol Country Campaign Other Exploit Book Video Article Podcast
Name Type Aliases Episodes Relationships
social engineering
technique:social_engineering
Technique emotional manipulation, false pretext, human hacking, phone scam, pretexting, ruse, scam calls, soc eng, social engineer, social engineering, social-engineer, social-engineering, social-engineering attack, socially-engineering 47 56
phishing
technique:phishing
Technique P-H-I-S-H, classic phishing scheme, e-mail phishing, phish, phishing attack, phishing e-mail, phishing e-mails, phishing email, phishing emails, phishing lures, phishing messages, phishing methods, phishing page, phishing text message, spear phishing 40 44
lateral movement
technique:lateral_movement
Technique bouncing between servers, lat move, laterally move, move laterally, moving around the network, moving laterally, moving through the network, network pivoting, pivoting, propagation, self-propagation, spreading around the network, traversing to other systems, went lateral 39 23
penetration testing
technique:penetration_testing
Technique pen test, pen testing, penetration test, pentesting, physical pen testing, red-team testing, security testing 13 15
Open-source intelligence
technique:open_source_intelligence
Technique OCINT, OSINT, creative Googling skills, open source intelligence-gathering, open-source intelligence, open-source intelligence type techniques, open-source intelligence-gathering, open-source research, open-sourced research 12 12
SQL injection
technique:sql_injection
Technique SQL injection attack, SQL injection attacks, SQL injections, SQL-injection, SQLi 12 10
Data exfiltration
technique:data_exfiltration
Technique data copying, data extraction, data theft, exfiltrating private information, exfiltration, exporting data 11 15
physical penetration testing
technique:physical_penetration_testing
Technique physical access testing, physical assessments, physical infiltration, physical pen test, physical pen testing, physical pen tests, physical penetration test, physical red team operations, physical security testing, physicals, security audit 11 16
Doxxing
technique:doxxing
Technique ISP doxxing, dox, doxing, doxxed, doxxing, doxxing the police 9 9
Reverse engineering
technique:reverse_engineering
Technique reverse engineer, reverse engineering, reverse-engineered, reverse-engineering 9 9
Tailgating
technique:tailgating
Technique following through a secured door, piggybacking 9 6
OSINT
technique:osint
Technique cyber OSINT, online OSINT, open-source intelligence, pre-attack OSINT 8 11
privilege escalation
technique:privilege_escalation
Technique elevate their privileges, escalate privileges, escalated their privileges to root, escalating their privileges, escalation privileges 8 6
Red Team
technique:red_team
Technique Red Teamer, Red Teaming, red team, red team assessments, red teamer, red teaming, red-team operation 8 5
SIM swapping
technique:sim_swapping
Technique SIM hack, SIM swap, SIM swapping, SIM-swap, SIM-swap process, SIM-swapped, SIM-swaps, simming 8 8
two-factor authentication
technique:two_factor_authentication
Technique 2FA, two factor authentication, two-factor authentication, two-factor indication code 8 4
denial-of-service attack
technique:denial_of_service_attack
Technique DDoS, DDossing, Denial of service attack, DoS, DoS attack, Dossing, denial of service 7 11
Pretexting
technique:pretexting
Technique false identity, pretext, ruse 7 7
spear phishing
technique:spear_phishing
Technique advanced spear phishing, spear phishing link, spear phishing operation, spear-phishing emails 7 4
badge cloning
technique:badge_cloning
Technique RFID key card cloning, badge access, badge cloner, badge replay, badge-cloning, cloned badge 6 5
Command and control
technique:command_and_control
Technique C&C, C2, C2 communication channel, command and control stuff 6 6
DDoS
technique:ddos
Technique DDoS attack, DDoS-as-a-service, DDosses, DoS, denial-of-service, denial-of-service attacks, distributed denial of service, distributed denial-of-service 6 9
DDoS attack
technique:ddos_attack
Technique DDOS attack, DDoS, DDoSing, distributed denial-of-service, distributed denial-of-service attack 6 6
distributed denial-of-service attack
technique:distributed_denial_of_service_attack
Technique DDOS, DDoS, DDoS attack, DOS, denial-of-service attack 6 8
persistence
technique:persistence
Technique establishing persistence, persistent connection 6 4