Merged by type-aware id across episodes. Same name + different type stay distinct (for example Sandworm the group vs Sandworm the book).
| Name | Type | Aliases | Episodes | Relationships |
|---|---|---|---|---|
|
social engineering
technique:social_engineering
|
Technique | emotional manipulation, false pretext, human hacking, phone scam, pretexting, ruse, scam calls, soc eng, social engineer, social engineering, social-engineer, social-engineering, social-engineering attack, socially-engineering | 47 | 56 |
|
phishing
technique:phishing
|
Technique | P-H-I-S-H, classic phishing scheme, e-mail phishing, phish, phishing attack, phishing e-mail, phishing e-mails, phishing email, phishing emails, phishing lures, phishing messages, phishing methods, phishing page, phishing text message, spear phishing | 40 | 44 |
|
lateral movement
technique:lateral_movement
|
Technique | bouncing between servers, lat move, laterally move, move laterally, moving around the network, moving laterally, moving through the network, network pivoting, pivoting, propagation, self-propagation, spreading around the network, traversing to other systems, went lateral | 39 | 23 |
|
penetration testing
technique:penetration_testing
|
Technique | pen test, pen testing, penetration test, pentesting, physical pen testing, red-team testing, security testing | 13 | 15 |
|
Open-source intelligence
technique:open_source_intelligence
|
Technique | OCINT, OSINT, creative Googling skills, open source intelligence-gathering, open-source intelligence, open-source intelligence type techniques, open-source intelligence-gathering, open-source research, open-sourced research | 12 | 12 |
|
SQL injection
technique:sql_injection
|
Technique | SQL injection attack, SQL injection attacks, SQL injections, SQL-injection, SQLi | 12 | 10 |
|
Data exfiltration
technique:data_exfiltration
|
Technique | data copying, data extraction, data theft, exfiltrating private information, exfiltration, exporting data | 11 | 15 |
|
physical penetration testing
technique:physical_penetration_testing
|
Technique | physical access testing, physical assessments, physical infiltration, physical pen test, physical pen testing, physical pen tests, physical penetration test, physical red team operations, physical security testing, physicals, security audit | 11 | 16 |
|
Doxxing
technique:doxxing
|
Technique | ISP doxxing, dox, doxing, doxxed, doxxing, doxxing the police | 9 | 9 |
|
Reverse engineering
technique:reverse_engineering
|
Technique | reverse engineer, reverse engineering, reverse-engineered, reverse-engineering | 9 | 9 |
|
Tailgating
technique:tailgating
|
Technique | following through a secured door, piggybacking | 9 | 6 |
|
OSINT
technique:osint
|
Technique | cyber OSINT, online OSINT, open-source intelligence, pre-attack OSINT | 8 | 11 |
|
privilege escalation
technique:privilege_escalation
|
Technique | elevate their privileges, escalate privileges, escalated their privileges to root, escalating their privileges, escalation privileges | 8 | 6 |
|
Red Team
technique:red_team
|
Technique | Red Teamer, Red Teaming, red team, red team assessments, red teamer, red teaming, red-team operation | 8 | 5 |
|
SIM swapping
technique:sim_swapping
|
Technique | SIM hack, SIM swap, SIM swapping, SIM-swap, SIM-swap process, SIM-swapped, SIM-swaps, simming | 8 | 8 |
|
two-factor authentication
technique:two_factor_authentication
|
Technique | 2FA, two factor authentication, two-factor authentication, two-factor indication code | 8 | 4 |
|
denial-of-service attack
technique:denial_of_service_attack
|
Technique | DDoS, DDossing, Denial of service attack, DoS, DoS attack, Dossing, denial of service | 7 | 11 |
|
Pretexting
technique:pretexting
|
Technique | false identity, pretext, ruse | 7 | 7 |
|
spear phishing
technique:spear_phishing
|
Technique | advanced spear phishing, spear phishing link, spear phishing operation, spear-phishing emails | 7 | 4 |
|
badge cloning
technique:badge_cloning
|
Technique | RFID key card cloning, badge access, badge cloner, badge replay, badge-cloning, cloned badge | 6 | 5 |
|
Command and control
technique:command_and_control
|
Technique | C&C, C2, C2 communication channel, command and control stuff | 6 | 6 |
|
DDoS
technique:ddos
|
Technique | DDoS attack, DDoS-as-a-service, DDosses, DoS, denial-of-service, denial-of-service attacks, distributed denial of service, distributed denial-of-service | 6 | 9 |
|
DDoS attack
technique:ddos_attack
|
Technique | DDOS attack, DDoS, DDoSing, distributed denial-of-service, distributed denial-of-service attack | 6 | 6 |
|
distributed denial-of-service attack
technique:distributed_denial_of_service_attack
|
Technique | DDOS, DDoS, DDoS attack, DOS, denial-of-service attack | 6 | 8 |
|
persistence
technique:persistence
|
Technique | establishing persistence, persistent connection | 6 | 4 |