{ "domain": "mitre-enterprise", "sorting": 3, "name": "Exabeam MITRE Map", "gradient": { "colors": [ "#d8edd1", "#6dbb51" ], "maxValue": 20, "minValue": 0 }, "version": "4.3", "techniques": [ { "comment": "19 rules", "techniqueID": "T1091", "score": 19 }, { "comment": "15 rules", "techniqueID": "T1090", "score": 15 }, { "comment": "2 rules", "techniqueID": "T1055.001", "score": 2 }, { "comment": "57 rules", "techniqueID": "T1098", "score": 57 }, { "comment": "1 rules", "techniqueID": "T1518.001", "score": 1 }, { "comment": "1 rules", "techniqueID": "T1110.003", "score": 1 }, { "comment": "3 rules", "techniqueID": "T1534", "score": 3 }, { "comment": "2 rules", "techniqueID": "T1552.006", "score": 2 }, { "comment": "9 rules", "techniqueID": "T1203", "score": 9 }, { "comment": "18 rules", "techniqueID": "T1204", "score": 18 }, { "comment": "2 rules", "techniqueID": "T1552.001", "score": 2 }, { "comment": "7 rules", "techniqueID": "T1207", "score": 7 }, { "comment": "22 rules", "techniqueID": "T1052.001", "score": 22 }, { "comment": "21 rules", "techniqueID": "T1018", "score": 21 }, { "comment": "8 rules", "techniqueID": "T1012", "score": 8 }, { "comment": "13 rules", "techniqueID": "T1090.003", "score": 13 }, { "comment": "2 rules", "techniqueID": "T1546.001", "score": 2 }, { "comment": "5 rules", "techniqueID": "T1016", "score": 5 }, { "comment": "38 rules", "techniqueID": "T1543.003", "score": 38 }, { "comment": "18 rules", "techniqueID": "T1567", "score": 18 }, { "comment": "9 rules", "techniqueID": "T1566", "score": 9 }, { "comment": "3 rules", "techniqueID": "T1560", "score": 3 }, { "comment": "3 rules", "techniqueID": "T1563", "score": 3 }, { "comment": "18 rules", "techniqueID": "T1562", "score": 18 }, { "comment": "6 rules", "techniqueID": "T1569", "score": 6 }, { "comment": "12 rules", "techniqueID": "T1568", "score": 12 }, { "comment": "3 rules", "techniqueID": "T1562.006", "score": 3 }, { "comment": "10 rules", "techniqueID": "T1082", "score": 10 }, { "comment": "38 rules", "techniqueID": "T1083", "score": 38 }, { "comment": "25 rules", "techniqueID": "T1087", "score": 25 }, { "comment": "23 rules", "techniqueID": "T1550.002", "score": 23 }, { "comment": "13 rules", "techniqueID": "T1550.003", "score": 13 }, { "comment": "1 rules", "techniqueID": "TA0003", "score": 1 }, { "comment": "16 rules", "techniqueID": "T1053.005", "score": 16 }, { "comment": "23 rules", "techniqueID": "T1127", "score": 23 }, { "comment": "4 rules", "techniqueID": "T1123", "score": 4 }, { "comment": "2 rules", "techniqueID": "T1053.002", "score": 2 }, { "comment": "5 rules", "techniqueID": "T1053.003", "score": 5 }, { "comment": "49 rules", "techniqueID": "T1003", "score": 49 }, { "comment": "8 rules", "techniqueID": "T1007", "score": 8 }, { "comment": "57 rules", "techniqueID": "T1048.003", "score": 57 }, { "comment": "17 rules", "techniqueID": "T1574", "score": 17 }, { "comment": "8 rules", "techniqueID": "T1572", "score": 8 }, { "comment": "6 rules", "techniqueID": "T1027.004", "score": 6 }, { "comment": "1 rules", "techniqueID": "T1571", "score": 1 }, { "comment": "1 rules", "techniqueID": "T1583.001", "score": 1 }, { "comment": "2 rules", "techniqueID": "T1559", "score": 2 }, { "comment": "1 rules", "techniqueID": "T1071.003", "score": 1 }, { "comment": "2 rules", "techniqueID": "T1037", "score": 2 }, { "comment": "27 rules", "techniqueID": "T1036", "score": 27 }, { "comment": "4 rules", "techniqueID": "T1222.001", "score": 4 }, { "comment": "3 rules", "techniqueID": "T1033", "score": 3 }, { "comment": "4 rules", "techniqueID": "T1098.002", "score": 4 }, { "comment": "3 rules", "techniqueID": "T1030", "score": 3 }, { "comment": "5 rules", "techniqueID": "T1202", "score": 5 }, { "comment": "35 rules", "techniqueID": "T1136", "score": 35 }, { "comment": "5 rules", "techniqueID": "T1134", "score": 5 }, { "comment": "12 rules", "techniqueID": "T1135", "score": 12 }, { "comment": "49 rules", "techniqueID": "T1133", "score": 49 }, { "comment": "1 rules", "techniqueID": "T1056.004", "score": 1 }, { "comment": "9 rules", "techniqueID": "T1059.005", "score": 9 }, { "comment": "34 rules", "techniqueID": "T1059.003", "score": 34 }, { "comment": "79 rules", "techniqueID": "T1059.001", "score": 79 }, { "comment": "38 rules", "techniqueID": "T1543", "score": 38 }, { "comment": "2 rules", "techniqueID": "T1542", "score": 2 }, { "comment": "12 rules", "techniqueID": "T1547", "score": 12 }, { "comment": "10 rules", "techniqueID": "T1546", "score": 10 }, { "comment": "14 rules", "techniqueID": "T1078.002", "score": 14 }, { "comment": "30 rules", "techniqueID": "T1027.005", "score": 30 }, { "comment": "10 rules", "techniqueID": "T1548", "score": 10 }, { "comment": "2 rules", "techniqueID": "T1484.001", "score": 2 }, { "comment": "93 rules", "techniqueID": "T1071.001", "score": 93 }, { "comment": "3 rules", "techniqueID": "T1071.002", "score": 3 }, { "comment": "8 rules", "techniqueID": "T1505.003", "score": 8 }, { "comment": "9 rules", "techniqueID": "T1071.004", "score": 9 }, { "comment": "8 rules", "techniqueID": "T1057", "score": 8 }, { "comment": "2 rules", "techniqueID": "T1562.001", "score": 2 }, { "comment": "118 rules", "techniqueID": "T1021", "score": 118 }, { "comment": "1 rules", "techniqueID": "T1189", "score": 1 }, { "comment": "1 rules", "techniqueID": "T1056", "score": 1 }, { "comment": "7 rules", "techniqueID": "T1562.004", "score": 7 }, { "comment": "47 rules", "techniqueID": "T1027", "score": 47 }, { "comment": "1 rules", "techniqueID": "T1583", "score": 1 }, { "comment": "2 rules", "techniqueID": "T1187", "score": 2 }, { "comment": "3 rules", "techniqueID": "T1102", "score": 3 }, { "comment": "2 rules", "techniqueID": "T1564.004", "score": 2 }, { "comment": "8 rules", "techniqueID": "T1105", "score": 8 }, { "comment": "3 rules", "techniqueID": "T1598.003", "score": 3 }, { "comment": "3 rules", "techniqueID": "T1569.002", "score": 3 }, { "comment": "1 rules", "techniqueID": "T1087.004", "score": 1 }, { "comment": "76 rules", "techniqueID": "TA0010", "score": 76 }, { "comment": "78 rules", "techniqueID": "TA0011", "score": 78 }, { "comment": "4 rules", "techniqueID": "T1003.006", "score": 4 }, { "comment": "1 rules", "techniqueID": "T1003.005", "score": 1 }, { "comment": "9 rules", "techniqueID": "T1496", "score": 9 }, { "comment": "36 rules", "techniqueID": "T1558", "score": 36 }, { "comment": "6 rules", "techniqueID": "T1490", "score": 6 }, { "comment": "18 rules", "techniqueID": "T1003.001", "score": 18 }, { "comment": "4 rules", "techniqueID": "T1070.004", "score": 4 }, { "comment": "14 rules", "techniqueID": "T1555", "score": 14 }, { "comment": "38 rules", "techniqueID": "T1550", "score": 38 }, { "comment": "4 rules", "techniqueID": "T1204.003", "score": 4 }, { "comment": "4 rules", "techniqueID": "T1552", "score": 4 }, { "comment": "1 rules", "techniqueID": "T1204.001", "score": 1 }, { "comment": "6 rules", "techniqueID": "T1197", "score": 6 }, { "comment": "31 rules", "techniqueID": "T1190", "score": 31 }, { "comment": "10 rules", "techniqueID": "T1078.003", "score": 10 }, { "comment": "7 rules", "techniqueID": "T1136.003", "score": 7 }, { "comment": "144 rules", "techniqueID": "T1059", "score": 144 }, { "comment": "5 rules", "techniqueID": "T1140", "score": 5 }, { "comment": "38 rules", "techniqueID": "TA0004", "score": 38 }, { "comment": "2 rules", "techniqueID": "T1566.001", "score": 2 }, { "comment": "5 rules", "techniqueID": "T1566.002", "score": 5 }, { "comment": "6 rules", "techniqueID": "T1055", "score": 6 }, { "comment": "8 rules", "techniqueID": "T1087.002", "score": 8 }, { "comment": "10 rules", "techniqueID": "T1087.001", "score": 10 }, { "comment": "4 rules", "techniqueID": "TA0008", "score": 4 }, { "comment": "27 rules", "techniqueID": "T1053", "score": 27 }, { "comment": "28 rules", "techniqueID": "T1052", "score": 28 }, { "comment": "5 rules", "techniqueID": "T1114", "score": 5 }, { "comment": "65 rules", "techniqueID": "TA0002", "score": 65 }, { "comment": "6 rules", "techniqueID": "TA0001", "score": 6 }, { "comment": "32 rules", "techniqueID": "T1110", "score": 32 }, { "comment": "44 rules", "techniqueID": "T1484", "score": 44 }, { "comment": "7 rules", "techniqueID": "T1112", "score": 7 }, { "comment": "4 rules", "techniqueID": "T1113", "score": 4 }, { "comment": "3 rules", "techniqueID": "T1486", "score": 3 }, { "comment": "16 rules", "techniqueID": "T1567.002", "score": 16 }, { "comment": "3 rules", "techniqueID": "T1485", "score": 3 }, { "comment": "5 rules", "techniqueID": "T1482", "score": 5 }, { "comment": "11 rules", "techniqueID": "T1568.002", "score": 11 }, { "comment": "4 rules", "techniqueID": "T1574.011", "score": 4 }, { "comment": "2 rules", "techniqueID": "T1574.010", "score": 2 }, { "comment": "3 rules", "techniqueID": "T1114.003", "score": 3 }, { "comment": "2 rules", "techniqueID": "T1114.001", "score": 2 }, { "comment": "1 rules", "techniqueID": "T1547.006", "score": 1 }, { "comment": "1 rules", "techniqueID": "T1547.002", "score": 1 }, { "comment": "12 rules", "techniqueID": "T1564", "score": 12 }, { "comment": "10 rules", "techniqueID": "T1547.001", "score": 10 }, { "comment": "6 rules", "techniqueID": "T1574.002", "score": 6 }, { "comment": "6 rules", "techniqueID": "T1036.005", "score": 6 }, { "comment": "6 rules", "techniqueID": "T1036.004", "score": 6 }, { "comment": "2 rules", "techniqueID": "T1036.003", "score": 2 }, { "comment": "5 rules", "techniqueID": "T1046", "score": 5 }, { "comment": "18 rules", "techniqueID": "T1047", "score": 18 }, { "comment": "16 rules", "techniqueID": "T1040", "score": 16 }, { "comment": "7 rules", "techniqueID": "T1041", "score": 7 }, { "comment": "68 rules", "techniqueID": "T1048", "score": 68 }, { "comment": "8 rules", "techniqueID": "T1049", "score": 8 }, { "comment": "3 rules", "techniqueID": "T1218.001", "score": 3 }, { "comment": "4 rules", "techniqueID": "T1218.003", "score": 4 }, { "comment": "4 rules", "techniqueID": "T1218.002", "score": 4 }, { "comment": "24 rules", "techniqueID": "T1218.005", "score": 24 }, { "comment": "16 rules", "techniqueID": "T1218.004", "score": 16 }, { "comment": "2 rules", "techniqueID": "T1218.007", "score": 2 }, { "comment": "2 rules", "techniqueID": "T1218.009", "score": 2 }, { "comment": "2 rules", "techniqueID": "T1218.008", "score": 2 }, { "comment": "43 rules", "techniqueID": "T1530", "score": 43 }, { "comment": "3 rules", "techniqueID": "T1531", "score": 3 }, { "comment": "2 rules", "techniqueID": "T1564.002", "score": 2 }, { "comment": "8 rules", "techniqueID": "T1564.001", "score": 8 }, { "comment": "7 rules", "techniqueID": "T1535", "score": 7 }, { "comment": "2 rules", "techniqueID": "T1136.002", "score": 2 }, { "comment": "15 rules", "techniqueID": "T1127.001", "score": 15 }, { "comment": "10 rules", "techniqueID": "T1136.001", "score": 10 }, { "comment": "10 rules", "techniqueID": "T1548.002", "score": 10 }, { "comment": "1 rules", "techniqueID": "T1102.003", "score": 1 }, { "comment": "1 rules", "techniqueID": "T1102.002", "score": 1 }, { "comment": "4 rules", "techniqueID": "T1222", "score": 4 }, { "comment": "22 rules", "techniqueID": "T1558.003", "score": 22 }, { "comment": "3 rules", "techniqueID": "T1563.002", "score": 3 }, { "comment": "2 rules", "techniqueID": "T1021.006", "score": 2 }, { "comment": "12 rules", "techniqueID": "T1021.003", "score": 12 }, { "comment": "20 rules", "techniqueID": "T1021.002", "score": 20 }, { "comment": "6 rules", "techniqueID": "T1021.001", "score": 6 }, { "comment": "7 rules", "techniqueID": "T1580", "score": 7 }, { "comment": "1 rules", "techniqueID": "T1072", "score": 1 }, { "comment": "114 rules", "techniqueID": "T1071", "score": 114 }, { "comment": "18 rules", "techniqueID": "T1070", "score": 18 }, { "comment": "4 rules", "techniqueID": "T1074", "score": 4 }, { "comment": "8 rules", "techniqueID": "T1070.001", "score": 8 }, { "comment": "304 rules", "techniqueID": "T1078", "score": 304 }, { "comment": "6 rules", "techniqueID": "T1546.003", "score": 6 }, { "comment": "18 rules", "techniqueID": "T1218.010", "score": 18 }, { "comment": "27 rules", "techniqueID": "T1218.011", "score": 27 }, { "comment": "12 rules", "techniqueID": "T1555.005", "score": 12 }, { "comment": "7 rules", "techniqueID": "T1003.003", "score": 7 }, { "comment": "5 rules", "techniqueID": "T1003.002", "score": 5 }, { "comment": "2 rules", "techniqueID": "T1134.001", "score": 2 }, { "comment": "3 rules", "techniqueID": "T1134.002", "score": 3 }, { "comment": "3 rules", "techniqueID": "T1562.002", "score": 3 }, { "comment": "8 rules", "techniqueID": "T1505", "score": 8 }, { "comment": "3 rules", "techniqueID": "T1598", "score": 3 }, { "comment": "34 rules", "techniqueID": "T1078.004", "score": 34 }, { "comment": "25 rules", "techniqueID": "T1219", "score": 25 }, { "comment": "116 rules", "techniqueID": "T1218", "score": 116 }, { "comment": "45 rules", "techniqueID": "T1213", "score": 45 }, { "comment": "15 rules", "techniqueID": "T1210", "score": 15 }, { "comment": "6 rules", "techniqueID": "T1068", "score": 6 }, { "comment": "13 rules", "techniqueID": "TA0009", "score": 13 }, { "comment": "1 rules", "techniqueID": "T1518", "score": 1 }, { "comment": "10 rules", "techniqueID": "T1204.002", "score": 10 }, { "comment": "1 rules", "techniqueID": "T1020", "score": 1 }, { "comment": "2 rules", "techniqueID": "T1559.002", "score": 2 }, { "comment": "9 rules", "techniqueID": "TA0007", "score": 9 }, { "comment": "2 rules", "techniqueID": "T1546.011", "score": 2 }, { "comment": "6 rules", "techniqueID": "T1059.007", "score": 6 }, { "comment": "2 rules", "techniqueID": "T1542.003", "score": 2 } ], "description": "Exabeam MITRE Map" }