{ "name": "layer", "versions": { "attack": "8", "navigator": "4.1", "layer": "4.1" }, "domain": "enterprise-attack", "description": "", "filters": { "platforms": [ "Linux", "macOS", "Windows", "Office 365", "Azure AD", "AWS", "GCP", "Azure", "SaaS", "PRE", "Network" ] }, "sorting": 0, "layout": { "layout": "flat", "showID": false, "showName": true }, "hideDisabled": false, "techniques": [ { "techniqueID": "T1087", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1098.001", "tactic": "persistence", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1098.002", "tactic": "persistence", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1071.001", "tactic": "command-and-control", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1560.001", "tactic": "collection", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1526", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1059.001", "tactic": "execution", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1059.003", "tactic": "execution", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1074.002", "tactic": "collection", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1005", "tactic": "collection", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1587.001", "tactic": "resource-development", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1482", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1568.002", "tactic": "command-and-control", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1114", "tactic": "collection", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1114.002", "tactic": "collection", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1567", "tactic": "exfiltration", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1190", "tactic": "initial-access", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1083", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1070", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1070.004", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1105", "tactic": "command-and-control", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1036", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1036.004", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1036.005", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1027", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1588.003", "tactic": "resource-development", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1069", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1069.002", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1057", "tactic": "discovery", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1053.005", "tactic": "execution", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1053.005", "tactic": "persistence", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1053.005", "tactic": "privilege-escalation", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1218.011", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1553.002", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1195.002", "tactic": "initial-access", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1552.004", "tactic": "credential-access", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1078", "tactic": "defense-evasion", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1078", "tactic": "persistence", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1078", "tactic": "privilege-escalation", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1078", "tactic": "initial-access", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1071", "tactic": "command-and-control", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1560", "tactic": "collection", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1059", "tactic": "execution", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1074", "tactic": "collection", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1587", "tactic": "resource-development", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1568", "tactic": "command-and-control", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1546", "tactic": "privilege-escalation", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1546", "tactic": "persistence", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1546.003", "tactic": "privilege-escalation", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1546.003", "tactic": "persistence", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1003", "tactic": "credential-access", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1003.006", "tactic": "credential-access", "color": "#e60d0d", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": false }, { "techniqueID": "T1588", "tactic": "resource-development", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1053", "tactic": "execution", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1053", "tactic": "privilege-escalation", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1218", "tactic": "defense-evasion", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1553", "tactic": "defense-evasion", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1195", "tactic": "initial-access", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1552", "tactic": "credential-access", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1098", "tactic": "persistence", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true }, { "techniqueID": "T1053", "tactic": "persistence", "color": "", "comment": "", "enabled": true, "metadata": [], "showSubtechniques": true } ], "gradient": { "colors": [ "#ff6666", "#ffe766", "#8ec843" ], "minValue": 0, "maxValue": 100 }, "legendItems": [], "metadata": [], "showTacticRowBackground": false, "tacticRowBackground": "#dddddd", "selectTechniquesAcrossTactics": true, "selectSubtechniquesWithParent": false }