| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name |
|---|---|---|---|---|
| action.hacking.variety.XML injection | XML injection. Child of 'Exploit vuln'. | related-to | T1546 | Event Triggered Execution |
| action.hacking.variety.XML injection | XML injection. Child of 'Exploit vuln'. | related-to | T1574 | Hijack Execution Flow |