ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CSA Cloud Controls Matrix (CCM)
CRI Profile
Known Exploited Vulnerabilities
Google Cloud Platform (GCP)
Intel vPro
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 16.1 Enterprise and VERIS 1.4.0.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Remote shell
VERIS
action.hacking.vector.Command shell
Mappings
ATT&CK Version
16.1
ATT&CK Domain
Enterprise
VERIS
1.4.0
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.vector.Command shell
Remote shell
related-to
T1021.008
Direct Cloud VM Connections
action.hacking.vector.Command shell
Remote shell
related-to
T1027.010
Command Obfuscation
action.hacking.vector.Command shell
Remote shell
related-to
T1059.009
Cloud API
action.hacking.vector.Command shell
Remote shell
related-to
T1059.010
AutoHotKey & AutoIT
action.hacking.vector.Command shell
Remote shell
related-to
T1059.011
Lua
action.hacking.vector.Command shell
Remote shell
related-to
T1029
Scheduled Transfer
action.hacking.vector.Command shell
Remote shell
related-to
T1547.004
Winlogon Helper DLL
action.hacking.vector.Command shell
Remote shell
related-to
T1598.003
Spearphishing Link
action.hacking.vector.Command shell
Remote shell
related-to
T1583.004
Server
action.hacking.vector.Command shell
Remote shell
related-to
T1047
Windows Management Instrumentation
action.hacking.vector.Command shell
Remote shell
related-to
T1059
Command and Scripting Interpreter
action.hacking.vector.Command shell
Remote shell
related-to
T1552.008
Chat Messages
action.hacking.vector.Command shell
Remote shell
related-to
T1505.005
Terminal Services DLL
action.hacking.vector.Command shell
Remote shell
related-to
T1569
System Services
action.hacking.vector.Command shell
Remote shell
related-to
T1110
Brute Force
action.hacking.vector.Command shell
Remote shell
related-to
T1071.001
Web Protocols
action.hacking.vector.Command shell
Remote shell
related-to
T1127.002
ClickOnce
action.hacking.vector.Command shell
Remote shell
related-to
T1546.013
PowerShell Profile
action.hacking.vector.Command shell
Remote shell
related-to
T1584.005
Botnet