VERIS action.hacking.vector.Command shell Mappings

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
action.hacking.vector.Command shell Remote shell related-to T1021.008 Direct Cloud VM Connections
action.hacking.vector.Command shell Remote shell related-to T1027.010 Command Obfuscation
action.hacking.vector.Command shell Remote shell related-to T1059.009 Cloud API
action.hacking.vector.Command shell Remote shell related-to T1059.010 AutoHotKey & AutoIT
action.hacking.vector.Command shell Remote shell related-to T1059.011 Lua
action.hacking.vector.Command shell Remote shell related-to T1029 Scheduled Transfer
action.hacking.vector.Command shell Remote shell related-to T1547.004 Winlogon Helper DLL
action.hacking.vector.Command shell Remote shell related-to T1598.003 Spearphishing Link
action.hacking.vector.Command shell Remote shell related-to T1583.004 Server
action.hacking.vector.Command shell Remote shell related-to T1047 Windows Management Instrumentation
action.hacking.vector.Command shell Remote shell related-to T1059 Command and Scripting Interpreter
action.hacking.vector.Command shell Remote shell related-to T1552.008 Chat Messages
action.hacking.vector.Command shell Remote shell related-to T1505.005 Terminal Services DLL
action.hacking.vector.Command shell Remote shell related-to T1569 System Services
action.hacking.vector.Command shell Remote shell related-to T1110 Brute Force
action.hacking.vector.Command shell Remote shell related-to T1071.001 Web Protocols
action.hacking.vector.Command shell Remote shell related-to T1127.002 ClickOnce
action.hacking.vector.Command shell Remote shell related-to T1546.013 PowerShell Profile
action.hacking.vector.Command shell Remote shell related-to T1584.005 Botnet