ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
Known Exploited Vulnerabilities
Google Cloud Platform (GCP)
Intel vPro
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 16.1 Enterprise and VERIS 1.4.0.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Remote shell
VERIS
action.hacking.vector.Command shell
Mappings
Mappings
ATT&CK Version
16.1
ATT&CK Domain
Enterprise
VERIS
1.4.0
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.vector.Command shell
Remote shell
related-to
T1021.008
Direct Cloud VM Connections
action.hacking.vector.Command shell
Remote shell
related-to
T1027.010
Command Obfuscation
action.hacking.vector.Command shell
Remote shell
related-to
T1059.009
Cloud API
action.hacking.vector.Command shell
Remote shell
related-to
T1059.010
AutoHotKey & AutoIT
action.hacking.vector.Command shell
Remote shell
related-to
T1059.011
Lua
action.hacking.vector.Command shell
Remote shell
related-to
T1029
Scheduled Transfer
action.hacking.vector.Command shell
Remote shell
related-to
T1547.004
Winlogon Helper DLL
action.hacking.vector.Command shell
Remote shell
related-to
T1598.003
Spearphishing Link
action.hacking.vector.Command shell
Remote shell
related-to
T1583.004
Server
action.hacking.vector.Command shell
Remote shell
related-to
T1047
Windows Management Instrumentation
action.hacking.vector.Command shell
Remote shell
related-to
T1059
Command and Scripting Interpreter
action.hacking.vector.Command shell
Remote shell
related-to
T1552.008
Chat Messages
action.hacking.vector.Command shell
Remote shell
related-to
T1505.005
Terminal Services DLL
action.hacking.vector.Command shell
Remote shell
related-to
T1569
System Services
action.hacking.vector.Command shell
Remote shell
related-to
T1110
Brute Force
action.hacking.vector.Command shell
Remote shell
related-to
T1071.001
Web Protocols
action.hacking.vector.Command shell
Remote shell
related-to
T1127.002
ClickOnce
action.hacking.vector.Command shell
Remote shell
related-to
T1546.013
PowerShell Profile
action.hacking.vector.Command shell
Remote shell
related-to
T1584.005
Botnet