| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name |
|---|---|---|---|---|
| action.malware.variety.Downloader | Downloader (pull updates or other malware) | related-to | T1204 | User Execution |
| action.malware.variety.Downloader | Downloader (pull updates or other malware) | related-to | T1001.002 | Steganography |
| action.malware.variety.Downloader | Downloader (pull updates or other malware) | related-to | T1559.002 | Dynamic Data Exchange |
| action.malware.variety.Downloader | Downloader (pull updates or other malware) | related-to | T1027.005 | Indicator Removal from Tools |
| action.malware.variety.Downloader | Downloader (pull updates or other malware) | related-to | T1610 | Deploy Container |