| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name |
|---|---|---|---|---|
| action.social.vector.Email | related-to | T1204 | User Execution | |
| action.social.vector.Email | related-to | T1001.002 | Steganography | |
| action.social.vector.Email | related-to | T1559.002 | Dynamic Data Exchange | |
| action.social.vector.Email | related-to | T1027.005 | Indicator Removal from Tools | |
| action.social.vector.Email | related-to | T1566 | Phishing | |
| action.social.vector.Email | related-to | T1566.001 | Spearphishing Attachment | |
| action.social.vector.Email | related-to | T1566.002 | Spearphishing Link | |
| action.social.vector.Email | related-to | T1566.003 | Spearphishing via Service |