ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CSA Cloud Controls Matrix (CCM)
CRI Profile
Known Exploited Vulnerabilities
Google Cloud Platform (GCP)
Intel vPro
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and VERIS 1.3.5.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Backdoor or command and control channel
VERIS
action.hacking.vector.Backdoor or C2
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
VERIS
1.3.5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1053
Scheduled Task/Job
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1137
Office Application Startup
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505.001
Server Software Component: SQL Stored Procedures
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505.002
Server Software Component: Transport Agent
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1543
Create or Modify System Process
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1547
Boot or Logon Autostart Execution
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1001
Data Obfuscation
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1008
Fallback Channels
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1071
Application Layer Protocol
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1078
Valid Accounts
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1090
Proxy
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1095
Non-Application Layer Protocol
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1102
Web Service
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1104
Multi-Stage Channels
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1105
Ingress Tool Transfer
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1132
Data Encoding
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1133
External Remote Services
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1205
Traffic Signaling
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505
Server Software Component
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505.003
Server Software Component: Web Shell
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1525
Implant Container Image
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1568
Dynamic Resolution
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1571
Non-Standard Port
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1572
Protocol Tunneling
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1573
Encrypted Channels
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1546
Event Triggered Execution
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1574
Hijack Execution Flow
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1037
Boot or Logon Initialization Script
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1098
Account Manipulation
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1136
Create Account
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1197
BITS Jobs
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1542
Pre-OS Boot
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1554
Compromise Client Software Binary