ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and VERIS 1.3.5.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Backdoor or command and control channel
VERIS
action.hacking.vector.Backdoor or C2
Mappings
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
VERIS
1.3.5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1053
Scheduled Task/Job
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1137
Office Application Startup
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505.001
Server Software Component: SQL Stored Procedures
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505.002
Server Software Component: Transport Agent
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1543
Create or Modify System Process
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1547
Boot or Logon Autostart Execution
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1001
Data Obfuscation
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1008
Fallback Channels
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1071
Application Layer Protocol
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1078
Valid Accounts
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1090
Proxy
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1095
Non-Application Layer Protocol
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1102
Web Service
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1104
Multi-Stage Channels
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1105
Ingress Tool Transfer
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1132
Data Encoding
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1133
External Remote Services
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1205
Traffic Signaling
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505
Server Software Component
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1505.003
Server Software Component: Web Shell
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1525
Implant Container Image
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1568
Dynamic Resolution
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1571
Non-Standard Port
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1572
Protocol Tunneling
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1573
Encrypted Channels
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1546
Event Triggered Execution
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1574
Hijack Execution Flow
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1037
Boot or Logon Initialization Script
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1098
Account Manipulation
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1136
Create Account
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1197
BITS Jobs
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1542
Pre-OS Boot
action.hacking.vector.Backdoor or C2
Backdoor or command and control channel
related-to
T1554
Compromise Client Software Binary