| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name |
|---|---|---|---|---|
| action.malware.vector.Web application - download | Web via user-executed or downloaded content. Child of 'Web application'. | related-to | T1583 | Acquire Infrastructure |
| action.malware.vector.Web application - download | Web via user-executed or downloaded content. Child of 'Web application'. | related-to | T1584 | Compromise Infrastructure |