Skip to content

Hide Navigation Hide TOC

BlackByte (1c43524e-0f2e-4468-b6b6-8a37f1d0ea87)

BlackByte is recently discovered Ransomware with a .NET DLL core payload wrapped in JavaScript. It employs heavy obfuscation both in its JavaScript wrapper and .NET DLL core.

Once the JavaScript wrapper is executed, the malware will de-obfuscate the core payload and execute it in memory. The core .DLL is loaded and BlackByte will check the installed operating system language and terminate if an eastern European language is found.

It will proceed to check for the presence of several anti-virus and sandbox-related .DLLs, attempt to bypass AMSI, delete system shadow-copies in order to hinder system recovery, and modify several other system services (including Windows Firewall) in order to “prep” the system for encryption. Once the system is “ready” for encryption, it will download a symmetric key-file which will be used to encrypt files on the system. If this file is not found, the malware will terminate.

Unlike most Ransomware today, BlackByte uses a single symmetric encryption key, and does not generate a unique encryption key for each victim system, meaning the same key can be used to decrypt all files encrypted by the malware.

This makes for substantially easier key-management for the actors behind BlackByte at the cost of a weaker encryption scheme and easier victim system recovery (as there is only a single online point with a single key to maintain).

As with most Ransomware today, BlackByte has worming capabilities and can infect additional endpoints on the same network.

Cluster A Galaxy A Cluster B Galaxy B Level
BlackByte (1c43524e-0f2e-4468-b6b6-8a37f1d0ea87) Ransomware Conti (201eff54-d41e-4f70-916c-5dfb9301730a) Ransomware 1
Conti (201eff54-d41e-4f70-916c-5dfb9301730a) Ransomware QuantumLocker (0ca6ac54-ad2b-4945-9580-ac90e702fd2c) Ransomware 2
Conti (201eff54-d41e-4f70-916c-5dfb9301730a) Ransomware BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 2
Mountlocket (7513650c-ba09-49bf-b011-d2974c7ae023) Ransomware QuantumLocker (0ca6ac54-ad2b-4945-9580-ac90e702fd2c) Ransomware 3
Data Encrypted for Impact - T1486 (b80d107d-fa0d-4b60-9684-b0433e8bdba0) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Debugger Evasion - T1622 (e4dc8c01-417f-458d-9ee0-bb0617c1b391) Attack Pattern 3
Credentials from Password Stores - T1555 (3fc9b85a-2862-4363-a64d-d692e3ffbee0) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware DLL - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34) Attack Pattern 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Archive via Utility - T1560.001 (00f90846-cbd1-4fc5-9233-df5c2bf2a662) Attack Pattern 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055) Attack Pattern 3
Create Account - T1136 (e01be9c5-e763-4caf-aeb7-000b416aef67) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Masquerading - T1036 (42e8de7b-37b2-4258-905a-6897815e58e0) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Protocol Tunneling - T1572 (4fe28b27-b13c-453e-a386-c2ef362a573b) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Inhibit System Recovery - T1490 (f5d8eed6-48a9-4cdf-a3d7-d1ffa99c3d2a) Attack Pattern 3
Exfiltration to Cloud Storage - T1567.002 (bf1b6176-597c-4600-bfcd-ac989670f96b) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Steal or Forge Kerberos Tickets - T1558 (3fc01293-ef5e-41c6-86ce-61f10706b64a) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
System Network Connections Discovery - T1049 (7e150503-88e7-4861-866b-ff1ac82c4475) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 3
Exploit Public-Facing Application - T1190 (3f886f2a-874f-4333-b794-aa6075009b1c) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 3
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Exploitation for Privilege Escalation - T1068 (b21c3b2d-02e6-45b1-980b-e69051040839) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Qbot (421a3805-7741-4315-82c2-6c9aa30d0953) Botnet 3
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Encrypted Channel - T1573 (b8902400-e6c5-4ba2-95aa-2d35b442b118) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Deobfuscate/Decode Files or Information - T1140 (3ccef7ae-cb5e-48f6-8302-897105fbf55c) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Service Execution - T1569.002 (f1951e8a-500e-4a26-8803-76d95c4554b4) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Modify Registry - T1112 (57340c81-c025-4189-8fa0-fc7ede51bae4) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Application Layer Protocol - T1071 (355be19c-ffc9-46d5-8d50-d6a036c675b6) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Regsvr32 - T1218.010 (b97f1d35-4249-4486-a6b5-ee60ccf24fab) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Group Policy Modification - T1484.001 (5d2be8b9-d24c-4e98-83bf-2f5f79477163) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Phishing - T1566 (a62a8db3-f23a-4d8f-afd6-9dbc77e7813b) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
System Network Configuration Discovery - T1016 (707399d6-ab3e-4963-9315-d9d3818cd6a0) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Service Stop - T1489 (20fb2507-d71c-455d-9b6d-6104461cf26b) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Spearphishing Attachment - T1566.001 (2e34237d-8574-43f6-aace-ae2915de8597) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Remote Access Tools - T1219 (4061e78c-1284-44b4-9116-73e4ac3912f7) Attack Pattern 3
BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware Remote Desktop Protocol - T1021.001 (eb062747-2193-45de-8fa2-e62549c37ddf) Attack Pattern 3
Disable or Modify Tools - T1562.001 (ac08589e-ee59-4935-8667-d845e38fe579) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
System Information Discovery - T1082 (354a7f88-63fb-41b5-a801-ce3b377b36f1) Attack Pattern BlackBasta (9db5f425-fe49-4137-8598-840e7290ed0f) Ransomware 3
Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6) Attack Pattern DLL - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34) Attack Pattern 4
Archive Collected Data - T1560 (53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a) Attack Pattern Archive via Utility - T1560.001 (00f90846-cbd1-4fc5-9233-df5c2bf2a662) Attack Pattern 4
Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af) Attack Pattern 4
Exfiltration to Cloud Storage - T1567.002 (bf1b6176-597c-4600-bfcd-ac989670f96b) Attack Pattern Exfiltration Over Web Service - T1567 (40597f16-0963-4249-bf4c-ac93b7fb9807) Attack Pattern 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (9953faea-d25d-4e6e-a132-8993535c5c14) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (3c4a2f3a-5877-4a27-a417-76318523657e) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (165ba336-3eab-4809-b6fd-d0dcc5478f7f) Unknown 4
Drive-by Compromise (d4e46fe1-cc6d-4ef0-af72-a4e8dcd71381) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (d2a19fd8-ff9c-4f9e-9e84-ed3ea12c4b7c) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (74b99029-3f0a-4cc8-90d6-5a6b177c06eb) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (350c12a3-33f6-5942-8892-4d6e70abbfc1) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Trusted Relationship (7549c2f9-b5d2-4773-90ed-42f668aecacf) Tidal Technique 4
Replication Through Removable Media (6a7ab25e-49ed-4cd3-b199-5d80b728b416) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Valid Accounts (a9b7eb2f-63e7-41bc-9d77-f7c4cede5406) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Content Injection (3f95e4f2-cd4a-502c-a12a-becb8d28440c) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Wi-Fi Networks (68f66e4a-b20b-5c4b-a88b-93509a92e872) Tidal Technique 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Exploit Public-Facing Application (4695fd01-43a5-4aa9-ab1a-501fc0dfbd6a) Tidal Technique 4
External Remote Services (c1f7e330-f1c4-4923-b8ad-bbd79cc63cb4) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (ba553ad4-5699-4458-ae4e-76e1faa43291) Unknown 4
Supply Chain Compromise (b72c8a96-5e03-40c2-ac0c-f77b73fe493f) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (590b55cd-7c6a-4207-b89a-3d7494623f00) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Phishing (d4a36624-50cb-43d3-95af-a2e10878a533) Tidal Technique 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (d08a9977-9fc2-46bb-84f9-dbb5187c426d) Unknown 4
Hardware Additions (4557bfb9-b940-49b6-b8be-571979134419) Tidal Technique Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (53fea37d-be26-4bed-a8a1-1d67f7cbffcf) Unknown 4
Initial Access (586a5b49-c566-4a57-beb4-e7c667f9c34c) Tidal Tactic Private Cluster (6c55cf9c-0259-4ba0-9574-e90f6c88e6fd) Unknown 4
System Services (a2300ed3-a502-4fe4-bad5-4aa1efc72941) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Cloud Administration Command (944a7b91-c58e-567d-9e2c-515b93713c50) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (723c6d51-91db-4658-9ee0-eafb953c2d82) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (8a669da8-8894-4fb0-9124-c3c8418985cc) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (eb1a471e-e3b5-4790-8c0a-b89b68f244b9) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (82497cfd-725e-42f8-aaa7-4e20878a6a13) Unknown 4
Input Injection (16122e9f-2761-5acb-9b6e-3d08a48af74c) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (3412ca73-2f25-452a-8e6e-5c28fe72ef78) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (803d286d-8104-4af8-9821-3f49240edc2b) Unknown 4
Command and Scripting Interpreter (a2184d53-63b1-4c40-81ed-da799080c36c) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Inter-Process Communication (afa4e2b5-cdd8-4d54-bcdb-acee8b5649e4) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (8bc683db-1311-476f-8cae-45f3f89dcc66) Unknown 4
ESXi Administration Command (b9848870-8577-5638-86e8-28d64555c974) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic User Execution (b84435ab-2ff4-4b6f-ba71-b4b815474872) Tidal Technique 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (9f06ef9b-d587-41d3-8fc8-7d539dac5701) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (8edc6345-c423-4872-9e22-11e22d9164ff) Unknown 4
Scheduled Task/Job (0baf02af-ffaa-403f-9f0d-da51f463a1d8) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (284bfbb3-99f0-4c3d-bc1f-ab74065b7907) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (496998fe-4066-45cf-b84a-dc428e6819c8) Unknown 4
Container Administration Command (0b9609dd-9f19-4747-ba6e-421b6b7ff03f) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (6ca7838a-e8ad-43e8-9da6-15b640d1cbde) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (8cc9e419-607e-4d2a-91d9-d47022e02bea) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (3eafcd8b-0cb8-4d23-8785-3f80a3c897c7) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (f795ef6d-d2cf-440e-b871-ab19dc385789) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Windows Management Instrumentation (c37795d9-8970-461f-9491-3086d6b4b69a) Tidal Technique 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Exploitation for Client Execution (068df3d7-f788-44e4-9e6b-2ae443af1609) Tidal Technique 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (68fed1c9-e060-4c4d-83d9-d8c817893d65) Unknown 4
Serverless Execution (d9edb609-2ca3-43d1-9c4d-c09a2856230f) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (be095bcc-4769-4010-b2db-3033d01efdbe) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Native API (1120f5ec-ef1b-4596-8d8b-a3979a766560) Tidal Technique 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (0340ed34-6db2-4979-bf73-2c16855867b4) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (46f60fff-71a1-4cfd-b639-71a0ac903bbb) Unknown 4
Shared Modules (8941d1f4-d80c-4aaa-821a-a059c2a0f854) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (6051e618-c476-41db-8b0b-0aef9d2bbbf7) Unknown 4
Software Deployment Tools (1bcf9fb5-6848-44d9-b394-ffbd3c357058) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (68427c7d-f65a-4545-abfd-13d69e5e50cf) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (88358f1a-07b2-5d95-8ee5-4b22b7cebe5b) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (85774757-bba6-51be-a836-98b01aca3fe8) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (fced9cbe-2f9e-59f0-9c43-1895f935861b) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (b77f25da-4da7-5d9c-9093-d384ca57616d) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (af798e80-2cc5-5452-83e4-9560f08bf2d5) Unknown 4
Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic Private Cluster (889b6cfa-dfb4-5d9f-beef-6c7c2e171454) Unknown 4
Deploy Container (2618638c-f6bd-4840-a297-c45076e094a9) Tidal Technique Execution (dad2337d-6d35-410a-acc5-da36ff83ee44) Tidal Tactic 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (8bd564d2-a3f1-4367-8631-a2d2cb3a1f46) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6f2186f3-c798-46e8-a26f-ae033822837b) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (31c6dd3c-3eb2-46a9-ab85-9e8e145810a1) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (803d286d-8104-4af8-9821-3f49240edc2b) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (71867386-ddc2-4cdb-a0c9-7c27172c23c1) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (f7544b99-d596-43dd-ab12-3844756f3ad7) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (69cd62f8-b729-4a05-8351-5bb961f7c6d6) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (ecca6c85-3d18-40c0-84d0-d5fb7ebd72b5) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (c2be31d9-c800-4cc7-81b9-f3fdb94fbb43) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (cd65b0f4-a2a4-4291-aff2-1c65cf68cf6c) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (ae967542-1f37-4eea-993d-fff3867f2aea) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (d595e757-da2e-4430-95d6-81f7d69738e8) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (efbbe9d1-274c-4383-9c6c-44bd4eca1829) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (ffd9430b-c727-47f4-a1f0-b1d4f8c29740) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Scheduled Task/Job (0baf02af-ffaa-403f-9f0d-da51f463a1d8) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (fdf95fac-f7f2-4901-b5fe-b2bafa443939) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (bfde0a09-8109-41e4-b8c9-68fe20e8131b) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (8a6ec54e-c7cd-4e3c-b848-21f8be2f864a) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b0a1ef13-0c54-47e8-a220-7543ba41a327) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (0df21d65-c885-415a-8f91-477ae1b37839) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (05a5318f-476d-44c1-8a85-9466295d31dd) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6c55cf9c-0259-4ba0-9574-e90f6c88e6fd) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (2e8cd9a0-846f-416b-80ba-21a15019ce73) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (82c07e34-9f67-4f4e-a513-c22a17b508e5) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Server Software Component (03fb32fa-cdee-4e94-ae3e-16b51a10ba9c) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b0d884c3-cf87-4610-992d-4ec54c667759) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (287201c6-56c8-458d-a6b3-5d84ad1099d7) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6f42559d-fb54-4c82-9ea7-eb9c709dac07) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (4659b96f-0e8d-4480-966b-c75062645f14) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Software Extensions (040804f6-6a87-4011-8716-66682bc16ed4) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (91d813d3-c17c-4c4c-b86e-0667f669a2f4) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (1f6a471d-49c6-4150-b213-2422d5fd3f26) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Account Manipulation (65f7482c-485b-4fd7-80f5-0ec6e923ac4d) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (9ed0f5c3-49ff-4c43-bb77-c00e466ce3ba) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (7a7e10ce-f033-460c-9183-5e29a9feb927) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (764041d4-ff10-45d0-b42e-2f23ca334740) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (83a2facf-84e7-4a3c-9dcd-74c4fd33fec6) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (4216058d-0912-4ff3-a7fd-dd7a7b346c96) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (34ffaa47-f591-4a44-bd7d-9790d81365cd) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6556e1cb-87d0-4e67-9d5c-343d1eddf430) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (34a112db-c61d-4ea2-872f-de3fc1af87a3) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (0799f2ee-3a83-452e-9fa9-83e91d83be25) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (043ffb62-dacd-4e21-9c86-b31826176283) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (9cfbe3ba-957e-49fd-9494-9870e5d0ae16) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic BITS Jobs (6b278e5d-7383-42a4-9425-2da79bbe43e0) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (7f9dbafd-4c7e-4bd9-8aff-c2a800743a07) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Boot or Logon Autostart Execution (17b97c19-b986-4653-850a-44aee9aaaba1) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (bd569ff9-c038-48c0-83d0-f5c784b439bc) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Boot or Logon Initialization Scripts (c51f799b-7305-43db-8d3b-657965cad68a) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (eff618a9-6498-4b01-bca1-cd5f3784fc27) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (0ca28cc0-89d0-4680-baef-94d7202c6a9b) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (d6504a4d-f6d7-4517-b0fd-ec7128d4dec9) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (74e2b24b-3bf7-4361-bc07-983bffe674f7) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (68ffdbed-08d8-46a2-a833-984bbf0d9b4a) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (8cc9e419-607e-4d2a-91d9-d47022e02bea) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Traffic Signaling (c2cf211a-9676-4922-a386-69697ab4934a) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b9d60848-388e-444c-9f22-2267ea61b5e9) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Cloud Application Integration (66ee2daa-b508-567f-abdc-f5060891b71e) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6fe2a6b8-bfb3-431d-8156-b2d005096f90) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (60498bb5-fcfb-4d85-bf3e-26c30c08fbda) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (e4495b87-9b04-4313-b771-7d9703639cce) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (cc5ae19f-981d-4004-bb74-260b8ebad73a) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (7ede5868-1109-4f22-abc7-9495658f7866) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (3e1ef5ba-6426-4fe0-ad48-78557667d680) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (12d918e0-51f7-45cf-b67c-fa60d15599f2) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Valid Accounts (a9b7eb2f-63e7-41bc-9d77-f7c4cede5406) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (08188de6-22c8-42af-b01c-f1c250c22514) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Compromise Host Software Binary (05435e33-05fe-4a41-b8e4-694d45eb9147) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (3d52cd7c-d81b-4762-9749-612bbbccb415) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (74b99029-3f0a-4cc8-90d6-5a6b177c06eb) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (3701f955-596b-422e-9fce-09c4f49cf080) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (36b58363-ca6a-4614-bf6f-bfaecafedb5f) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (3f9cd334-0b86-478f-97fa-c3aedd8035d8) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Create Account (55bcf759-a0bf-47e9-99f8-4e8ca997e6ce) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6dbe030c-5f87-4b45-9b6b-5bba2c0fad00) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Create or Modify System Process (f8aa018b-5134-4201-87f2-e55d20f40b17) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (82d15799-9776-463e-9b87-a58d682cee55) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (9dc21246-3788-48d6-b6a1-f2a39ee38557) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (8b8c0f91-17fb-41fe-905c-9cbf45593877) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (46ef0f74-b028-4b35-8980-bed066feb60c) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (7aae1ad0-fb1f-484a-a176-c94e4c7ada77) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (45f107b6-ae8e-49d7-a3fc-ea6437fbac76) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (9459a27a-b892-4864-9916-814130bea485) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (15660958-1f4f-4136-8cda-82123fd38232) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b34ba0fd-493c-4e68-91c4-918f495ad07c) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (62c22cc4-5643-4679-a6ae-9f6a3147d2fe) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (3c4a2f3a-5877-4a27-a417-76318523657e) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6051e618-c476-41db-8b0b-0aef9d2bbbf7) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b2cae050-4916-44c0-a6a3-3fa257145872) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (35197aee-8cc9-4584-bd22-33c8885db669) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (195aa08b-15fd-4019-b905-8f31bc5e2094) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6c8fa277-33c3-45b5-8f0d-9b1c0ccaf284) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (d2a19fd8-ff9c-4f9e-9e84-ed3ea12c4b7c) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (110c385f-9f27-4fd6-837c-6261294073ab) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (bce86020-2851-4b01-97a9-e51a6b23ea68) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (25a957d5-0c89-52a1-b446-bf993e17631c) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6823f994-6b4e-5170-ba2b-bd4bc6f0c452) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (96d578d9-5089-5e92-973b-cbc3a3a0a826) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b4455e1e-db2c-5587-a266-0fac12b387db) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (55750ba6-fa17-519a-a339-11fd0f8d26ab) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (f1329084-6e9c-5933-83cd-56c1bf8439e3) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (3d6727cd-d297-51e9-a6a2-8718284bf8e5) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (b9490b5f-645c-54a6-bf50-ad63540e6a07) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (2fa370dd-42be-5c10-85e8-294624c8a778) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (1169afd3-d80d-5942-b16f-8dc1812ef6bb) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Event Triggered Execution (e1e42979-d3cd-461b-afc4-a6373cbf97ba) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Exclusive Control (7b90deae-cf22-54f1-90e0-a4668f13f547) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic External Remote Services (c1f7e330-f1c4-4923-b8ad-bbd79cc63cb4) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Hijack Execution Flow (1085d0c6-4ff3-45f1-8e0c-d8f334f4ba68) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Implant Internal Image (b4f2b54c-d304-4e05-a813-69bc7e6fd1f3) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (032985de-5e09-4889-b8c4-84d940c6346c) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Modify Authentication Process (f516ecd7-a6a6-4018-8e58-c007be05bdce) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Modify Registry (0dfeab84-3c42-4b56-9021-70fe5be4092b) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Power Settings (0719ea2b-d630-5ada-9b04-c3136ff530ae) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (723c6d51-91db-4658-9ee0-eafb953c2d82) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Office Application Startup (db846575-a79b-4403-870d-5842be82001d) Tidal Technique 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (f0dd515b-51cf-4853-a20c-02226d099ee0) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (852748c2-280b-41e8-ba87-d97ec9fade70) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (0a4dd066-6a28-4dcb-ab3d-215fc01db9cb) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (6e65f84b-cfad-49ce-9072-f2966dc02f56) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (cd52d338-ba23-43c8-975d-4db29aa96598) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (eb1a471e-e3b5-4790-8c0a-b89b68f244b9) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (4050dbda-5cb0-4bd6-8444-841e55611f3a) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Private Cluster (bc996f67-7cb7-4ba4-9156-4f2f8283d66d) Unknown 4
Persistence (ec4f9786-c00c-430a-bc6d-0d0d22fdd393) Tidal Tactic Pre-OS Boot (33cd26b0-0248-4ee2-97a6-aab6a79824af) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (b2cae050-4916-44c0-a6a3-3fa257145872) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Process Injection (7a6208ac-c75e-4e73-8969-0aaf6085cb6e) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6c8fa277-33c3-45b5-8f0d-9b1c0ccaf284) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (d2a19fd8-ff9c-4f9e-9e84-ed3ea12c4b7c) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (110c385f-9f27-4fd6-837c-6261294073ab) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (25a957d5-0c89-52a1-b446-bf993e17631c) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6823f994-6b4e-5170-ba2b-bd4bc6f0c452) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (3d6727cd-d297-51e9-a6a2-8718284bf8e5) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (b9490b5f-645c-54a6-bf50-ad63540e6a07) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (769d2e67-5430-5fdd-9a07-d1b227110ec0) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (71867386-ddc2-4cdb-a0c9-7c27172c23c1) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (1169afd3-d80d-5942-b16f-8dc1812ef6bb) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (4659b96f-0e8d-4480-966b-c75062645f14) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (448dc009-2d3f-5480-aba3-0d80dc4336cd) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (34ffaa47-f591-4a44-bd7d-9790d81365cd) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Scheduled Task/Job (0baf02af-ffaa-403f-9f0d-da51f463a1d8) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (0799f2ee-3a83-452e-9fa9-83e91d83be25) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (15660958-1f4f-4136-8cda-82123fd38232) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Abuse Elevation Control Mechanism (ac7d9875-d18b-48f6-93e6-47c565f9526b) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Access Token Manipulation (1423e8c1-7cbf-4cfb-a70d-b6fe8e1a8041) Tidal Technique 4
Account Manipulation (65f7482c-485b-4fd7-80f5-0ec6e923ac4d) Tidal Technique Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Boot or Logon Autostart Execution (17b97c19-b986-4653-850a-44aee9aaaba1) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Boot or Logon Initialization Scripts (c51f799b-7305-43db-8d3b-657965cad68a) Tidal Technique 4
Valid Accounts (a9b7eb2f-63e7-41bc-9d77-f7c4cede5406) Tidal Technique Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Create or Modify System Process (f8aa018b-5134-4201-87f2-e55d20f40b17) Tidal Technique 4
Domain or Tenant Policy Modification (d092a9e1-63d0-415d-8cd0-666a261be5d9) Tidal Technique Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (43d872bd-3d54-4ea3-bc89-a2f979db0d5a) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (723c6d51-91db-4658-9ee0-eafb953c2d82) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (0a4dd066-6a28-4dcb-ab3d-215fc01db9cb) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Escape to Host (bebaf25b-9f50-4e3b-96cc-cc55c5765b61) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6e65f84b-cfad-49ce-9072-f2966dc02f56) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (cd52d338-ba23-43c8-975d-4db29aa96598) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (eb1a471e-e3b5-4790-8c0a-b89b68f244b9) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Event Triggered Execution (e1e42979-d3cd-461b-afc4-a6373cbf97ba) Tidal Technique 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (5e1499a1-f1ad-4929-84e1-5d33c371c02d) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (e082687f-d403-4246-987b-ad5f12911e4b) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (bc996f67-7cb7-4ba4-9156-4f2f8283d66d) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (8bd564d2-a3f1-4367-8631-a2d2cb3a1f46) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (f534b0a6-4445-409a-889c-6c3ac34656f1) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (31c6dd3c-3eb2-46a9-ab85-9e8e145810a1) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (803d286d-8104-4af8-9821-3f49240edc2b) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (f7544b99-d596-43dd-ab12-3844756f3ad7) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (69cd62f8-b729-4a05-8351-5bb961f7c6d6) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (8e332106-dd58-4adc-927d-57d038af797c) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (efbbe9d1-274c-4383-9c6c-44bd4eca1829) Unknown 4
Exploitation for Privilege Escalation (9cc715d7-9969-485f-87a2-c9f7ed3cc44c) Tidal Technique Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (ffd9430b-c727-47f4-a1f0-b1d4f8c29740) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (fdf95fac-f7f2-4901-b5fe-b2bafa443939) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (bfde0a09-8109-41e4-b8c9-68fe20e8131b) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (8a6ec54e-c7cd-4e3c-b848-21f8be2f864a) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (eff618a9-6498-4b01-bca1-cd5f3784fc27) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (0df21d65-c885-415a-8f91-477ae1b37839) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (7c9035b8-ad4b-4441-be2b-823d86b54fac) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6c55cf9c-0259-4ba0-9574-e90f6c88e6fd) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (2e8cd9a0-846f-416b-80ba-21a15019ce73) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (82c07e34-9f67-4f4e-a513-c22a17b508e5) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (b0d884c3-cf87-4610-992d-4ec54c667759) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (ef0e0599-6543-499d-8409-ef449da5c38a) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (e939bc27-a2cc-4278-be9b-a794c34aacbc) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6f42559d-fb54-4c82-9ea7-eb9c709dac07) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (91d813d3-c17c-4c4c-b86e-0667f669a2f4) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (5b841b56-6b47-4cec-bf80-71a9a51fa7a0) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (1f6a471d-49c6-4150-b213-2422d5fd3f26) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (9ed0f5c3-49ff-4c43-bb77-c00e466ce3ba) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (abccbb2a-2ea8-43b8-95dc-c583df300c07) Unknown 4
Hijack Execution Flow (1085d0c6-4ff3-45f1-8e0c-d8f334f4ba68) Tidal Technique Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (4216058d-0912-4ff3-a7fd-dd7a7b346c96) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (2afcdcd1-ce55-4837-a84d-8279bc10f948) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6556e1cb-87d0-4e67-9d5c-343d1eddf430) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (ab823cbf-0238-4347-a191-a90d84b978f7) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (561da0ae-4ebc-4356-a954-338249cac31a) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (043ffb62-dacd-4e21-9c86-b31826176283) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (449abc18-9faf-4ea6-a420-34528c28301d) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (9cfbe3ba-957e-49fd-9494-9870e5d0ae16) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (f060dcca-e7d2-4711-b5d1-41cffcb731b0) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (7f9dbafd-4c7e-4bd9-8aff-c2a800743a07) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (bd569ff9-c038-48c0-83d0-f5c784b439bc) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (0ca28cc0-89d0-4680-baef-94d7202c6a9b) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (68ffdbed-08d8-46a2-a833-984bbf0d9b4a) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (8cc9e419-607e-4d2a-91d9-d47022e02bea) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (77100337-67a1-4520-b25a-3ddd72b0d5ac) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (cc5ae19f-981d-4004-bb74-260b8ebad73a) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (dcb323f0-0fe6-4e26-9039-4f26f10cd3a5) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (fd6b86c5-535b-4532-a6d8-a57a6fb04c18) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (7ede5868-1109-4f22-abc7-9495658f7866) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (3e1ef5ba-6426-4fe0-ad48-78557667d680) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (08188de6-22c8-42af-b01c-f1c250c22514) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (3d52cd7c-d81b-4762-9749-612bbbccb415) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (74b99029-3f0a-4cc8-90d6-5a6b177c06eb) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (3701f955-596b-422e-9fce-09c4f49cf080) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (36b58363-ca6a-4614-bf6f-bfaecafedb5f) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (3f9cd334-0b86-478f-97fa-c3aedd8035d8) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6dbe030c-5f87-4b45-9b6b-5bba2c0fad00) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (7360117a-3404-48d0-9d4b-7f6a61c08f0e) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (8b8c0f91-17fb-41fe-905c-9cbf45593877) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (46ef0f74-b028-4b35-8980-bed066feb60c) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (7aae1ad0-fb1f-484a-a176-c94e4c7ada77) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (74e2b24b-3bf7-4361-bc07-983bffe674f7) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (45f107b6-ae8e-49d7-a3fc-ea6437fbac76) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (24e0b530-cca7-4c5c-83b2-97b83c716e42) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (9459a27a-b892-4864-9916-814130bea485) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (e200d4c9-2d9c-4303-a2de-86baae85c60f) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (b34ba0fd-493c-4e68-91c4-918f495ad07c) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (c262a10e-13db-4c47-995c-87201cdf858d) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (bce86020-2851-4b01-97a9-e51a6b23ea68) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (3c4a2f3a-5877-4a27-a417-76318523657e) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (6051e618-c476-41db-8b0b-0aef9d2bbbf7) Unknown 4
Privilege Escalation (b17dde68-dbcf-4cfd-9bb8-be014ec65c37) Tidal Tactic Private Cluster (232bb95b-a267-4cc2-8eb1-67ecdd5babd5) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3b8f1fe2-f6f1-5660-a0b3-2f6be096b791) Unknown 4
Process Injection (7a6208ac-c75e-4e73-8969-0aaf6085cb6e) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (49714d10-6f44-5035-a448-66c2a3f3cdd6) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3d6727cd-d297-51e9-a6a2-8718284bf8e5) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b02bc1f4-fbed-5eab-918c-f367c39cc3ba) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (2fa370dd-42be-5c10-85e8-294624c8a778) Unknown 4
Reflective Code Loading (ef85800b-080d-4739-9f3b-91b61314a93e) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (afe01d48-73bc-5e52-aa5f-2310911c2e3c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (769d2e67-5430-5fdd-9a07-d1b227110ec0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (ed511983-98ef-572f-b5fc-0687f48467e0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9e55bc80-a187-58f7-a687-d37bbd618db7) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d9eb2887-840e-5ed7-bb4b-3b210f4147f9) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (448dc009-2d3f-5480-aba3-0d80dc4336cd) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e2911337-76ed-5834-b621-bb2b9a4205ee) Unknown 4
Rogue Domain Controller (c5eb5b88-6c62-4900-9b14-c4d67d420002) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Rootkit (cf2b56f6-3ebd-48ec-b9d9-835397acef89) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (43d872bd-3d54-4ea3-bc89-a2f979db0d5a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f0dd515b-51cf-4853-a20c-02226d099ee0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (5652575d-cdb9-44ef-9c32-fff038f15444) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (852748c2-280b-41e8-ba87-d97ec9fade70) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d1836637-e61d-42bb-9067-b325a201b7c7) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (5c6687f6-3539-4268-a6a4-2b98fdeac0fb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f46405a6-b9a3-4124-8bce-5a786038f28f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (0a4dd066-6a28-4dcb-ab3d-215fc01db9cb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (01505d46-8675-408d-881e-68f4d8743d47) Unknown 4
Abuse Elevation Control Mechanism (ac7d9875-d18b-48f6-93e6-47c565f9526b) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (7ae6fae6-b816-416d-8701-1cb471218fd5) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Access Token Manipulation (1423e8c1-7cbf-4cfb-a70d-b6fe8e1a8041) Tidal Technique 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (5e1499a1-f1ad-4929-84e1-5d33c371c02d) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e082687f-d403-4246-987b-ad5f12911e4b) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (4050dbda-5cb0-4bd6-8444-841e55611f3a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (bc996f67-7cb7-4ba4-9156-4f2f8283d66d) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (032985de-5e09-4889-b8c4-84d940c6346c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (766dd13c-6ee1-41da-81cd-a22a27d68103) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (442f60ed-5195-45c3-9d8c-7e17cabe7869) Unknown 4
Subvert Trust Controls (73a8b954-93fe-466c-b73d-bd35bb08c3e7) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f534b0a6-4445-409a-889c-6c3ac34656f1) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e6549d57-de83-4fee-96f1-2c4a1cdb654f) Unknown 4
System Binary Proxy Execution (4060ad55-7ff1-4127-acad-808b2bc77655) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (6f2186f3-c798-46e8-a26f-ae033822837b) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (026c9281-07f1-4358-96d3-151fed76b1fe) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (81564f1d-9c72-4d03-8561-b0d255f76c5f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (2f32c30e-b79a-497a-b05f-ab8bd93aa689) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9ca43902-5632-43e9-9dc1-84a8eafe44bd) Unknown 4
BITS Jobs (6b278e5d-7383-42a4-9425-2da79bbe43e0) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (018381a5-df0a-4636-9df2-294101fb2092) Unknown 4
System Script Proxy Execution (e0d1825e-e46a-48f2-9b28-8346a39d39b0) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (69cd62f8-b729-4a05-8351-5bb961f7c6d6) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e558aca4-3db1-42a0-bec2-bb9823852b49) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9449c0d5-7445-45e0-9861-7aafd6531733) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9d36254c-e568-4c03-8688-e6eed5f7510c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (95ea2f53-b6c8-4f85-a3f7-528eeadd3c48) Unknown 4
Build Image on Host (49749e13-48ed-49fc-82d1-13ae13b457c1) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (cd65b0f4-a2a4-4291-aff2-1c65cf68cf6c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Template Injection (02b8e7c1-0db7-43f5-a5bc-531b30395122) Tidal Technique 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (39d589f9-fa73-4988-95e2-2a022851d8b8) Unknown 4
Traffic Signaling (c2cf211a-9676-4922-a386-69697ab4934a) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (aa6595d5-1b2e-45a8-8caf-b0968aeab2ba) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (074cf118-cd7f-41c2-bb54-43380bfa45ca) Unknown 4
Trusted Developer Utilities Proxy Execution (8811114c-a0cf-479c-b95d-c036467749e3) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (8e332106-dd58-4adc-927d-57d038af797c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (64fd8f4d-5725-46c8-a37a-020a706db1e4) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e8866e77-f0ca-4a19-b83e-d33dbafaf21b) Unknown 4
Unused/Unsupported Cloud Regions (edf9f7d7-bc14-4e25-800d-f508acb580d4) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (0ca01a9e-571e-4b17-a84d-23e9ce39b073) Unknown 4
Use Alternate Authentication Material (28f65214-95c1-4a72-b385-0b32cbcaea8f) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (581c5073-4236-4c45-b8fc-37ae2dfbb65f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (97918962-6509-4369-b2b5-5d02681c6700) Unknown 4
Valid Accounts (a9b7eb2f-63e7-41bc-9d77-f7c4cede5406) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b5cc9ab3-6501-4c50-904e-1a25a4088125) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (06f738c0-fbab-4d14-83ad-56240c8f35ac) Unknown 4
Virtualization/Sandbox Evasion (63baf71d-f46f-4ac8-a3a6-8345ddd2f7a8) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (4f7d0afb-92ce-429b-9ef5-dc6a7fc4f4a8) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (62e5e1c5-4fee-4f05-9dd4-a6dc306a46b1) Unknown 4
Weaken Encryption (8cf19b3d-c9fa-4d71-a6ab-dc0e236e57d4) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b0a1ef13-0c54-47e8-a220-7543ba41a327) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (c26e1b28-89c9-4083-9f94-022c891bf60c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (0df21d65-c885-415a-8f91-477ae1b37839) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (8352a63b-7450-4946-93c9-b7434935d794) Unknown 4
XSL Script Processing (4eb755e6-41f1-4c92-b14d-87a61a446258) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (7c9035b8-ad4b-4441-be2b-823d86b54fac) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (6c55cf9c-0259-4ba0-9574-e90f6c88e6fd) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (fc34e661-55c3-47be-a368-c2f5776cdd17) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (ef0e0599-6543-499d-8409-ef449da5c38a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e939bc27-a2cc-4278-be9b-a794c34aacbc) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (ba8d0fed-e500-4060-9d31-277b7e4411fb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (5b841b56-6b47-4cec-bf80-71a9a51fa7a0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d7c90fc2-b7df-4e83-96af-9cf1c428ffa3) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (1f6a471d-49c6-4150-b213-2422d5fd3f26) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (154dccf2-21fa-4aee-99cc-d959d841f8b1) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (ccb72576-4e85-4c7b-89b8-fa67cc6cdbef) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (495604b5-f74f-4224-9c3c-f8aacf8aef51) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (764041d4-ff10-45d0-b42e-2f23ca334740) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (5e771f38-6286-4330-b7b4-38071ad6b68a) Unknown 4
Debugger Evasion (945c1564-6c13-4baa-b1d4-6ba82e06a897) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (86c2f355-3c97-44c1-9a83-e3d016f50535) Unknown 4
Deobfuscate/Decode Files or Information (88c2fb46-877a-4005-8425-7639d0da1920) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (abccbb2a-2ea8-43b8-95dc-c583df300c07) Unknown 4
Deploy Container (2618638c-f6bd-4840-a297-c45076e094a9) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (7ee64e42-6d3b-47f8-a2a9-55263537bd51) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f413afa2-406d-4e8e-a12c-5f1b8ef05d8a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b0d884c3-cf87-4610-992d-4ec54c667759) Unknown 4
Direct Volume Access (447f1d32-31f7-44b5-834a-dcba8b038e7f) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (2afcdcd1-ce55-4837-a84d-8279bc10f948) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e8eb0242-9972-4c8b-af89-7731065d79f8) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (257fffe4-d17b-4e63-a41c-8388936d6215) Unknown 4
Domain or Tenant Policy Modification (d092a9e1-63d0-415d-8cd0-666a261be5d9) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d54c50df-3cb8-4fff-86c4-ae5be57937ad) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (ab823cbf-0238-4347-a191-a90d84b978f7) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (34a112db-c61d-4ea2-872f-de3fc1af87a3) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (487916b2-99f6-40cd-8529-5a81d2f199db) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (561da0ae-4ebc-4356-a954-338249cac31a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (fe8b3b28-41ad-405b-a2b8-9c10048550c2) Unknown 4
Email Spoofing (a9a0136e-7412-54e8-a6fe-0817bf736eeb) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (cb268bcf-3c2f-4583-94e3-7c9f0893e52f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (449abc18-9faf-4ea6-a420-34528c28301d) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f060dcca-e7d2-4711-b5d1-41cffcb731b0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (bd569ff9-c038-48c0-83d0-f5c784b439bc) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (68ffdbed-08d8-46a2-a833-984bbf0d9b4a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b9d60848-388e-444c-9f22-2267ea61b5e9) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b5c7edc6-0cc7-4c57-b39f-3b0474433889) Unknown 4
Execution Guardrails (aca9cbac-5c11-4050-8d9c-2a947c89a1e8) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (8325f2fd-35a3-4c0c-895d-7c82dd4ba2fb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (67fa2827-fd64-5bf7-bf77-27b6ffc8f77f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9f290216-b2ab-47b5-b9ae-a94ae6d357c6) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (2507fbbc-ea9e-4e18-9329-b728847d7462) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (77100337-67a1-4520-b25a-3ddd72b0d5ac) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (644d820e-6f64-4404-a861-cfa8b18b42a6) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (60498bb5-fcfb-4d85-bf3e-26c30c08fbda) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (aa5a31d0-1b78-481d-a317-5089c1e111bf) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (7564b45e-55d9-4ffa-8e08-b08b0aa82182) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (dcb323f0-0fe6-4e26-9039-4f26f10cd3a5) Unknown 4
Exploitation for Defense Evasion (15b65bf2-dbe5-47bc-be09-ed97684bf391) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (fd6b86c5-535b-4532-a6d8-a57a6fb04c18) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (b1da2b02-9ade-45e0-a795-ec1b19e5316a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (04e8e75c-434e-51e0-9780-580a3823a8cb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (14fa2a80-c838-462d-8c34-5a98a31a65ca) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (08188de6-22c8-42af-b01c-f1c250c22514) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f22d0738-dcb7-40c2-99cf-b426ac54224a) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d36a5323-e249-44e8-9c8b-5cc9c023a5e1) Unknown 4
File and Directory Permissions Modification (cb2e4822-2529-4216-b5b8-75158c5f85ff) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (74b99029-3f0a-4cc8-90d6-5a6b177c06eb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (a54c7c35-b70d-42b2-aa9d-5ffd9f792fff) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3a956db0-a3f0-442a-a981-db2ee20d60b2) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (1e3d9e0a-6744-44e4-836d-1db38a4cc99c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (4aa6466a-f7ca-4dae-b272-73ca23f0df8f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (6824cdb3-a4c5-45a8-a3d5-5a5afd347214) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (5e8b76ce-b75f-449c-9d8f-573b1ffdb2bd) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (2ba8a662-6930-4cbe-9e3d-4cbe2109fd88) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (7360117a-3404-48d0-9d4b-7f6a61c08f0e) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (630a17c1-0176-4764-8f5c-a83f4f3e980f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e6dac24d-672c-4cae-82e7-2bf21014633c) Unknown 4
Hide Artifacts (f37f0cd5-0446-415f-9309-94e25aa1165d) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (82d15799-9776-463e-9b87-a58d682cee55) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f216978a-36c0-47f1-a4ad-5ef67c8ae72c) Unknown 4
Hijack Execution Flow (1085d0c6-4ff3-45f1-8e0c-d8f334f4ba68) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9dc21246-3788-48d6-b6a1-f2a39ee38557) Unknown 4
Impair Defenses (e3be3d76-0a36-4060-8003-3b39c557f728) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d36695d0-e4ab-4b8a-9c65-bab3cc34ef2c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9ed5db23-3b2a-4a08-8602-bc8dff5c80f0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Impersonation (20417e43-6ffa-5d36-a2ef-e27cd5a4b8f1) Tidal Technique 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9e6268a5-a979-4219-b0ad-76094a9876c7) Unknown 4
Indicator Removal (fa1507f1-c763-4af1-8bd9-a2fb8f7904be) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (24e0b530-cca7-4c5c-83b2-97b83c716e42) Unknown 4
Indirect Command Execution (91e79eb9-7f99-4890-8bef-9543d307206d) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (50dd9303-b6a5-417a-860e-26f4244ff580) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (33486e3e-1104-42d0-8053-34c8c9c4d10f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (81070f84-0835-5fdf-bcbb-4e16252dc2f0) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (67a83337-b17a-5413-a506-d84306cc0dfb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (bd52a415-2b7a-4048-84bf-b20f385b357e) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (e200d4c9-2d9c-4303-a2de-86baae85c60f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (9ef0ef16-b62c-4d09-b872-12c7e6adf2ed) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (c262a10e-13db-4c47-995c-87201cdf858d) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (14e81a2d-9eca-429c-9fb9-08e109de9f6c) Unknown 4
Masquerading (a0adacc1-8d2a-4e0b-92c1-3766264df4fd) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (bcaf63dc-660a-40d4-ba28-fc113b34bf51) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (8592f37d-850a-43d1-86f2-cc981ad7d7dc) Unknown 4
Modify Authentication Process (f516ecd7-a6a6-4018-8e58-c007be05bdce) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Modify Cloud Compute Infrastructure (46c78b63-d079-441e-abdd-c16b39d4bab3) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3c4a2f3a-5877-4a27-a417-76318523657e) Unknown 4
Modify Cloud Resource Hierarchy (fbc49122-feae-52bf-9b96-93594cb5a01d) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (ac10844f-e4ab-44a2-97b4-3d74a1fc046c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Modify Registry (0dfeab84-3c42-4b56-9021-70fe5be4092b) Tidal Technique 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3b12e647-2bbd-4d84-9abe-401ad4230b6d) Unknown 4
Modify System Image (f435a5ff-78d2-44de-b464-2b5528f94adc) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (232bb95b-a267-4cc2-8eb1-67ecdd5babd5) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (195aa08b-15fd-4019-b905-8f31bc5e2094) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (6c8fa277-33c3-45b5-8f0d-9b1c0ccaf284) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (49e3504a-e031-45a0-b816-1d3741a78c7f) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d2a19fd8-ff9c-4f9e-9e84-ed3ea12c4b7c) Unknown 4
Network Boundary Bridging (091282d8-ef05-487f-93aa-445efaeed71b) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (43c2f853-cb52-4242-94e9-ec53743f3c05) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f5732b2d-0548-4574-bcc8-59ceef24aeeb) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (110c385f-9f27-4fd6-837c-6261294073ab) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (967b85c4-cfa7-520c-819b-4f7e36562589) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d9ee3cf6-5852-5896-851d-28f751f5bf3c) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3fee577e-dad0-53a5-9d58-6049cb5a70e5) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (c8888a55-8339-54ca-a645-d8b40a7ee1c9) Unknown 4
Obfuscated Files or Information (046cc07e-8700-4536-9c5b-6ecb384f52b0) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (933dede9-e193-52d7-bc8c-3d5af93541d6) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d3c97e67-d0a0-56c2-9b84-a179c5ace9ec) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (3da73d1c-132a-5f80-8c7e-cbcae04b3e12) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (234d2a91-db5f-5d76-9de6-58e5b09543d6) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (85fd1d00-ba5d-5a49-ba72-dd71ed567372) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (4884db74-3624-5e32-aeac-f41c680e378d) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (c41cb2d3-ff4c-5ee7-99b9-8a3d7987c9bf) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f91a7433-d5f1-5a47-8252-f02b513ce7f4) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (f1329084-6e9c-5933-83cd-56c1bf8439e3) Unknown 4
Plist File Modification (ee177ad0-d282-42c0-91f9-7bcf724e3d31) Tidal Technique Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Private Cluster (d8406198-626c-5659-945e-2b5105fcd0c9) Unknown 4
Defense Evasion (8e29c6c9-0c10-4bb0-827d-ff0ab8922726) Tidal Tactic Pre-OS Boot (33cd26b0-0248-4ee2-97a6-aab6a79824af) Tidal Technique 4
File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c) Attack Pattern Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69) Attack Pattern 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (60498bb5-fcfb-4d85-bf3e-26c30c08fbda) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (03ef726b-ac65-4e23-8130-9d299a3f458a) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (ef7732d9-b629-4037-b5b5-579dafda080b) Unknown 4
Brute Force (c16eef78-232e-47a2-98e9-046ec075b13c) Tidal Technique Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (e7135af8-3668-4d94-90d2-2a93a6b5c327) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (9503955c-fa53-452a-b717-7e23bfb4df83) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (82d15799-9776-463e-9b87-a58d682cee55) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (9dc21246-3788-48d6-b6a1-f2a39ee38557) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (c46432d4-bdeb-4dad-bbbd-68ad8ba6aca5) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (2f980aed-b34a-4300-ac6b-70e7ddf6d9be) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Input Capture (5ee96331-a7b7-4c32-a8f1-3fb164078f5f) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (0a54e0f9-27eb-466b-ae47-53216e6e8065) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Unsecured Credentials (02ed857b-ba39-4fab-b1d9-3ed2aa689dfd) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (b0a1ef13-0c54-47e8-a220-7543ba41a327) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (b4a1cbaa-85d1-4a65-977f-494f66a141e3) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (52dabfcc-b7a4-4334-9014-ab9d82f5527b) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (e63414a7-c6f7-4bcf-a6eb-25b0c4ddbb2a) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (e493bf4a-0eba-4e60-a7a6-c699084dc98a) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (28fd13d1-b555-47fa-9d47-caf6b1367ace) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (b44a263f-76b2-4a1f-baeb-dd285974eca6) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (6f6b88df-039c-4b69-87e0-97dfabbb49d8) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (ab0da102-5a14-42b1-969e-5d3daefdf0c5) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Modify Authentication Process (f516ecd7-a6a6-4018-8e58-c007be05bdce) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (195aa08b-15fd-4019-b905-8f31bc5e2094) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (f1329084-6e9c-5933-83cd-56c1bf8439e3) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (d049bae1-29f3-5f7d-ba6a-08b1227d5b72) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (8e9cfd62-1a61-50dc-8f05-8a4914fd3853) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (ca544853-bda2-554a-b7c4-c239760e56a2) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (2fa370dd-42be-5c10-85e8-294624c8a778) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (852748c2-280b-41e8-ba87-d97ec9fade70) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (260571a6-3c08-5419-98c5-3fa1aa8e675d) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (7f1798b5-b159-441b-a5ef-3b5c706e1699) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Multi-Factor Authentication Interception (600d45ec-cb9c-47b8-ae94-326471ebb007) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (e849ebcc-e0af-45a5-aefa-c394bb759b4e) Unknown 4
Multi-Factor Authentication Request Generation (c0f2efd4-bfc8-43da-9859-14446fb8f289) Tidal Technique Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (a95e33ab-7032-4943-ab15-d526420e0cc6) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Exploitation for Credential Access (afdfa503-0464-4b42-a79c-a6fc828492ef) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Credentials from Password Stores (a0bb264e-8617-4ae6-bafd-f52b36c63d12) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (a5a95893-d837-424a-979f-095a47dd9f34) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (fd75ec36-fc88-4bee-9fd9-480df6d1e765) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (7e8c3c70-2e9f-4fa0-b083-ff5610447dc1) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (1ef8a053-ff13-4a10-b9d9-0a017880e4a5) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (b40aa9fa-abb5-47c3-951f-2d454b9bc017) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (dc0aecef-3cb2-4381-b6e4-dfa7be16d42b) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Network Sniffing (bbad213d-477d-43bf-9501-ad7d74bac323) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (81ae71ff-ca5e-4b87-9361-24ebc2c454b3) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (9448cf6f-7ba3-41d1-8710-8e6f9b0572ee) Unknown 4
Steal Application Access Token (f78f2c87-626a-468f-93a5-31b61be17727) Tidal Technique Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (cdac2469-52ca-42a8-aefe-0321a7e3d658) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Steal or Forge Authentication Certificates (b8c27b52-3e73-448d-8a7c-3e814c8e3889) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (cd65b0f4-a2a4-4291-aff2-1c65cf68cf6c) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Steal or Forge Kerberos Tickets (0fef0394-7cf6-4797-8a5e-1cbfd31ee501) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Steal Web Session Cookie (17f9e46d-4e3d-4491-a0d9-0cc042531d6e) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (888e603b-ca97-4671-aa43-a25248fc9fc8) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Adversary-in-the-Middle (d98dbf30-c454-42ff-a9f3-2cd3319cc0d9) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (34674b83-86a7-4ad9-8b05-49b505aa5ef0) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Forge Web Credentials (d8507187-cea6-4be2-95b4-e875924e58c0) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic OS Credential Dumping (368f85f9-2b15-4732-80fe-087694eaf34d) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (cf4d8bb4-2d60-499d-b72c-4957660758c9) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Forced Authentication (e732e1d4-fffa-4fc3-b387-47782c821688) Tidal Technique 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (12efebf8-9da4-446c-a627-b6f95524f1ea) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (065d1cca-8ca5-4f8b-a333-2340706f589e) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (838c5038-91e7-4648-925e-a142c8c10853) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (b0966c0f-1e09-4d5d-acff-0ca79dc9da89) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (57dd1624-42e9-42a6-b1bb-d1d1df233138) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (40ac9bae-173e-467c-80f2-0c1513fc874d) Unknown 4
Credential Access (0c3132d5-c0df-4793-b5f2-1a95bd64ab53) Tidal Tactic Private Cluster (6d300882-d404-4f77-a19d-4a2f2b786702) Unknown 4
System Service Discovery (e0a347e2-2ac5-458b-ab0f-18d81b6d6055) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Browser Information Discovery (f1af5c8b-3210-4788-a873-97b1518bb43a) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Process Discovery (710ae610-0556-44e5-9de9-8be6159a23dd) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Domain Trust Discovery (93bd112e-9494-4b60-bdc5-8b610c7ebe21) Tidal Technique 4
System Time Discovery (2e634ff1-a4ea-41b4-8ee9-23db4627a986) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Query Registry (58722f84-b119-45a8-8e29-0065688015ee) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Cloud Infrastructure Discovery (fd346e4e-b22f-4cae-bc24-946d7b14b5e1) Tidal Technique 4
Cloud Service Dashboard (315ce434-ad6d-4dae-a1dd-6db944a44422) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Cloud Service Discovery (5d0a3722-52b6-4968-a367-7ca6bc9a33fc) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Remote System Discovery (00a9a4d4-928d-4d95-be31-dfac6103991f) Tidal Technique 4
Cloud Storage Object Discovery (92761d92-a288-4407-a112-bb2720f07d07) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Log Enumeration (309c7c8b-c366-5762-8611-136971ac4eb4) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Device Driver Discovery (70ffc700-eb9b-54d7-8fd4-564bd71a6434) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Virtualization/Sandbox Evasion (63baf71d-f46f-4ac8-a3a6-8345ddd2f7a8) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Virtual Machine Discovery (ff6401f2-5308-59b4-a695-86b7120d4004) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Container and Resource Discovery (41c4b4cc-99da-4323-b0f4-229906578501) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (9e366f99-7f7d-4407-8915-448a8108c7e0) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (12908bde-a5eb-40a5-ae27-d93960d0bfdc) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (df5f6835-ca0a-4ef5-bb3a-b011e4025545) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (026c9281-07f1-4358-96d3-151fed76b1fe) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (f14bb7ae-6ba3-4b44-b776-c79867ea9225) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (b31b014b-0b59-4493-966b-a57ad68f073d) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (0ca01a9e-571e-4b17-a84d-23e9ce39b073) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Network Service Discovery (5bab1234-8d1e-437f-88a0-d527b2dfc6cd) Tidal Technique 4
Software Discovery (e9bff6ff-3142-4910-8f67-19b868912602) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (3f926f8f-7b47-4a7d-976a-269704a6bc5c) Unknown 4
Network Share Discovery (ac5e465f-466d-41e4-933a-04e2c861e820) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (d76c3dde-dba5-4748-8d51-c93fc34f885e) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Network Sniffing (bbad213d-477d-43bf-9501-ad7d74bac323) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Account Discovery (6736995e-b9ea-401b-81fa-6caeb7a17ce3) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic File and Directory Discovery (1492c4ba-c933-47b8-953d-6de3db8cfce8) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (cb268bcf-3c2f-4583-94e3-7c9f0893e52f) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (0fa8230a-fd97-4e2c-9923-923044af4291) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (7bebc801-5d5d-44b0-8da2-f37f7d88e40d) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (9e945aa5-3883-4537-a767-f49bdcce26c7) Unknown 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Private Cluster (4c7c0caa-b9bc-5d63-b5c3-812fdf3bba8a) Unknown 4
Application Window Discovery (3b2f435a-8666-43b5-9883-f2808eebd726) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Password Policy Discovery (2bf2e498-99c8-4e36-ad4b-e675d95ac925) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Debugger Evasion (945c1564-6c13-4baa-b1d4-6ba82e06a897) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Peripheral Device Discovery (0997d871-875e-41e4-891c-f8a4ed8b2f31) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic System Information Discovery (a2961a00-450e-45a5-b293-f699d9f3b4ea) Tidal Technique 4
Permission Groups Discovery (f9d61206-3063-4d04-b06f-225f4766bff1) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
System Location Discovery (90e6a093-3e87-4d74-8b68-38c7d7e5e93c) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
System Network Configuration Discovery (adb6b8c1-2bdb-42b9-95da-5ce07e8796f7) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic Group Policy Discovery (d97d754d-92d5-4874-bbfe-5aa4d581f2a8) Tidal Technique 4
Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic System Network Connections Discovery (0d258912-58b1-4982-b90f-eed576f05ffc) Tidal Technique 4
System Owner/User Discovery (86e6f1f0-290b-4971-b50e-80e98a0a768b) Tidal Technique Discovery (ee7e5a85-a940-46e4-b408-12956f3baafa) Tidal Tactic 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (33486e3e-1104-42d0-8053-34c8c9c4d10f) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (f5fb86b6-abf0-4d44-b4a0-56f0636c24d2) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (8592f37d-850a-43d1-86f2-cc981ad7d7dc) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (351a3ac7-bf0f-5dc1-b090-5a3d3586f31d) Unknown 4
Taint Shared Content (58987d0d-2ebf-4783-90ac-5164fe9b9e43) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (852bc9a9-865f-59cd-9e81-bec6e8aa8b78) Unknown 4
Remote Services (30ef3f13-5e9b-4712-9adf-f0da4ef157a1) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Remote Service Session Hijacking (c992f340-645d-412a-b509-3cbaf94919b0) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Internal Spearphishing (4f4ea659-7653-4bfd-a525-b2af32c5899b) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Replication Through Removable Media (6a7ab25e-49ed-4cd3-b199-5d80b728b416) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Use Alternate Authentication Material (28f65214-95c1-4a72-b385-0b32cbcaea8f) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Lateral Tool Transfer (3dea57fc-3131-408b-a1fd-ff2eea1d858f) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Exploitation of Remote Services (51ff4ada-8a71-4801-9cb8-a6e216eaa4e4) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Software Deployment Tools (1bcf9fb5-6848-44d9-b394-ffbd3c357058) Tidal Technique Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (af7afc1e-3374-4d1c-917b-c47c305274f5) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (7620ba3a-7877-4f87-90e3-588163ac0474) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (45f2613d-35dd-4ddc-a222-30e9c0dd6bf6) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (bc2f2c6c-ffe7-4e78-bbac-369f6781bbdd) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (c2866fd3-754e-4b40-897a-e73a8c1fcf7b) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (ebc5fabb-5634-49f2-8979-94ea98da114a) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (5e771f38-6286-4330-b7b4-38071ad6b68a) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (d36a5323-e249-44e8-9c8b-5cc9c023a5e1) Unknown 4
Lateral Movement (50ba4930-7c8e-4ef9-bc36-70e7dae661eb) Tidal Tactic Private Cluster (a0f4b31b-41b7-4602-914a-f46aa815aadb) Unknown 4
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Browser Session Hijacking (b57c5554-5a46-42cd-be7e-4206f79ef424) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Clipboard Data (e8f90b73-2e59-4643-a274-78b85b8d9f88) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (3042a254-a2a9-4cb9-9939-087a24c64907) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Email Collection (3569b783-1be5-414b-adb9-42c47ceee1cc) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (7f1798b5-b159-441b-a5ef-3b5c706e1699) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (8ac6952d-5add-4cbc-ad39-44943ed3459b) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (41da2363-af05-46b8-990e-2cc749b5aac8) Unknown 4
Input Capture (5ee96331-a7b7-4c32-a8f1-3fb164078f5f) Tidal Technique Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (8e32b6ed-58b1-4708-8b86-bd29c3a544d2) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (9a388756-9de0-45ea-9820-810443733789) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (cf76b79c-8226-4137-b3dd-8f516611b928) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (ccf06b4a-bc33-4db1-bc66-74a0a7c31451) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (0d5a5921-f643-4032-9a4a-0bb693822c21) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (52dabfcc-b7a4-4334-9014-ab9d82f5527b) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Video Capture (0c81e13a-3608-4171-8075-9f70b2934028) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (b44a263f-76b2-4a1f-baeb-dd285974eca6) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (34674b83-86a7-4ad9-8b05-49b505aa5ef0) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Screen Capture (4462ce9d-0a5a-427d-8160-7b307b50cfbd) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (ca544853-bda2-554a-b7c4-c239760e56a2) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (4562d25c-b3a8-582a-9a04-ff5f510ded7f) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (4d893ef6-a30e-5283-b47b-31d17ac427be) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (3cc64d61-7922-4e08-98ff-b76cb2173830) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (59db734e-9edb-4c92-b2ca-a72fe1e08ac7) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (40ac9bae-173e-467c-80f2-0c1513fc874d) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (5de59320-1471-4715-99c4-eda2f7996d07) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (03ef726b-ac65-4e23-8130-9d299a3f458a) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (fe595943-f264-4d05-a8c7-7afc8985bfc3) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Data from Cloud Storage (77069b3f-9e42-4f1b-894f-8df568233df2) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (8510638d-5be4-4986-a11c-dcbdc729a50f) Unknown 4
Data from Configuration Repository (97ef6135-47d4-4b91-8783-c0b5f331340e) Tidal Technique Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Private Cluster (28fd13d1-b555-47fa-9d47-caf6b1367ace) Unknown 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Data from Information Repositories (08a73f37-a04e-46be-9409-b330cbe291b4) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Data from Local System (c0e4f97b-f651-493f-9636-6ac2f6fb46fb) Tidal Technique 4
Data from Network Shared Drive (875c5aa3-6ab1-4717-9503-9818ccbad98a) Tidal Technique Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Data from Removable Media (ae3f9f0f-af66-424c-bcc8-4fdbd7ef9766) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Adversary-in-the-Middle (d98dbf30-c454-42ff-a9f3-2cd3319cc0d9) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Data Staged (ef4ef020-5cd1-4859-902b-f207828a1281) Tidal Technique 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Archive Collected Data (ebd3f870-c513-4fb0-b133-15ffc1f91db2) Tidal Technique 4
Audio Capture (2be5c67a-edae-4083-8b6d-f99eaa622ed4) Tidal Technique Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic 4
Collection (1ca65327-b553-4923-ae19-8e6987ca250a) Tidal Tactic Automated Collection (107ad6c5-79b1-468c-9519-1578bee2ac49) Tidal Technique 4
ProLock (c4417bfb-717f-48d9-bd56-bc9e85d07c19) Ransomware Qbot (421a3805-7741-4315-82c2-6c9aa30d0953) Botnet 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (9ff640ed-572e-4adc-bdc6-234a9e8ef36b) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (fa05c148-56a0-43ae-b8e4-2d4e91641400) Unknown 4
Protocol Tunneling (bd677092-d197-4230-b94a-438cb24260fd) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (f8a4c7ee-074b-4bfc-95be-43d91756b73c) Unknown 4
Proxy (ba6a869a-c870-4be6-bc08-e078f0efdc3b) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Dynamic Resolution (987ad3da-9423-4fe0-a52b-b931c0b8b95f) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (ce822cce-f7f1-4753-bff1-12e5bef66d53) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (eb15320a-cd24-45b2-b23f-05ef8daf1039) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (12a5e66d-6a21-4e75-a201-97235698d67d) Unknown 4
Traffic Signaling (c2cf211a-9676-4922-a386-69697ab4934a) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Ingress Tool Transfer (4499ce34-9871-4879-883c-19ddb940f242) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Remote Access Tools (acf828f4-7e7e-43e1-bf15-ceab42021430) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (0848222e-ddc2-489e-8ea4-e19634f6af34) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (9a21ec7b-9714-4073-9bf3-4df41995c698) Unknown 4
Encrypted Channel (0e704680-c930-42a7-9caa-5802b8cb2c48) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (2735f8d1-0e46-4cd7-bfbb-78941bb266fd) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (8b744bfc-6bfb-45c5-8bb8-5b736ce7e634) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (faeec22d-dff4-496f-9c7e-14c4f2c8d054) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (584d1c76-7da9-4374-87df-e622d78fc270) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Communication Through Removable Media (0783c499-1564-4062-addc-f1ff86ef4e59) Tidal Technique 4
Content Injection (3f95e4f2-cd4a-502c-a12a-becb8d28440c) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Web Service (a729feee-8e21-444e-8eea-2ec595b09931) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Multi-Stage Channels (e54bdb49-6039-4048-9be6-657a7ff3e071) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Data Encoding (7d8af4f3-7d8e-4ef2-b828-40a910fc6188) Tidal Technique 4
Fallback Channels (be8786b3-cd3d-47ef-a9e7-cd3ab3c901a1) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (1637efc5-85cc-515c-8244-fa973b0d69a6) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (7057b98d-e4a9-526c-b0f7-6a95e10feb71) Unknown 4
Non-Application Layer Protocol (4aed5968-6380-47d2-bbd7-3a4d959089e1) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (9ca4aa8c-e1a2-51c7-9bc6-af70495d34b6) Unknown 4
Non-Standard Port (36850d17-a7d5-41ac-aa89-040b9c0b2b3f) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (42d1b88a-c83b-5dc0-922f-f590fb7c6eb3) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (f0dd515b-51cf-4853-a20c-02226d099ee0) Unknown 4
Data Obfuscation (57f95410-5735-43ae-9fec-8b628a7df985) Tidal Technique Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (972f0311-aec5-4fb5-bc5b-504c3f0cc95c) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (b0be2e07-e4b4-4f1a-8fce-c7a1e820a817) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Application Layer Protocol (8a7afe43-b814-41b3-8bd8-e1301b8ba5b4) Tidal Technique 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (5c6c3492-5dbc-43ee-a3f2-ba1976d3b379) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (ac7b9775-8323-49cb-8fef-3cef972f11ac) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (abae30c8-c6b0-46ae-b464-44b66412065f) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (350fd3f9-2d62-498f-be62-fc4b9907ff02) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (4c2c7469-0dbc-410f-891b-1040d4f2ff0b) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (e9cc000d-174e-4e6c-9513-a0c000061700) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (34a112db-c61d-4ea2-872f-de3fc1af87a3) Unknown 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Hide Infrastructure (a3a2a527-39e7-58b4-a3cc-932eb0cef562) Tidal Technique 4
Command and Control (94ffe549-1c29-438d-9c7f-e27f7acee0bb) Tidal Tactic Private Cluster (a4f21b08-bf5b-4ba3-af69-cce01a467859) Unknown 4
Disk Wipe (ea2b3980-05fd-41a3-8ab9-3106e833c821) Tidal Technique Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic System Shutdown/Reboot (24787dca-6afd-4ab3-ab6c-32e9486ec418) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Email Bombing (bda97b6f-6465-5f17-81a9-8641d08ff1c0) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Inhibit System Recovery (d207c03b-fbe7-420e-a053-339f4650c043) Tidal Technique 4
Endpoint Denial of Service (8b0caea0-602e-4117-8322-b125150f5c2a) Tidal Technique Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic 4
Resource Hijacking (d10c4a15-aeaa-4630-a7a3-3373c89a584f) Tidal Technique Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (14a944d3-ab95-40d8-b069-ccc4824ef46d) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Data Destruction (e5016c2b-85fe-4e6b-917d-0dd5b441cc34) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (66657af9-83f7-4a54-b41b-301bfcdae866) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Service Stop (e27c5756-f43e-424f-af62-b21e8b304e5d) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (26db57d5-ce6f-4487-a8a8-b4af1c4b6406) Unknown 4
Data Encrypted for Impact (f0c36d24-263c-4811-8784-f716c77ec6b3) Tidal Technique Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Network Denial of Service (e6c14a7b-1fb8-4557-83e7-7f5b89717311) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (b05b5092-60f8-4324-aee3-7522753439ac) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (49ef3482-7b75-4097-b9a6-6c9cb99d865c) Unknown 4
Account Access Removal (847fcc8a-e74d-41e2-9f05-8d79d990cc04) Tidal Technique Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (d693ca8a-dacf-439e-a16b-5f6b3406a21d) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (2109de05-5b45-4519-94a2-6c04f7d88286) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (3ec6bb34-4134-40c3-8b67-c0aeceae4471) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (66cf4803-aec1-4396-afc1-28bc27dd8b2c) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Financial Theft (b9c9fd13-c10c-5e78-aeeb-ac18dc0605f9) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Data Manipulation (b77f03e8-f7d0-4d0f-8b79-4642d0fe2709) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (03619027-8a54-4cb2-8f1d-38d476edbdd8) Unknown 4
Firmware Corruption (559c647a-7759-4943-856d-dc717b5a443e) Tidal Technique Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (546a3318-0e03-4b22-95f5-c02ff69a4ebf) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (70365fab-8531-4a0e-b147-7cabdfdef243) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (761fa7fa-d7e1-4796-85b3-5cd37d55dffa) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (4a4a4fc9-88bc-500e-ae0e-db0d5f1f5503) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Defacement (9a21c7c7-cf8e-4f05-b196-86ec39653e3b) Tidal Technique 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (7683b3ab-64c0-539a-8c37-d5fa4cb6b2a8) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (99360c91-8f86-544f-8689-494ad62c1890) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (1471c62a-d480-5234-801d-ac228fd7a31c) Unknown 4
Impact (52c0edbc-ce4d-429a-b1d5-720403e0172f) Tidal Tactic Private Cluster (c7e3f0b5-f25e-5a99-9831-f8fd21ee3d22) Unknown 4
System Services - T1569 (d157f9d2-d09a-4efa-bb2a-64963f94e253) Attack Pattern Service Execution - T1569.002 (f1951e8a-500e-4a26-8803-76d95c4554b4) Attack Pattern 4
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern Regsvr32 - T1218.010 (b97f1d35-4249-4486-a6b5-ee60ccf24fab) Attack Pattern 4
Domain or Tenant Policy Modification - T1484 (ebb42bbe-62d7-47d7-a55f-3b08b61d792d) Attack Pattern Group Policy Modification - T1484.001 (5d2be8b9-d24c-4e98-83bf-2f5f79477163) Attack Pattern 4
Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5) Attack Pattern Windows Service - T1543.003 (2959d63f-73fd-46a1-abd2-109d7dcede32) Attack Pattern 4
Phishing - T1566 (a62a8db3-f23a-4d8f-afd6-9dbc77e7813b) Attack Pattern Spearphishing Attachment - T1566.001 (2e34237d-8574-43f6-aace-ae2915de8597) Attack Pattern 4
Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern Remote Desktop Protocol - T1021.001 (eb062747-2193-45de-8fa2-e62549c37ddf) Attack Pattern 4
Disable or Modify Tools - T1562.001 (ac08589e-ee59-4935-8667-d845e38fe579) Attack Pattern Impair Defenses - T1562 (3d333250-30e4-4a82-9edc-756c68afc529) Attack Pattern 4