Log sources › WinEventLog:Sysmon

WinEventLog:Sysmon

Inverted view: what can be detected if this is the log you have. IaaS, Linux, Office Suite, Windows, macOS

channels

435

analytics

423

techniques

418

KEV CVEs reachable

"Reachable" means: a KEV CVE has a public mapping to a technique, and MITRE's analytic for that technique names this log source. It is a statement about published knowledge, not about whether any particular rule fires.

Channels

Channel	Data components	Analytics	Techniques
`EventCode=1`	DC0032 Process Creation	AN0006 AN0009 AN0012 AN0016 AN0021 AN0024 AN0034 AN0037 AN0040 AN0051 AN0055 AN0061 AN0066 AN0071 AN0080 AN0085 AN0089 AN0091 AN0094 AN0100 AN0105 AN0108 AN0109 AN0113 AN0118 AN0127 AN0130 AN0133 AN0137 AN0147 AN0152 AN0153 AN0165 AN0170 AN0172 AN0176 AN0182 AN0184 AN0185 AN0188 AN0191 AN0204 AN0209 AN0216 AN0219 AN0226 AN0229 AN0236 AN0247 AN0250 AN0254 AN0258 AN0263 AN0265 AN0277 AN0278 AN0286 AN0292 AN0297 AN0302 AN0316 AN0324 AN0327 AN0331 AN0334 AN0341 AN0342 AN0355 AN0360 AN0363 AN0372 AN0375 AN0379 AN0388 AN0396 AN0398 AN0411 AN0423 AN0436 AN0455 AN0462 AN0472 AN0478 AN0502 AN0504 AN0510 AN0511 AN0516 AN0531 AN0535 AN0536 AN0540 AN0558 AN0559 AN0568 AN0576 AN0577 AN0580 AN0581 AN0584 AN0589 AN0590 AN0594 AN0595 AN0599 AN0602 AN0609 AN0616 AN0622 AN0628 AN0630 AN0633 AN0637 AN0641 AN0648 AN0651 AN0655 AN0662 AN0692 AN0694 AN0699 AN0724 AN0728 AN0733 AN0741 AN0750 AN0755 AN0767 AN0778 AN0781 AN0782 AN0786 AN0787 AN0791 AN0797 AN0819 AN0822 AN0838 AN0841 AN0842 AN0846 AN0850 AN0854 AN0856 AN0862 AN0868 AN0872 AN0880 AN0895 AN0903 AN0909 AN0913 AN0919 AN0922 AN0931 AN0932 AN0933 AN0940 AN0941 AN0942 AN0943 AN0954 AN0965 AN0968 AN0980 AN0988 AN0995 AN1012 AN1015 AN1020 AN1029 AN1030 AN1031 AN1032 AN1033 AN1045 AN1048 AN1057 AN1064 AN1075 AN1076 AN1095 AN1108 AN1116 AN1118 AN1133 AN1134 AN1144 AN1165 AN1169 AN1182 AN1185 AN1186 AN1195 AN1198 AN1206 AN1211 AN1212 AN1220 AN1221 AN1229 AN1235 AN1245 AN1246 AN1252 AN1259 AN1280 AN1288 AN1305 AN1308 AN1313 AN1319 AN1323 AN1361 AN1366 AN1381 AN1384 AN1389 AN1393 AN1399 AN1407 AN1410 AN1413 AN1417 AN1419 AN1428 AN1434 AN1436 AN1440 AN1448 AN1452 AN1461 AN1464 AN1465 AN1468 AN1472 AN1480 AN1483 AN1489 AN1495 AN1501 AN1507 AN1516 AN1527 AN1531 AN1536 AN1538 AN1543 AN1557 AN1560 AN1561 AN1564 AN1571 AN1575 AN1583 AN1588 AN1593 AN1604 AN1612 AN1620 AN1621 AN1622 AN2035 AN2038 AN2043 AN2063	264
`EventCode=10`	DC0035 Process Access	AN0016 AN0030 AN0066 AN0074 AN0095 AN0105 AN0126 AN0237 AN0243 AN0271 AN0277 AN0282 AN0287 AN0292 AN0297 AN0327 AN0378 AN0389 AN0405 AN0430 AN0444 AN0478 AN0493 AN0608 AN0619 AN0648 AN0675 AN0687 AN0719 AN0757 AN0767 AN0786 AN0822 AN0838 AN0913 AN0919 AN0932 AN0941 AN0942 AN0965 AN1000 AN1030 AN1035 AN1076 AN1094 AN1095 AN1182 AN1186 AN1193 AN1198 AN1207 AN1212 AN1213 AN1220 AN1253 AN1288 AN1289 AN1324 AN1353 AN1398 AN1399 AN1402 AN1417 AN1443 AN1465 AN1501 AN1535 AN1593 AN1598 AN1641	70
`EventCode=11`	DC0039 File Creation	AN0009 AN0012 AN0021 AN0034 AN0037 AN0040 AN0051 AN0052 AN0055 AN0065 AN0071 AN0072 AN0074 AN0091 AN0094 AN0108 AN0123 AN0130 AN0137 AN0139 AN0162 AN0165 AN0176 AN0178 AN0184 AN0185 AN0188 AN0194 AN0212 AN0229 AN0235 AN0240 AN0247 AN0251 AN0275 AN0278 AN0292 AN0297 AN0320 AN0327 AN0341 AN0342 AN0367 AN0372 AN0375 AN0388 AN0411 AN0428 AN0430 AN0472 AN0484 AN0488 AN0498 AN0510 AN0516 AN0531 AN0540 AN0555 AN0558 AN0568 AN0576 AN0577 AN0580 AN0595 AN0599 AN0602 AN0609 AN0614 AN0616 AN0619 AN0622 AN0629 AN0630 AN0651 AN0655 AN0677 AN0699 AN0712 AN0714 AN0724 AN0747 AN0767 AN0774 AN0782 AN0797 AN0819 AN0831 AN0834 AN0841 AN0854 AN0856 AN0862 AN0872 AN0880 AN0913 AN0932 AN0940 AN0942 AN0949 AN0962 AN0968 AN0983 AN0992 AN1008 AN1028 AN1030 AN1033 AN1040 AN1061 AN1064 AN1070 AN1075 AN1097 AN1108 AN1116 AN1145 AN1153 AN1177 AN1206 AN1207 AN1211 AN1213 AN1216 AN1221 AN1245 AN1246 AN1288 AN1298 AN1303 AN1308 AN1314 AN1319 AN1321 AN1366 AN1381 AN1384 AN1397 AN1407 AN1433 AN1436 AN1458 AN1480 AN1501 AN1511 AN1516 AN1528 AN1531 AN1535 AN1548 AN1551 AN1560 AN1598 AN1610 AN1611 AN2035 AN2063	155
`EventCode=12`	DC0056 Windows Registry Key Creation	AN0153 AN0323 AN0558 AN0622 AN0629 AN0871 AN0886 AN0932 AN1028 AN1186 AN1366 AN2043	11
`EventCode=13`	DC0063 Windows Registry Key Modification	AN0580	1
`EventCode=13, 14`	DC0063 Windows Registry Key Modification	AN0021 AN0074 AN0094 AN0118 AN0123 AN0137 AN0170 AN0235 AN0240 AN0243 AN0251 AN0323 AN0341 AN0360 AN0406 AN0441 AN0520 AN0535 AN0589 AN0622 AN0629 AN0687 AN0694 AN0764 AN0778 AN0781 AN0862 AN0871 AN0880 AN0932 AN0933 AN0975 AN1001 AN1028 AN1030 AN1032 AN1094 AN1116 AN1153 AN1185 AN1221 AN1271 AN1366 AN1369 AN1384 AN1436 AN1452 AN1527 AN1536 AN1551 AN1575 AN1595 AN2043	53
`EventCode=15`	DC0059 File Metadata	AN0094 AN0108 AN0162 AN0176 AN0378 AN0510 AN0555 AN0577 AN0702 AN0712 AN0819 AN0872 AN1097 AN1134 AN1206 AN1211 AN1436 AN1560 AN1626 AN1641	20
`EventCode=16`	DC0018 Host Status	AN0667	0
`EventCode=17`	DC0048 Named Pipe Metadata	AN0513 AN1095 AN1357	3
`EventCode=2`	DC0061 File Modification	AN0137 AN0162 AN0229 AN0235 AN0258 AN0510 AN0602 AN0629 AN0949 AN1245 AN1402 AN1405 AN1611	12
`EventCode=23`	DC0040 File Deletion	AN0392 AN0411 AN0469 AN0520 AN0555 AN0737 AN1216 AN1472	8
`EventCode=25`	DC0035 Process Access	AN1305	1
`EventCode=3, 22`	DC0082 Network Connection Creation	AN0002 AN0030 AN0052 AN0071 AN0075 AN0080 AN0100 AN0109 AN0118 AN0123 AN0130 AN0131 AN0158 AN0165 AN0178 AN0185 AN0204 AN0212 AN0216 AN0219 AN0226 AN0251 AN0274 AN0298 AN0302 AN0320 AN0327 AN0331 AN0345 AN0346 AN0367 AN0379 AN0400 AN0423 AN0436 AN0445 AN0462 AN0485 AN0488 AN0489 AN0498 AN0513 AN0564 AN0568 AN0576 AN0590 AN0596 AN0622 AN0637 AN0651 AN0655 AN0677 AN0702 AN0714 AN0728 AN0741 AN0750 AN0759 AN0785 AN0787 AN0791 AN0797 AN0823 AN0842 AN0862 AN0895 AN0922 AN0927 AN0928 AN0931 AN0932 AN0962 AN0968 AN0969 AN0988 AN1004 AN1020 AN1028 AN1031 AN1057 AN1091 AN1113 AN1118 AN1121 AN1134 AN1140 AN1144 AN1169 AN1178 AN1185 AN1189 AN1207 AN1225 AN1229 AN1254 AN1294 AN1305 AN1308 AN1309 AN1314 AN1331 AN1335 AN1344 AN1366 AN1367 AN1376 AN1381 AN1389 AN1397 AN1398 AN1407 AN1413 AN1434 AN1448 AN1464 AN1468 AN1483 AN1489 AN1496 AN1511 AN1535 AN1548 AN1551 AN1564 AN1571 AN1583 AN1599 AN1610 AN1620 AN2029 AN2035 AN2043 AN2063	130
`EventCode=4`	DC0041 Service Metadata	AN0061	1
`EventCode=5`	DC0033 Process Termination	AN0045 AN1369	2
`EventCode=6`	DC0079 Driver Load	AN0185 AN0384 AN0462 AN0474 AN0629 AN0827 AN0862 AN0882 AN0916 AN1035 AN1061 AN1419 AN1527 AN2038	14
`EventCode=7`	DC0016 Module Load	AN0016 AN0021 AN0048 AN0051 AN0052 AN0071 AN0074 AN0085 AN0108 AN0118 AN0127 AN0184 AN0185 AN0209 AN0219 AN0226 AN0236 AN0237 AN0250 AN0263 AN0287 AN0327 AN0341 AN0388 AN0389 AN0396 AN0400 AN0430 AN0445 AN0462 AN0472 AN0478 AN0488 AN0502 AN0550 AN0558 AN0568 AN0577 AN0578 AN0580 AN0581 AN0583 AN0595 AN0609 AN0622 AN0628 AN0643 AN0733 AN0747 AN0757 AN0759 AN0785 AN0791 AN0814 AN0831 AN0838 AN0862 AN0880 AN0919 AN0968 AN0980 AN1000 AN1028 AN1029 AN1035 AN1048 AN1094 AN1095 AN1133 AN1207 AN1212 AN1220 AN1222 AN1252 AN1288 AN1289 AN1303 AN1305 AN1308 AN1319 AN1323 AN1335 AN1393 AN1398 AN1399 AN1433 AN1458 AN1464 AN1465 AN1480 AN1495 AN1496 AN1535 AN1536 AN1551 AN1588 AN1598 AN1633 AN2063	99
`EventCode=8`	DC0020 Process Modification	AN0277 AN0297 AN0389 AN0822 AN0941 AN1076 AN1289 AN1398 AN1535 AN1551	10
`EventCode=9`	DC0054 Drive Access	AN0275 AN0428 AN0774	3
`File creation of suspicious scripts/binaries in temporary directories`	DC0039 File Creation	AN0993	1
`Outbound requests with forged tokens/cookies in headers`	DC0085 Network Traffic Content	AN0720	1
`Raw disk write access via \\.\PhysicalDrive* or \\.\C:`	DC0046 Drive Modification	AN0384	1
`Raw disk writes targeting \\.\PhysicalDrive* or MBR locations`	DC0046 Drive Modification	AN0882	1
`Raw write attempts targeting \\.\PhysicalDrive0 or sector 0 (MBR/partition table)`	DC0046 Drive Modification	AN0827	1

Techniques detectable from this source

Technique	Tactics	Sigma rules	KEV CVEs
T1001.001 Junk Data	command and control	0	0
T1001.002 Steganography	command and control	0	0
T1001.003 Protocol or Service Impersonation	command and control	2	0
T1003 OS Credential Dumping	credential access	37	18
T1003.001 LSASS Memory	credential access	79	4
T1003.002 Security Account Manager	credential access	28	0
T1003.003 NTDS	credential access	24	3
T1003.004 LSA Secrets	credential access	12	0
T1003.005 Cached Domain Credentials	credential access	8	0
T1005 Data from Local System	collection	14	46
T1006 Direct Volume Access	stealth	1	0
T1008 Fallback Channels	command and control	4	0
T1010 Application Window Discovery	discovery	1	0
T1011 Exfiltration Over Other Network Medium	exfiltration	0	4
T1011.001 Exfiltration Over Bluetooth	exfiltration	0	0
T1012 Query Registry	discovery	14	0
T1014 Rootkit	stealth	1	0
T1016 System Network Configuration Discovery	discovery	12	1
T1016.001 Internet Connection Discovery	discovery	0	0
T1016.002 Wi-Fi Discovery	discovery	0	0
T1018 Remote System Discovery	discovery	17	2
T1020 Automated Exfiltration	exfiltration	10	0
T1021 Remote Services	lateral movement	11	4
T1021.001 Remote Desktop Protocol	lateral movement	16	2
T1021.002 SMB/Windows Admin Shares	lateral movement	38	0
T1021.003 Distributed Component Object Model	lateral movement	13	0
T1021.005 VNC	lateral movement	1	0
T1021.006 Windows Remote Management	lateral movement	11	0
T1021.008 Direct Cloud VM Connections	lateral movement	0	0
T1025 Data from Removable Media	collection	0	0
T1027 Obfuscated Files or Information	stealth	94	5
T1027.001 Binary Padding	stealth	3	0
T1027.002 Software Packing	stealth	1	0
T1027.003 Steganography	stealth	5	0
T1027.004 Compile After Delivery	stealth	6	0
T1027.005 Indicator Removal from Tools	stealth	4	0
T1027.006 HTML Smuggling	stealth	0	0
T1027.007 Dynamic API Resolution	stealth	0	0
T1027.008 Stripped Payloads	stealth	0	0
T1027.009 Embedded Payloads	stealth	2	0
T1027.012 LNK Icon Smuggling	stealth	0	0
T1027.013 Encrypted/Encoded File	stealth	0	0
T1027.014 Polymorphic Code	stealth	0	0
T1027.015 Compression	stealth	0	0
T1027.016 Junk Code Insertion	stealth	0	0
T1027.017 SVG Smuggling	stealth	0	0
T1027.018 Invisible Unicode	stealth	0	0
T1029 Scheduled Transfer	exfiltration	0	0
T1030 Data Transfer Size Limits	exfiltration	2	0
T1033 System Owner/User Discovery	discovery	30	2
T1036 Masquerading	stealth	40	2
T1036.001 Invalid Code Signature	stealth	0	0
T1036.002 Right-to-Left Override	stealth	3	0
T1036.003 Rename Legitimate Utilities	stealth	27	0
T1036.004 Masquerade Task or Service	stealth	3	0
T1036.005 Match Legitimate Resource Name or Location	stealth	21	1
T1036.007 Double File Extension	stealth	3	0
T1036.008 Masquerade File Type	stealth	1	0
T1036.012 Browser Fingerprint	stealth	0	0
T1039 Data from Network Shared Drive	collection	2	0
T1041 Exfiltration Over C2 Channel	exfiltration	5	12
T1046 Network Service Discovery	discovery	20	7
T1047 Windows Management Instrumentation	execution	52	2
T1048 Exfiltration Over Alternative Protocol	exfiltration	12	4
T1048.001 Exfiltration Over Symmetric Encrypted Non-C2 Protocol	exfiltration	1	0
T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	exfiltration	0	0
T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol	exfiltration	9	1
T1049 System Network Connections Discovery	discovery	9	1
T1052 Exfiltration Over Physical Medium	exfiltration	0	0
T1052.001 Exfiltration over USB	exfiltration	0	0
T1053 Scheduled Task/Job	execution, persistence, privilege escalation	12	2
T1053.002 At	execution, persistence, privilege escalation	8	0
T1053.005 Scheduled Task	execution, persistence, privilege escalation	51	2
T1055 Process Injection	stealth, privilege escalation	37	19
T1055.001 Dynamic-link Library Injection	stealth, privilege escalation	8	1
T1055.002 Portable Executable Injection	stealth, privilege escalation	0	0
T1055.003 Thread Execution Hijacking	stealth, privilege escalation	2	0
T1055.004 Asynchronous Procedure Call	stealth, privilege escalation	0	0
T1055.005 Thread Local Storage	stealth, privilege escalation	0	0
T1055.011 Extra Window Memory Injection	stealth, privilege escalation	1	0
T1055.012 Process Hollowing	stealth, privilege escalation	5	1
T1055.013 Process Doppelgänging	stealth, privilege escalation	0	0
T1055.015 ListPlanting	stealth, privilege escalation	0	0
T1056 Input Capture	collection, credential access	2	3
T1056.001 Keylogging	collection, credential access	3	1
T1056.002 GUI Input Capture	collection, credential access	3	0
T1056.003 Web Portal Capture	collection, credential access	0	0
T1056.004 Credential API Hooking	collection, credential access	0	0
T1057 Process Discovery	discovery	8	0
T1059 Command and Scripting Interpreter	execution	95	170
T1059.001 PowerShell	execution	220	1
T1059.003 Windows Command Shell	execution	46	6
T1059.005 Visual Basic	execution	29	0
T1059.006 Python	execution	13	0
T1059.007 JavaScript	execution	29	14
T1059.010 AutoHotKey & AutoIT	execution	0	0
T1059.011 Lua	execution	0	0
T1068 Exploitation for Privilege Escalation	privilege escalation	31	69
T1070 Indicator Removal	stealth	20	3
T1070.003 Clear Command History	stealth	9	0
T1070.004 File Deletion	stealth	15	5
T1070.005 Network Share Connection Removal	stealth	4	0
T1070.006 Timestomp	stealth	6	0
T1070.007 Clear Network Connection History and Configurations	stealth	0	0
T1070.008 Clear Mailbox Data	stealth	2	0
T1070.009 Clear Persistence	stealth	0	0
T1070.010 Relocate Malware	stealth	0	0
T1071 Application Layer Protocol	command and control	7	1
T1071.001 Web Protocols	command and control	42	10
T1071.002 File Transfer Protocols	command and control	0	1
T1071.003 Mail Protocols	command and control	0	0
T1071.004 DNS	command and control	17	0
T1071.005 Publish/Subscribe Protocols	command and control	0	0
T1074 Data Staged	collection	2	0
T1074.001 Local Data Staging	collection	4	0
T1074.002 Remote Data Staging	collection	0	0
T1078 Valid Accounts	stealth, persistence, privilege escalation, initial access	56	46
T1078.002 Domain Accounts	stealth, persistence, privilege escalation, initial access	7	0
T1080 Taint Shared Content	lateral movement	0	0
T1082 System Information Discovery	discovery	33	7
T1083 File and Directory Discovery	discovery	24	5
T1087 Account Discovery	discovery	16	6
T1087.001 Local Account	discovery	13	1
T1087.002 Domain Account	discovery	21	5
T1087.003 Email Account	discovery	0	0
T1090 Proxy	command and control	22	3
T1090.001 Internal Proxy	command and control	6	1
T1090.002 External Proxy	command and control	2	0
T1090.003 Multi-hop Proxy	command and control	3	0
T1090.004 Domain Fronting	command and control	1	0
T1091 Replication Through Removable Media	lateral movement, initial access	1	6
T1092 Communication Through Removable Media	command and control	0	0
T1095 Non-Application Layer Protocol	command and control	3	0
T1098 Account Manipulation	persistence, privilege escalation	34	2
T1102 Web Service	command and control	13	0
T1102.001 Dead Drop Resolver	command and control	4	0
T1102.002 Bidirectional Communication	command and control	4	0
T1102.003 One-Way Communication	command and control	2	0
T1104 Multi-Stage Channels	command and control	0	0
T1105 Ingress Tool Transfer	command and control	87	35
T1106 Native API	execution	14	7
T1110.002 Password Cracking	credential access	1	0
T1111 Multi-Factor Authentication Interception	credential access	0	0
T1112 Modify Registry	defense impairment, persistence	96	4
T1113 Screen Capture	collection	10	0
T1114 Email Collection	collection	4	3
T1114.001 Local Email Collection	collection	1	0
T1114.002 Remote Email Collection	collection	0	1
T1115 Clipboard Data	collection	8	0
T1119 Automated Collection	collection	5	1
T1120 Peripheral Device Discovery	discovery	2	0
T1123 Audio Capture	collection	6	0
T1124 System Time Discovery	discovery	3	0
T1125 Video Capture	collection	1	0
T1127 Trusted Developer Utilities Proxy Execution	stealth, execution	20	0
T1127.001 MSBuild	stealth, execution	1	0
T1127.002 ClickOnce	stealth, execution	0	0
T1127.003 JamPlus	stealth, execution	0	0
T1129 Shared Modules	execution	2	0
T1132 Data Encoding	command and control	0	0
T1132.001 Standard Encoding	command and control	4	0
T1132.002 Non-Standard Encoding	command and control	0	0
T1133 External Remote Services	persistence, initial access	20	25
T1134 Access Token Manipulation	stealth, privilege escalation	4	0
T1134.001 Token Impersonation/Theft	stealth, privilege escalation	9	1
T1134.002 Create Process with Token	stealth, privilege escalation	7	0
T1135 Network Share Discovery	discovery	7	0
T1136 Create Account	persistence	3	10
T1136.001 Local Account	persistence	18	2
T1136.002 Domain Account	persistence	6	0
T1137 Office Application Startup	persistence	9	0
T1137.001 Office Template Macros	persistence	0	0
T1137.002 Office Test	persistence	2	0
T1137.003 Outlook Forms	persistence	1	0
T1137.004 Outlook Home Page	persistence	0	0
T1137.005 Outlook Rules	persistence	0	0
T1137.006 Add-ins	persistence	4	0
T1140 Deobfuscate/Decode Files or Information	stealth	18	2
T1176 Software Extensions	persistence	1	0
T1176.001 Browser Extensions	persistence	2	0
T1176.002 IDE Extensions	persistence	0	0
T1185 Browser Session Hijacking	collection	2	3
T1187 Forced Authentication	credential access	9	0
T1189 Drive-by Compromise	initial access	3	21
T1190 Exploit Public-Facing Application	initial access	149	157
T1195 Supply Chain Compromise	initial access	1	1
T1195.001 Compromise Software Dependencies and Development Tools	initial access	2	0
T1195.002 Compromise Software Supply Chain	initial access	17	2
T1195.003 Compromise Hardware Supply Chain	initial access	0	0
T1197 BITS Jobs	stealth, persistence, execution	16	0
T1199 Trusted Relationship	initial access	2	1
T1200 Hardware Additions	initial access	3	0
T1201 Password Policy Discovery	discovery	6	0
T1202 Indirect Command Execution	stealth	40	9
T1203 Exploitation for Client Execution	execution	35	43
T1204 User Execution	execution	10	2
T1204.001 Malicious Link	execution	4	11
T1204.002 Malicious File	execution	39	33
T1204.003 Malicious Image	execution	0	0
T1204.004 Malicious Copy and Paste	execution	6	0
T1204.005 Malicious Library	execution	0	0
T1205 Traffic Signaling	stealth, persistence, command and control	0	0
T1205.001 Port Knocking	stealth, persistence, command and control	0	0
T1205.002 Socket Filters	stealth, persistence, command and control	0	0
T1210 Exploitation of Remote Services	lateral movement	15	4
T1211 Exploitation for Stealth	stealth	4	1
T1212 Exploitation for Credential Access	credential access	5	4
T1213.006 Databases	collection	0	0
T1216 System Script Proxy Execution	stealth	13	0
T1216.001 PubPrn	stealth	2	0
T1216.002 SyncAppvPublishingServer	stealth	0	0
T1217 Browser Information Discovery	discovery	4	1
T1218 System Binary Proxy Execution	stealth	153	2
T1218.001 Compiled HTML File	stealth	6	0
T1218.002 Control Panel	stealth	1	0
T1218.003 CMSTP	stealth	7	0
T1218.004 InstallUtil	stealth	0	0
T1218.005 Mshta	stealth	8	0
T1218.007 Msiexec	stealth	10	0
T1218.008 Odbcconf	stealth	8	0
T1218.009 Regsvcs/Regasm	stealth	4	0
T1218.010 Regsvr32	stealth	19	0
T1218.011 Rundll32	stealth	43	0
T1218.012 Verclsid	stealth	0	0
T1218.013 Mavinject	stealth	2	0
T1218.014 MMC	stealth	2	0
T1218.015 Electron Applications	stealth	0	0
T1219 Remote Access Tools	command and control	6	1
T1219.001 IDE Tunneling	command and control	0	0
T1219.002 Remote Desktop Software	command and control	46	0
T1220 XSL Script Processing	stealth	5	0
T1221 Template Injection	stealth	2	3
T1222 File and Directory Permissions Modification	defense impairment	2	1
T1222.001 Windows Permissions	defense impairment	5	0
T1480 Execution Guardrails	stealth	0	0
T1480.001 Environmental Keying	stealth	0	0
T1480.002 Mutual Exclusion	stealth	0	0
T1482 Domain Trust Discovery	discovery	17	2
T1484 Domain or Tenant Policy Modification	defense impairment, privilege escalation	1	0
T1484.001 Group Policy Modification	defense impairment, privilege escalation	6	1
T1484.002 Trust Modification	defense impairment, privilege escalation	2	0
T1485 Data Destruction	impact	20	6
T1486 Data Encrypted for Impact	impact	16	15
T1489 Service Stop	impact	20	1
T1490 Inhibit System Recovery	impact	27	2
T1491 Defacement	impact	0	0
T1491.001 Internal Defacement	impact	4	0
T1491.002 External Defacement	impact	0	1
T1495 Firmware Corruption	impact	1	2
T1496 Resource Hijacking	impact	13	19
T1496.001 Compute Hijacking	impact	0	0
T1496.002 Bandwidth Hijacking	impact	0	0
T1497 Virtualization/Sandbox Evasion	stealth, discovery	0	4
T1497.001 System Checks	stealth, discovery	3	0
T1497.002 User Activity Based Checks	stealth, discovery	0	0
T1497.003 Time Based Checks	stealth, discovery	0	0
T1498 Network Denial of Service	impact	3	8
T1498.001 Direct Network Flood	impact	0	1
T1498.002 Reflection Amplification	impact	0	0
T1499 Endpoint Denial of Service	impact	3	7
T1499.001 OS Exhaustion Flood	impact	1	0
T1499.002 Service Exhaustion Flood	impact	0	2
T1499.003 Application Exhaustion Flood	impact	0	0
T1499.004 Application or System Exploitation	impact	3	2
T1505 Server Software Component	persistence	1	2
T1505.001 SQL Stored Procedures	persistence	2	0
T1505.002 Transport Agent	persistence	3	0
T1505.003 Web Shell	persistence	35	26
T1505.004 IIS Components	persistence	5	0
T1505.005 Terminal Services DLL	persistence	1	0
T1518.001 Security Software Discovery	discovery	9	0
T1518.002 Backup Software Discovery	discovery	0	0
T1529 System Shutdown/Reboot	impact	8	0
T1531 Account Access Removal	impact	9	1
T1534 Internal Spearphishing	lateral movement	0	0
T1539 Steal Web Session Cookie	credential access	2	0
T1542 Pre-OS Boot	stealth, persistence	0	0
T1542.001 System Firmware	stealth, persistence	2	0
T1542.002 Component Firmware	stealth, persistence	0	0
T1542.003 Bootkit	stealth, persistence	1	0
T1543 Create or Modify System Process	persistence, privilege escalation	9	9
T1543.003 Windows Service	persistence, privilege escalation	47	0
T1546 Event Triggered Execution	privilege escalation, persistence	10	0
T1546.001 Change Default File Association	privilege escalation, persistence	5	0
T1546.002 Screensaver	privilege escalation, persistence	4	0
T1546.003 Windows Management Instrumentation Event Subscription	privilege escalation, persistence	12	0
T1546.007 Netsh Helper DLL	privilege escalation, persistence	4	0
T1546.008 Accessibility Features	privilege escalation, persistence	6	0
T1546.009 AppCert DLLs	privilege escalation, persistence	2	0
T1546.010 AppInit DLLs	privilege escalation, persistence	1	0
T1546.011 Application Shimming	privilege escalation, persistence	6	0
T1546.012 Image File Execution Options Injection	privilege escalation, persistence	2	0
T1546.013 PowerShell Profile	privilege escalation, persistence	3	0
T1546.015 Component Object Model Hijacking	privilege escalation, persistence	9	0
T1546.016 Installer Packages	privilege escalation, persistence	0	0
T1547 Boot or Logon Autostart Execution	persistence, privilege escalation	7	1
T1547.001 Registry Run Keys / Startup Folder	persistence, privilege escalation	39	1
T1547.002 Authentication Package	persistence, privilege escalation	1	0
T1547.003 Time Providers	persistence, privilege escalation	1	0
T1547.004 Winlogon Helper DLL	persistence, privilege escalation	4	0
T1547.005 Security Support Provider	persistence, privilege escalation	1	0
T1547.008 LSASS Driver	persistence, privilege escalation	1	0
T1547.009 Shortcut Modification	persistence, privilege escalation	4	1
T1547.010 Port Monitors	persistence, privilege escalation	4	0
T1547.012 Print Processors	persistence, privilege escalation	0	0
T1547.014 Active Setup	persistence, privilege escalation	1	0
T1548 Abuse Elevation Control Mechanism	privilege escalation	24	4
T1548.002 Bypass User Account Control	privilege escalation	56	1
T1550 Use Alternate Authentication Material	lateral movement	5	0
T1550.002 Pass the Hash	lateral movement	6	4
T1550.003 Pass the Ticket	lateral movement	7	0
T1552 Unsecured Credentials	credential access	13	4
T1552.001 Credentials In Files	credential access	24	3
T1552.002 Credentials in Registry	credential access	5	0
T1552.004 Private Keys	credential access	7	1
T1552.006 Group Policy Preferences	credential access	6	0
T1553 Subvert Trust Controls	defense impairment	4	0
T1553.002 Code Signing	defense impairment	1	0
T1553.003 SIP and Trust Provider Hijacking	defense impairment	2	0
T1553.004 Install Root Certificate	defense impairment	10	0
T1553.005 Mark-of-the-Web Bypass	defense impairment	6	2
T1554 Compromise Host Software Binary	persistence	6	0
T1555 Credentials from Password Stores	credential access	8	9
T1555.003 Credentials from Web Browsers	credential access	8	0
T1555.004 Windows Credential Manager	credential access	4	0
T1555.005 Password Managers	credential access	1	0
T1556 Modify Authentication Process	defense impairment, persistence, credential access	12	2
T1556.001 Domain Controller Authentication	defense impairment, persistence, credential access	0	0
T1556.002 Password Filter DLL	defense impairment, persistence, credential access	3	0
T1556.005 Reversible Encryption	defense impairment, persistence, credential access	0	0
T1556.007 Hybrid Identity	defense impairment, persistence, credential access	0	0
T1556.008 Network Provider DLL	defense impairment, persistence, credential access	0	0
T1557 Adversary-in-the-Middle	credential access, collection	10	4
T1557.002 ARP Cache Poisoning	credential access, collection	0	0
T1558 Steal or Forge Kerberos Tickets	credential access	6	3
T1558.001 Golden Ticket	credential access	1	0
T1558.002 Silver Ticket	credential access	1	0
T1558.003 Kerberoasting	credential access	18	0
T1558.004 AS-REP Roasting	credential access	0	0
T1559 Inter-Process Communication	execution	1	0
T1559.001 Component Object Model	execution	4	0
T1559.002 Dynamic Data Exchange	execution	1	0
T1560 Archive Collected Data	collection	4	0
T1560.001 Archive via Utility	collection	17	2
T1560.002 Archive via Library	collection	0	0
T1560.003 Archive via Custom Method	collection	0	0
T1561 Disk Wipe	impact	0	0
T1561.001 Disk Content Wipe	impact	1	0
T1561.002 Disk Structure Wipe	impact	1	0
T1563 Remote Service Session Hijacking	lateral movement	0	0
T1563.002 RDP Hijacking	lateral movement	2	0
T1564 Hide Artifacts	stealth	10	0
T1564.001 Hidden Files and Directories	stealth	9	0
T1564.002 Hidden Users	stealth	4	0
T1564.003 Hidden Window	stealth	8	0
T1564.004 NTFS File Attributes	stealth	23	0
T1564.005 Hidden File System	stealth	0	0
T1564.006 Run Virtual Instance	stealth	2	0
T1564.007 VBA Stomping	stealth	0	0
T1564.010 Process Argument Spoofing	stealth	0	0
T1564.011 Ignore Process Interrupts	stealth	0	0
T1564.012 File/Path Exclusions	stealth	0	0
T1565 Data Manipulation	impact	3	2
T1565.001 Stored Data Manipulation	impact	6	2
T1565.002 Transmitted Data Manipulation	impact	2	0
T1565.003 Runtime Data Manipulation	impact	0	0
T1566 Phishing	initial access	14	6
T1566.001 Spearphishing Attachment	initial access	24	7
T1566.002 Spearphishing Link	initial access	4	5
T1566.003 Spearphishing via Service	initial access	0	0
T1567 Exfiltration Over Web Service	exfiltration	12	3
T1567.001 Exfiltration to Code Repository	exfiltration	2	0
T1567.002 Exfiltration to Cloud Storage	exfiltration	14	0
T1567.003 Exfiltration to Text Storage Sites	exfiltration	0	0
T1567.004 Exfiltration Over Webhook	exfiltration	0	0
T1568 Dynamic Resolution	command and control	2	0
T1568.001 Fast Flux DNS	command and control	0	0
T1568.002 Domain Generation Algorithms	command and control	2	0
T1568.003 DNS Calculation	command and control	0	0
T1569 System Services	execution	4	0
T1569.002 Service Execution	execution	43	1
T1570 Lateral Tool Transfer	lateral movement	6	1
T1571 Non-Standard Port	command and control	5	1
T1572 Protocol Tunneling	command and control	24	0
T1573 Encrypted Channel	command and control	6	0
T1573.001 Symmetric Cryptography	command and control	0	3
T1573.002 Asymmetric Cryptography	command and control	0	0
T1574 Hijack Execution Flow	stealth, execution	8	16
T1574.001 DLL	stealth, execution	93	0
T1574.005 Executable Installer File Permissions Weakness	stealth, execution	2	0
T1574.007 Path Interception by PATH Environment Variable	stealth, execution	2	0
T1574.008 Path Interception by Search Order Hijacking	stealth, execution	2	0
T1574.009 Path Interception by Unquoted Path	stealth, execution	0	0
T1574.010 Services File Permissions Weakness	stealth, execution	0	0
T1574.011 Services Registry Permissions Weakness	stealth, execution	11	0
T1574.012 COR_PROFILER	stealth, execution	2	0
T1574.013 KernelCallbackTable	stealth, execution	0	0
T1574.014 AppDomainManager	stealth, execution	0	0
T1606 Forge Web Credentials	credential access	1	0
T1606.001 Web Cookies	credential access	0	0
T1611 Escape to Host	privilege escalation	2	3
T1614.001 System Language Discovery	discovery	2	0
T1615 Group Policy Discovery	discovery	5	0
T1620 Reflective Code Loading	stealth	3	0
T1622 Debugger Evasion	stealth, discovery	1	2
T1652 Device Driver Discovery	discovery	0	0
T1657 Financial Theft	impact	0	0
T1659 Content Injection	initial access, command and control	0	0
T1667 Email Bombing	impact	0	0
T1668 Exclusive Control	persistence	0	0
T1678 Delay Execution	stealth	0	0
T1680 Local Storage Discovery	discovery	0	0
T1684 Social Engineering	stealth	0	0
T1685 Disable or Modify Tools	defense impairment	164	0
T1685.001 Disable or Modify Windows Event Log	defense impairment	28	0
T1685.003 Modify or Spoof Tool UI	defense impairment	0	0
T1685.005 Clear Windows Event Logs	defense impairment	8	0
T1686 Disable or Modify System Firewall	defense impairment	7	0
T1686.003 Windows Host Firewall	defense impairment	20	0
T1687 Exploitation for Defense Impairment	defense impairment	0	0
T1688 Safe Mode Boot	defense impairment	0	0
T1689 Downgrade Attack	defense impairment	1	0
T1690 Prevent Command History Logging	defense impairment	1	0

KEV CVEs reachable from this source

CVE	Vendor / product	Via technique	State
CVE-2007-5659	Adobe Acrobat and Reader	T1204.002	Mapped
CVE-2008-0655	Adobe Acrobat and Reader	T1204.002	Mapped
CVE-2008-2992	Adobe Acrobat and Reader	T1204.002	Mapped
CVE-2009-1862	Adobe Acrobat and Reader, Flash Player	T1204.002	Mapped
CVE-2009-3953	Adobe Acrobat and Reader	T1204.002	Mapped
CVE-2009-3960	Adobe BlazeDS	T1190 T1486	Mapped
CVE-2009-4324	Adobe Acrobat and Reader	T1071.001 T1204.002	Mapped
CVE-2010-0188	Adobe Reader and Acrobat	T1105 T1189	Mapped
CVE-2010-1297	Adobe Flash Player	T1105 T1189 T1204.002	Mapped
CVE-2010-2861	Adobe ColdFusion	T1105 T1119 T1190	Mapped
CVE-2010-2883	Adobe Acrobat and Reader	T1027 T1059 T1204.002	Mapped
CVE-2011-0611	Adobe Flash Player	T1105 T1204.002	Mapped
CVE-2011-2462	Adobe Reader and Acrobat	T1204.002	Mapped
CVE-2012-0754	Adobe Flash Player	T1105 T1204.002	Mapped
CVE-2012-0767	Adobe Flash Player	T1098 T1114.002 T1185 T1204.001	Mapped
CVE-2012-1535	Adobe Flash Player	T1105 T1204.002	Mapped
CVE-2012-2034	Adobe Flash Player	T1189	Mapped
CVE-2012-5054	Adobe Flash Player	T1189	Mapped
CVE-2013-0625	Adobe ColdFusion	T1190	Mapped
CVE-2013-0629	Adobe ColdFusion	T1005 T1190 T1202	Mapped
CVE-2013-0631	Adobe ColdFusion	T1190	Mapped
CVE-2013-0632	Adobe ColdFusion	T1190	Mapped
CVE-2013-0640	Adobe Reader and Acrobat	T1566.001	Mapped
CVE-2013-0641	Adobe Reader	T1048 T1105 T1204.002	Mapped
CVE-2013-3346	Adobe Reader and Acrobat	T1059.007	Mapped
CVE-2014-0496	Adobe Reader and Acrobat	T1204.002	Mapped
CVE-2014-0546	Adobe Reader and Acrobat	T1068 T1497	Mapped
CVE-2014-6271	GNU Bourne-Again Shell (Bash)	T1133 T1190	Mapped
CVE-2014-7169	GNU Bourne-Again Shell (Bash)	T1133 T1190	Mapped
CVE-2014-8439	Adobe Flash Player	T1189	Mapped
CVE-2015-0310	Adobe Flash Player	T1189	Mapped
CVE-2015-0313	Adobe Flash Player	T1189	Mapped
CVE-2015-3043	Adobe Flash Player	T1189 T1204.002 T1499.004	Mapped
CVE-2015-3113	Adobe Flash Player	T1071.001 T1204.002 T1497 T1622	Mapped
CVE-2015-5119	Adobe Flash Player	T1055.001 T1059.007 T1071.001 T1105 T1203 T1204.001 T1566.002	Mapped
CVE-2015-7645	Adobe Flash Player	T1204.002	Mapped
CVE-2015-8651	Adobe Flash Player	T1105 T1189 T1486	Mapped
CVE-2016-0984	Adobe Flash Player and AIR	T1105 T1204.002	Mapped
CVE-2016-10033	PHP PHPMailer	T1190	Mapped
CVE-2016-1010	Adobe Flash Player and AIR	T1574	Mapped
CVE-2016-1019	Adobe Flash Player	T1105 T1189 T1486	Mapped
CVE-2016-4117	Adobe Flash Player	T1105 T1204.002	Mapped
CVE-2016-4437	Apache Shiro	T1059 T1190	Mapped
CVE-2016-7855	Adobe Flash Player	T1189	Mapped
CVE-2017-11292	Adobe Flash Player	T1005 T1105 T1204.002 T1566.001	Mapped
CVE-2017-11882	Microsoft Office	T1059 T1566.001	Mapped
CVE-2017-12637	SAP NetWeaver	T1083 T1190 T1555	Mapped
CVE-2017-5638	Apache Struts	T1005 T1059 T1190	Mapped
CVE-2017-6742	Cisco IOS and IOS XE Software	T1048 T1059 T1574	Mapped
CVE-2017-9805	Apache Struts	T1059 T1190	Mapped
CVE-2017-9822	DotNetNuke (DNN) DotNetNuke (DNN)	T1059 T1190 T1496	Mapped
CVE-2018-0296	Cisco Adaptive Security Appliance (ASA)	T1005 T1202	Mapped
CVE-2018-11776	Apache Struts	T1059 T1190 T1496	Mapped
CVE-2018-13379	Fortinet FortiOS	T1190	Mapped
CVE-2018-15961	Adobe ColdFusion	T1190 T1491.002	Mapped
CVE-2018-15982	Adobe Flash Player	T1105 T1204.002	Mapped
CVE-2018-4878	Adobe Flash Player	T1041 T1204.002 T1219	Mapped
CVE-2018-4939	Adobe ColdFusion	T1133 T1190 T1203	Mapped
CVE-2018-4990	Adobe Acrobat and Reader	T1059.007 T1204.002	Mapped
CVE-2018-6789	Exim Exim	T1059 T1190	Mapped
CVE-2018-7600	Drupal Drupal Core	T1059 T1190 T1485 T1496	Mapped
CVE-2019-0211	Apache HTTP Server	T1068	Mapped
CVE-2019-0604	Microsoft SharePoint	T1003 T1041 T1190 T1505.003	Mapped
CVE-2019-0708	Microsoft Remote Desktop Services	T1133 T1498	Mapped
CVE-2019-11510	Ivanti Pulse Connect Secure	T1059 T1083 T1133 T1552.001	Mapped
CVE-2019-11580	Atlassian Crowd and Crowd Data Center	T1059	Mapped
CVE-2019-11634	Citrix Workspace Application and Receiver for Windows	T1003 T1005 T1046 T1059 T1078 T1190 T1486	Mapped
CVE-2019-13608	Citrix StoreFront Server	T1003 T1005 T1046 T1059 T1078	Mapped
CVE-2019-1653	Cisco Small Business RV320 and RV325 Routers	T1005 T1082 T1190	Mapped
CVE-2019-17558	Apache Solr	T1059 T1190	Mapped
CVE-2019-18935	Progress Telerik UI for ASP.NET AJAX	T1041 T1190 T1496 T1505.003	Mapped
CVE-2019-19781	Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance	T1059 T1083 T1133	Mapped
CVE-2019-3396	Atlassian Confluence Server and Data Server	T1090 T1133 T1202	Mapped
CVE-2019-3398	Atlassian Confluence Server and Data Center	T1059 T1202	Mapped
CVE-2019-5591	Fortinet FortiOS	T1005 T1133 T1557	Mapped
CVE-2020-0069	MediaTek Multiple Chipsets	T1068	Mapped
CVE-2020-0688	Microsoft Exchange Server	T1114 T1190 T1505.003	Mapped
CVE-2020-0787	Microsoft Windows	T1059 T1068	Mapped
CVE-2020-12812	Fortinet FortiOS	T1556	Mapped
CVE-2020-1472	Microsoft Netlogon	T1021 T1068 T1087.002 T1133 T1486	Mapped
CVE-2020-15505	Ivanti MobileIron Multiple Products	T1059 T1190	Mapped
CVE-2020-17530	Apache Struts	T1059 T1190	Mapped
CVE-2020-25506	D-Link DNS-320 Device	T1059 T1133	Mapped
CVE-2020-29557	D-Link DIR-825 R1 Devices	T1059 T1190	Mapped
CVE-2020-29574	Sophos CyberoamOS	T1055 T1059	Mapped
CVE-2020-3452	Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	T1005 T1202	Mapped
CVE-2020-3580	Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	T1059 T1204.001 T1217	Mapped
CVE-2020-5735	Amcrest Cameras and Network Video Recorder (NVR)	T1499 T1574	Mapped
CVE-2020-5902	F5 BIG-IP	T1003 T1005 T1059 T1070.004 T1133 T1190 T1552	Stale
CVE-2020-8193	Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance	T1005 T1556	Mapped
CVE-2020-8195	Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance	T1005 T1056 T1082	Mapped
CVE-2020-8196	Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance	T1005 T1056 T1082	Mapped
CVE-2020-8515	DrayTek Multiple Vigor Routers	T1059 T1133 T1496	Mapped
CVE-2020-8657	EyesOfNetwork EyesOfNetwork	T1106	Mapped
CVE-2021-1497	Cisco HyperFlex HX	T1059 T1133	Mapped
CVE-2021-1498	Cisco HyperFlex HX	T1059 T1133	Mapped
CVE-2021-20035	SonicWall SMA100 Appliances	T1059 T1078	Mapped
CVE-2021-21017	Adobe Acrobat and Reader	T1204.002	Mapped
CVE-2021-21148	Google Chromium V8	T1059.007 T1203	Mapped
CVE-2021-21166	Google Chromium	T1059.007 T1203	Mapped
CVE-2021-21206	Google Chromium Blink	T1059.007 T1203	Mapped
CVE-2021-21972	VMware vCenter Server	T1059 T1190	Mapped
CVE-2021-21973	VMware vCenter Server and Cloud Foundation	T1046 T1190	Mapped
CVE-2021-21975	VMware vRealize Operations Manager API	T1190	Mapped
CVE-2021-22005	VMware vCenter Server	T1059 T1190	Mapped
CVE-2021-22017	VMware vCenter Server	T1090.001 T1190	Mapped
CVE-2021-22204	Perl Exiftool	T1059 T1190	Mapped
CVE-2021-22205	GitLab Community and Enterprise Editions	T1059 T1190 T1496 T1498	Mapped
CVE-2021-22893	Ivanti Pulse Connect Secure	T1003 T1059 T1190	Mapped
CVE-2021-22894	Ivanti Pulse Connect Secure	T1059 T1078	Mapped
CVE-2021-22899	Ivanti Pulse Connect Secure	T1059.003 T1078	Mapped
CVE-2021-22900	Ivanti Pulse Connect Secure	T1059 T1068	Mapped
CVE-2021-22986	F5 BIG-IP and BIG-IQ Centralized Management	T1059 T1090 T1133 T1190 T1485	Mapped
CVE-2021-26084	Atlassian Confluence Server and Data Center	T1059 T1496	Mapped
CVE-2021-26085	Atlassian Confluence Server	T1005 T1190	Mapped
CVE-2021-26855	Microsoft Exchange Server	T1005 T1090 T1133 T1505.003	Mapped
CVE-2021-26857	Microsoft Exchange Server	T1133 T1505.003	Mapped
CVE-2021-26858	Microsoft Exchange Server	T1190 T1505.003	Mapped
CVE-2021-27059	Microsoft Office	T1203	Mapped
CVE-2021-27065	Microsoft Exchange Server	T1190 T1505.003	Mapped
CVE-2021-27101	Accellion FTA	T1005 T1059	Mapped
CVE-2021-27102	Accellion FTA	T1005 T1059 T1190	Mapped
CVE-2021-27103	Accellion FTA	T1005 T1190	Mapped
CVE-2021-27104	Accellion FTA	T1005 T1059 T1190	Mapped
CVE-2021-27860	FatPipe WARP, IPVPN, and MPVPN software	T1190 T1505.003	Mapped
CVE-2021-28550	Adobe Acrobat and Reader	T1204.002	Mapped
CVE-2021-29256	Arm Mali Graphics Processing Unit (GPU)	T1005 T1068 T1203	Mapped
CVE-2021-30554	Google Chromium WebGL	T1059.007 T1203	Mapped
CVE-2021-31166	Microsoft HTTP Protocol Stack	T1059 T1190	Mapped
CVE-2021-31207	Microsoft Exchange Server	T1548.002 T1565	Mapped
CVE-2021-3129	Laravel Ignition	T1059 T1190	Mapped
CVE-2021-32030	ASUS Routers	T1068 T1098	Mapped
CVE-2021-33739	Microsoft Windows	T1068	Mapped
CVE-2021-34473	Microsoft Exchange Server	T1048.003 T1053.005 T1136 T1190 T1486	Mapped
CVE-2021-34523	Microsoft Exchange Server	T1190	Mapped
CVE-2021-35394	Realtek Jungle Software Development Kit (SDK)	T1059 T1071.001 T1105 T1190 T1496 T1499 T1569.002	Mapped
CVE-2021-35464	ForgeRock Access Management (AM)	T1059 T1190	Mapped
CVE-2021-36380	Sunhillo SureLine	T1190	Mapped
CVE-2021-36934	Microsoft Windows	T1068 T1078	Mapped
CVE-2021-37415	Zoho ManageEngine ServiceDesk Plus (SDP)	T1190	Mapped
CVE-2021-37975	Google Chromium V8	T1059.007 T1203	Mapped
CVE-2021-39144	XStream XStream	T1190 T1203	Mapped
CVE-2021-39226	Grafana Labs Grafana	T1190 T1485	Mapped
CVE-2021-4034	Red Hat Polkit	T1068	Mapped
CVE-2021-40449	Microsoft Windows	T1016 T1027 T1059.003 T1068 T1071.001 T1082 T1566 T1573.001	Mapped
CVE-2021-40539	Zoho ManageEngine	T1003 T1003.003 T1027 T1047 T1070.004 T1087.002 T1136 T1140 T1190 T1218 T1505.003 T1560.001 T1573.001	Mapped
CVE-2021-40655	D-Link DIR-605 Router	T1190	Mapped
CVE-2021-41379	Microsoft Windows	T1068 T1078	Mapped
CVE-2021-41773	Apache HTTP Server	T1059 T1210	Mapped
CVE-2021-42013	Apache HTTP Server	T1059 T1210	Mapped
CVE-2021-42237	Sitecore XP	T1059	Mapped
CVE-2021-42258	BQE BillQuick Web Suite	T1059 T1486	Mapped
CVE-2021-42321	Microsoft Exchange	T1059 T1078	Mapped
CVE-2021-44077	Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus	T1003 T1003.003 T1027 T1047 T1070.004 T1087.002 T1136 T1140 T1190 T1218 T1505.003 T1560.001 T1573.001	Mapped
CVE-2021-44228	Apache Log4j2	T1190 T1486 T1496 T1505.003	Mapped
CVE-2021-44515	Zoho Desktop Central	T1003 T1087 T1105 T1190	Mapped
CVE-2021-44529	Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)	T1190 T1195.002	Mapped
CVE-2021-45046	Apache Log4j2	T1059 T1486	Mapped
CVE-2021-45382	D-Link Multiple Routers	T1059 T1070 T1071 T1190 T1499.002 T1543	Mapped
CVE-2022-0028	Palo Alto Networks PAN-OS	T1190 T1498	Mapped
CVE-2022-1040	Sophos Firewall	T1059 T1078 T1190 T1557 T1574	Mapped
CVE-2022-1388	F5 BIG-IP	T1548	Mapped
CVE-2022-20699	Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers	T1133	Mapped
CVE-2022-20700	Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers	T1190	Mapped
CVE-2022-20701	Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers	T1078 T1203	Mapped
CVE-2022-20703	Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers	T1203	Mapped
CVE-2022-20708	Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers	T1068 T1190	Mapped
CVE-2022-20821	Cisco IOS XR	T1190	Mapped
CVE-2022-21919	Microsoft Windows	T1068 T1078	Mapped
CVE-2022-21971	Microsoft Windows	T1059 T1204.001	Mapped
CVE-2022-21999	Microsoft Windows	T1059 T1068 T1078 T1136.001 T1211	Mapped
CVE-2022-22047	Microsoft Windows	T1059 T1068 T1078 T1547.001	Mapped
CVE-2022-22718	Microsoft Windows	T1068 T1078	Mapped
CVE-2022-22947	VMware Spring Cloud Gateway	T1059 T1190 T1486	Mapped
CVE-2022-22948	VMware vCenter Server	T1068 T1078 T1212	Mapped
CVE-2022-22954	VMware Workspace ONE Access and Identity Manager	T1221 T1505.003	Mapped
CVE-2022-22960	VMware Multiple Products	T1222	Mapped
CVE-2022-22963	VMware Tanzu Spring Cloud	T1059.007 T1190 T1505.003	Mapped
CVE-2022-22965	VMware Spring Framework	T1059 T1190	Mapped
CVE-2022-23131	Zabbix Frontend	T1059 T1078 T1190 T1548	Mapped
CVE-2022-23748	Audinate Dante Discovery	T1059 T1203	Mapped
CVE-2022-24086	Adobe Commerce and Magento Open Source	T1027 T1190	Mapped
CVE-2022-24521	Microsoft Windows	T1059 T1068 T1078	Mapped
CVE-2022-24682	Synacor Zimbra Collaborate Suite (ZCS)	T1059.007 T1185 T1204.001	Mapped
CVE-2022-26134	Atlassian Confluence Server/Data Center	T1190	Mapped
CVE-2022-26138	Atlassian Confluence	T1552.001	Mapped
CVE-2022-26258	D-Link DIR-820L	T1059 T1190 T1499.002	Mapped
CVE-2022-26500	Veeam Backup & Replication	T1036 T1048 T1059 T1078 T1190	Mapped
CVE-2022-26501	Veeam Backup & Replication	T1036 T1048 T1059 T1190	Mapped
CVE-2022-26904	Microsoft Windows	T1068 T1078	Mapped
CVE-2022-28810	Zoho ManageEngine	T1190	Mapped
CVE-2022-29303	SolarView Compact	T1059 T1496 T1505	Mapped
CVE-2022-29464	WSO2 Multiple Products	T1190 T1202 T1496	Mapped
CVE-2022-30190	Microsoft Windows	T1105 T1204.002	Mapped
CVE-2022-3038	Google Chromium Network Service	T1204.001 T1574	Mapped
CVE-2022-3075	Google Chromium Mojo	T1204.001	Mapped
CVE-2022-34713	Microsoft Windows	T1059 T1204.002 T1566	Mapped
CVE-2022-35405	Zoho ManageEngine	T1059	Mapped
CVE-2022-35914	Teclib GLPI	T1059 T1190	Mapped
CVE-2022-36804	Atlassian Bitbucket Server and Data Center	T1059 T1190	Mapped
CVE-2022-37969	Microsoft Windows	T1059 T1068 T1078	Mapped
CVE-2022-39197	Fortra Cobalt Strike	T1059 T1190	Mapped
CVE-2022-40684	Fortinet Multiple Products	T1190	Mapped
CVE-2022-41033	Microsoft Windows COM+ Event System Service	T1068 T1566.001	Mapped
CVE-2022-41073	Microsoft Windows	T1068 T1078 T1574	Mapped
CVE-2022-41082	Microsoft Exchange Server	T1059.001 T1078 T1087 T1482 T1505.003 T1567	Mapped
CVE-2022-41125	Microsoft Windows	T1059 T1068 T1078	Mapped
CVE-2022-41128	Microsoft Windows	T1070 T1203 T1566	Mapped
CVE-2022-41328	Fortinet FortiOS	T1049 T1565.001 T1574	Mapped
CVE-2022-42475	Fortinet FortiOS	T1071.001 T1190 T1574 T1622	Mapped
CVE-2022-42948	Fortra Cobalt Strike	T1059 T1190	Mapped
CVE-2022-43769	Hitachi Vantara Pentaho Business Analytics (BA) Server	T1059 T1203	Mapped
CVE-2022-43939	Hitachi Vantara Pentaho Business Analytics (BA) Server	T1059 T1190	Mapped
CVE-2022-47966	Zoho ManageEngine	T1068 T1136.001 T1190	Mapped
CVE-2023-0386	Linux Kernel	T1055.012 T1543	Stale
CVE-2023-0669	Fortra GoAnywhere MFT	T1190 T1210 T1486	Mapped
CVE-2023-1389	TP-Link Archer AX21	T1041 T1070 T1106 T1496 T1498	Mapped
CVE-2023-20109	Cisco IOS and IOS XE	T1059 T1078 T1499	Mapped
CVE-2023-20118	Cisco Small Business RV Series Routers	T1059 T1068 T1078 T1505.003	Mapped
CVE-2023-20198	Cisco IOS XE Web UI	T1136 T1190	Mapped
CVE-2023-20269	Cisco Adaptive Security Appliance and Firepower Threat Defense	T1078 T1133	Mapped
CVE-2023-20273	Cisco Cisco IOS XE Web UI	T1059 T1068 T1078	Mapped
CVE-2023-20867	VMware Tools	T1059 T1078 T1105	Mapped
CVE-2023-20887	VMware Aria Operations for Networks	T1059 T1190	Mapped
CVE-2023-2136	Google Chromium Skia	T1204.001	Mapped
CVE-2023-21608	Adobe Acrobat and Reader	T1203 T1204.002	Mapped
CVE-2023-21674	Microsoft Windows	T1068 T1078	Mapped
CVE-2023-21715	Microsoft Office	T1204.002	Mapped
CVE-2023-22515	Atlassian Confluence Data Center and Server	T1059 T1059.007 T1078 T1136 T1190	Mapped
CVE-2023-22518	Atlassian Confluence Data Center and Server	T1033 T1105 T1190	Mapped
CVE-2023-22527	Atlassian Confluence Data Center and Server	T1221 T1496	Mapped
CVE-2023-22952	SugarCRM Multiple Products	T1021.001 T1059 T1070.004 T1078 T1083 T1190 T1482 T1505.003	Stale
CVE-2023-23397	Microsoft Office	T1078 T1203 T1550.002	Mapped
CVE-2023-2533	PaperCut NG/MF	T1059 T1547 T1566.002	Mapped
CVE-2023-26359	Adobe ColdFusion	T1059 T1190	Mapped
CVE-2023-26360	Adobe ColdFusion	T1003.001 T1036.005 T1046 T1059.007 T1071.001 T1105 T1190 T1484.001 T1505.003	Mapped
CVE-2023-26369	Adobe Acrobat and Reader	T1203 T1204.002	Mapped
CVE-2023-27350	PaperCut MF/NG	T1059 T1105 T1190	Mapped
CVE-2023-27524	Apache Superset	T1078 T1190	Mapped
CVE-2023-27532	Veeam Backup & Replication	T1059.003 T1087 T1087.001 T1133 T1486 T1555	Mapped
CVE-2023-27997	Fortinet FortiOS and FortiProxy SSL-VPN	T1136 T1190 T1574	Mapped
CVE-2023-28229	Microsoft Windows CNG Key Isolation Service	T1068 T1078	Mapped
CVE-2023-28252	Microsoft Windows	T1003 T1021 T1059 T1068 T1078 T1136 T1486	Mapped
CVE-2023-2868	Barracuda Networks Email Security Gateway (ESG) Appliance	T1041 T1059 T1105 T1566.001	Mapped
CVE-2023-29298	Adobe ColdFusion	T1190	Mapped
CVE-2023-29300	Adobe ColdFusion	T1105 T1190	Mapped
CVE-2023-29492	Novi Survey Novi Survey	T1190	Mapped
CVE-2023-32315	Ignite Realtime Openfire	T1087.002 T1202 T1496 T1505.003	Mapped
CVE-2023-33246	Apache RocketMQ	T1059 T1190	Mapped
CVE-2023-33538	TP-Link Multiple Routers	T1059 T1068	Mapped
CVE-2023-34048	VMware vCenter Server	T1203	Mapped
CVE-2023-34192	Synacor Zimbra Collaboration Suite (ZCS)	T1055 T1059 T1185	Mapped
CVE-2023-34362	Progress MOVEit Transfer	T1005 T1059 T1082 T1105 T1136 T1190 T1531	Mapped
CVE-2023-35078	Ivanti Endpoint Manager Mobile (EPMM)	T1136 T1190	Mapped
CVE-2023-35081	Ivanti Endpoint Manager Mobile (EPMM)	T1059 T1190	Mapped
CVE-2023-3519	Citrix NetScaler ADC and NetScaler Gateway	T1087.002 T1105 T1190 T1574	Mapped
CVE-2023-36844	Juniper Junos OS	T1190 T1203	Mapped
CVE-2023-36845	Juniper Junos OS	T1059 T1190	Mapped
CVE-2023-36846	Juniper Junos OS	T1059 T1190	Mapped
CVE-2023-36847	Juniper Junos OS	T1059 T1190	Mapped
CVE-2023-36851	Juniper Junos OS	T1059 T1190	Mapped
CVE-2023-36884	Microsoft Windows	T1005 T1204.002 T1486 T1489 T1490 T1553.005 T1566	Stale
CVE-2023-38035	Ivanti Sentry	T1018 T1046 T1059 T1071.001 T1105 T1190 T1496 T1571	Mapped
CVE-2023-38203	Adobe ColdFusion	T1105 T1190	Mapped
CVE-2023-38205	Adobe ColdFusion	T1190	Mapped
CVE-2023-38831	RARLAB WinRAR	T1005 T1041 T1053 T1105 T1112 T1204 T1486	Mapped
CVE-2023-38950	ZKTeco BioTime	T1005 T1190	Mapped
CVE-2023-39780	ASUS RT-AX55 Routers	T1078 T1133	Mapped
CVE-2023-40044	Progress WS_FTP Server	T1059 T1071.002 T1202	Mapped
CVE-2023-41179	Trend Micro Apex One and Worry-Free Business Security	T1059 T1078	Mapped
CVE-2023-42793	JetBrains TeamCity	T1059.003 T1190	Mapped
CVE-2023-43770	Roundcube Webmail	T1059 T1082 T1189	Mapped
CVE-2023-44221	SonicWall SMA100 Appliances	T1068 T1543 T1548	Mapped
CVE-2023-44487	IETF HTTP/2	T1190 T1499	Mapped
CVE-2023-46604	Apache ActiveMQ	T1053.005 T1190	Mapped
CVE-2023-46805	Ivanti Connect Secure and Policy Secure	T1078 T1190 T1505.003 T1555	Mapped
CVE-2023-47565	QNAP VioStor NVR	T1203 T1496 T1498	Mapped
CVE-2023-48365	Qlik Sense	T1059 T1133 T1190	Mapped
CVE-2023-48788	Fortinet FortiClient EMS	T1059 T1105 T1190	Mapped
CVE-2023-49103	ownCloud ownCloud graphapi	T1005 T1190 T1552	Mapped
CVE-2023-4966	Citrix NetScaler ADC and NetScaler Gateway	T1005 T1134.001 T1574	Mapped
CVE-2023-49897	FXC AE1021, AE1021PE	T1203 T1496 T1498	Mapped
CVE-2023-5217	Google Chromium libvpx	T1204.001 T1574	Mapped
CVE-2023-5631	Roundcube Webmail	T1041 T1059.007 T1204.001	Mapped
CVE-2023-6548	Citrix NetScaler ADC and NetScaler Gateway	T1055	Mapped
CVE-2023-6549	Citrix NetScaler ADC and NetScaler Gateway	T1499 T1574	Mapped
CVE-2023-7024	Google Chromium WebRTC	T1189 T1574	Mapped
CVE-2023-7101	Spreadsheet::ParseExcel Spreadsheet::ParseExcel	T1059 T1105 T1190	Mapped
CVE-2024-0769	D-Link DIR-859 Router	T1005 T1190	Mapped
CVE-2024-11120	GeoVision Multiple Devices	T1133 T1203 T1498	Mapped
CVE-2024-11182	MDaemon Email Server	T1059 T1566 T1567	Mapped
CVE-2024-12686	BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)	T1059 T1068	Mapped
CVE-2024-12987	DrayTek Vigor Routers	T1059 T1068	Mapped
CVE-2024-13159	Ivanti Endpoint Manager (EPM)	T1087 T1190 T1550.002 T1558	Mapped
CVE-2024-13160	Ivanti Endpoint Manager (EPM)	T1087 T1190 T1550.002 T1558	Mapped
CVE-2024-13161	Ivanti Endpoint Manager (EPM)	T1087 T1190 T1550.002 T1558	Mapped
CVE-2024-20353	Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	T1190	Mapped
CVE-2024-20359	Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)	T1059 T1078	Mapped
CVE-2024-20399	Cisco NX-OS	T1059 T1078	Mapped
CVE-2024-20439	Cisco Smart Licensing Utility	T1106 T1552	Mapped
CVE-2024-20953	Oracle Agile Product Lifecycle Management (PLM)	T1059 T1190	Mapped
CVE-2024-21413	Microsoft Office Outlook	T1059 T1566.002	Mapped
CVE-2024-21762	Fortinet FortiOS	T1190 T1547.009 T1574	Mapped
CVE-2024-21887	Ivanti Connect Secure and Policy Secure	T1059 T1190 T1505.003 T1552	Mapped
CVE-2024-21893	Ivanti Connect Secure, Policy Secure, and Neurons	T1078 T1190 T1505.003 T1555	Mapped
CVE-2024-23692	Rejetto HTTP File Server	T1005 T1082 T1105 T1221 T1496	Mapped
CVE-2024-24919	Check Point Quantum Security Gateways	T1003.003 T1005 T1202	Mapped
CVE-2024-26169	Microsoft Windows	T1059 T1112 T1203	Mapped
CVE-2024-27198	JetBrains TeamCity	T1059 T1190	Mapped
CVE-2024-27443	Synacor Zimbra Collaboration Suite (ZCS)	T1041 T1114 T1566.002	Mapped
CVE-2024-29059	Microsoft .NET Framework	T1059 T1068	Mapped
CVE-2024-30051	Microsoft DWM Core Library	T1068	Mapped
CVE-2024-34102	Adobe Commerce and Magento Open Source	T1005 T1059 T1190	Mapped
CVE-2024-37085	VMware ESXi	T1068 T1078	Mapped
CVE-2024-38080	Microsoft Windows	T1068 T1204.002	Mapped
CVE-2024-38112	Microsoft Windows	T1189 T1204.001	Mapped
CVE-2024-38475	Apache HTTP Server	T1005 T1059 T1190	Mapped
CVE-2024-40890	Zyxel DSL CPE Devices	T1011 T1055	Mapped
CVE-2024-40891	Zyxel DSL CPE Devices	T1011 T1055	Mapped
CVE-2024-41710	Mitel SIP Phones	T1059 T1068	Mapped
CVE-2024-41713	Mitel MiCollab	T1005 T1068	Mapped
CVE-2024-42009	Roundcube Webmail	T1056 T1114 T1566.002	Mapped
CVE-2024-4358	Progress Telerik Report Server	T1190	Mapped
CVE-2024-45195	Apache OFBiz	T1059 T1133 T1203 T1498.001	Mapped
CVE-2024-4577	PHP Group PHP	T1003 T1003.001 T1033 T1041 T1053 T1059 T1068 T1071.001 T1112 T1190 T1543 T1570	Mapped
CVE-2024-4671	Google Chromium	T1059 T1189	Mapped
CVE-2024-4761	Google Chromium V8	T1059	Mapped
CVE-2024-48248	NAKIVO Backup and Replication	T1003 T1005 T1190	Mapped
CVE-2024-4879	ServiceNow Utah, Vancouver, and Washington DC Now Platform	T1005 T1059 T1190	Mapped
CVE-2024-4885	Progress WhatsUp Gold	T1059 T1068	Mapped
CVE-2024-49035	Microsoft Partner Center	T1068 T1195	Mapped
CVE-2024-4947	Google Chromium V8	T1059 T1189	Mapped
CVE-2024-4978	Justice AV Solutions Viewer	T1005 T1071.001 T1105 T1195.002	Mapped
CVE-2024-50302	Linux Kernel	T1005 T1011 T1091	Mapped
CVE-2024-50603	Aviatrix Controllers	T1055 T1059	Mapped
CVE-2024-5217	ServiceNow Utah, Vancouver, and Washington DC Now Platform	T1005 T1059	Mapped
CVE-2024-5274	Google Chromium V8	T1189 T1203	Mapped
CVE-2024-53104	Linux Kernel	T1059 T1068 T1091	Mapped
CVE-2024-53150	Linux Kernel	T1005 T1011 T1091	Mapped
CVE-2024-53197	Linux Kernel	T1059 T1068 T1091	Mapped
CVE-2024-53704	SonicWall SonicOS	T1021.001 T1083 T1199 T1212	Mapped
CVE-2024-54085	AMI MegaRAC SPx	T1068 T1210 T1495 T1499	Mapped
CVE-2024-55550	Mitel MiCollab	T1005 T1041 T1190	Mapped
CVE-2024-55591	Fortinet FortiOS and FortiProxy	T1021 T1068 T1078 T1555	Mapped
CVE-2024-56145	Craft CMS Craft CMS	T1055 T1059	Mapped
CVE-2024-57727	SimpleHelp SimpleHelp	T1003 T1059 T1190 T1552.001 T1552.004	Mapped
CVE-2024-57968	Advantive VeraCore	T1059 T1078	Mapped
CVE-2024-58136	Yiiframework Yii	T1055 T1059	Mapped
CVE-2024-6047	GeoVision Multiple Devices	T1055 T1059	Mapped
CVE-2025-0108	Palo Alto Networks PAN-OS	T1055 T1190 T1565.001	Mapped
CVE-2025-0111	Palo Alto Networks PAN-OS	T1005 T1068	Mapped
CVE-2025-0282	Ivanti Connect Secure, Policy Secure, and ZTA Gateways	T1003 T1018 T1046 T1055 T1190	Mapped
CVE-2025-0411	7-Zip 7-Zip	T1553.005 T1566.001	Mapped
CVE-2025-0994	Trimble Cityworks	T1059 T1068	Mapped
CVE-2025-1316	Edimax IC-7100 IP Camera	T1055 T1190	Mapped
CVE-2025-1976	Broadcom Brocade Fabric OS	T1059 T1068	Mapped
CVE-2025-20281	Cisco Identity Services Engine	T1059 T1106	Mapped
CVE-2025-20337	Cisco Identity Services Engine	T1059 T1106	Mapped
CVE-2025-21333	Microsoft Windows	T1003 T1068	Mapped
CVE-2025-21334	Microsoft Windows	T1003 T1068	Mapped
CVE-2025-21335	Microsoft Windows	T1003 T1068	Mapped
CVE-2025-21391	Microsoft Windows	T1068 T1485 T1490	Mapped
CVE-2025-21418	Microsoft Windows	T1005 T1055 T1068	Mapped
CVE-2025-21480	Qualcomm Multiple Chipsets	T1055 T1495	Mapped
CVE-2025-21590	Juniper Junos OS	T1059 T1068	Mapped
CVE-2025-22224	VMware ESXi and Workstation	T1055 T1611	Mapped
CVE-2025-22225	VMware ESXi	T1068 T1611	Mapped
CVE-2025-22226	VMware ESXi, Workstation, and Fusion	T1005 T1611	Mapped
CVE-2025-22457	Ivanti Connect Secure, Policy Secure, and ZTA Gateways	T1059 T1190	Mapped
CVE-2025-23006	SonicWall SMA1000 Appliances	T1059 T1190	Mapped
CVE-2025-24016	Wazuh Wazuh Server	T1059 T1078 T1203	Mapped
CVE-2025-24054	Microsoft Windows	T1555 T1566	Mapped
CVE-2025-24085	Apple Multiple Products	T1059 T1068	Mapped
CVE-2025-24201	Apple Multiple Products	T1059 T1189	Mapped
CVE-2025-24985	Microsoft Windows	T1059 T1091	Mapped
CVE-2025-24991	Microsoft Windows	T1005 T1091	Mapped
CVE-2025-24993	Microsoft Windows	T1055 T1068 T1203 T1204 T1565	Mapped
CVE-2025-25181	Advantive VeraCore	T1055 T1068 T1485	Mapped
CVE-2025-25257	Fortinet FortiWeb	T1055 T1068 T1190 T1485	Mapped
CVE-2025-27038	Qualcomm Multiple Chipsets	T1059 T1203	Mapped
CVE-2025-27363	FreeType FreeType	T1204.002 T1499.004 T1574	Mapped
CVE-2025-2783	Google Chromium Mojo	T1203 T1497 T1548	Mapped
CVE-2025-30397	Microsoft Windows	T1059 T1203	Mapped
CVE-2025-30400	Microsoft Windows	T1068 T1112	Mapped
CVE-2025-30406	Gladinet CentreStack	T1059 T1203	Mapped
CVE-2025-31161	CrushFTP CrushFTP	T1059 T1078 T1136	Mapped
CVE-2025-31200	Apple Multiple Products	T1059 T1105 T1106 T1203 T1557	Stale
CVE-2025-31201	Apple Multiple Products	T1059 T1105 T1106 T1203 T1557	Stale
CVE-2025-31324	SAP NetWeaver	T1055 T1059 T1505.003	Mapped
CVE-2025-32433	Erlang Erlang/OTP	T1059	Mapped
CVE-2025-3248	Langflow Langflow	T1059 T1203	Mapped
CVE-2025-32701	Microsoft Windows	T1003.001 T1059 T1068 T1543	Mapped
CVE-2025-32706	Microsoft Windows	T1003.001 T1059 T1068 T1543	Mapped
CVE-2025-32709	Microsoft Windows	T1003 T1059 T1068 T1543	Mapped
CVE-2025-32756	Fortinet Multiple Products	T1003 T1041 T1046 T1059 T1070.004 T1133	Mapped
CVE-2025-33053	Microsoft Windows	T1041 T1056.001 T1059 T1543 T1566.001	Mapped
CVE-2025-34028	Commvault Command Center	T1059.007 T1190	Mapped
CVE-2025-35939	Craft CMS Craft CMS	T1059 T1190 T1505.003	Mapped
CVE-2025-3928	Commvault Web Server	T1059 T1505.003	Mapped
CVE-2025-3935	ConnectWise ScreenConnect	T1059 T1203	Mapped
CVE-2025-42599	Qualitia Active! Mail	T1059 T1190 T1499	Mapped
CVE-2025-42999	SAP NetWeaver	T1059 T1190 T1203 T1505.003	Mapped
CVE-2025-43200	Apple Multiple Products	T1005 T1105 T1203	Mapped
CVE-2025-4427	Ivanti Endpoint Manager Mobile (EPMM)	T1059 T1190 T1203 T1505.003	Mapped
CVE-2025-4428	Ivanti Endpoint Manager Mobile (EPMM)	T1059 T1190 T1543	Mapped
CVE-2025-4632	Samsung MagicINFO 9 Server	T1059 T1068 T1496	Mapped
CVE-2025-47812	Wing FTP Server Wing FTP Server	T1059 T1068	Mapped
CVE-2025-48927	TeleMessage TM SGNL	T1005 T1212 T1555	Mapped
CVE-2025-48928	TeleMessage TM SGNL	T1005 T1212 T1555	Mapped
CVE-2025-49704	Microsoft SharePoint	T1059.003 T1190	Mapped
CVE-2025-49706	Microsoft SharePoint	T1059.003 T1190 T1505	Mapped
CVE-2025-53770	Microsoft SharePoint	T1059 T1190	Mapped
CVE-2025-5419	Google Chromium V8	T1189 T1203	Mapped
CVE-2025-54309	CrushFTP CrushFTP	T1021 T1068 T1567	Mapped
CVE-2025-5777	Citrix NetScaler ADC and Gateway	T1190 T1555	Mapped
CVE-2025-6543	Citrix NetScaler ADC and Gateway	T1059 T1203 T1498	Mapped
CVE-2025-6554	Google Chromium V8	T1059 T1189 T1203	Mapped
CVE-2025-6558	Google Chromium	T1189 T1203 T1497	Mapped