Vendor: Microsoft
July 25, 2023 · View on GitHub
Product: SQL Server
| Rules | Models | MITRE TTPs | Event Types | Parsers |
|---|---|---|---|---|
| 109 | 38 | 17 | 7 | 7 |
ATT&CK Matrix for Enterprise
| Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Phishing: Spearphishing Link External Remote Services Valid Accounts Drive-by Compromise Phishing | User Execution | External Remote Services Valid Accounts | Valid Accounts | Valid Accounts Obfuscated Files or Information | OS Credential Dumping | File and Directory Discovery | Data from Information Repositories | Web Service Application Layer Protocol: Web Protocols Dynamic Resolution Dynamic Resolution: Domain Generation Algorithms Proxy: Multi-hop Proxy Application Layer Protocol Proxy | Data Transfer Size Limits Exfiltration Over Web Service: Exfiltration to Cloud Storage Exfiltration Over Web Service | Resource Hijacking |