2.2 KiB
2.2 KiB
| 1 | Tactic | Technique # | Technique Name | Test # | Test Name | Test GUID | Executor Name |
|---|---|---|---|---|---|---|---|
| 2 | discovery | T1613 | Container and Resource Discovery | 1 | Docker Container and Resource Discovery | ea2255df-d781-493b-9693-ac328f9afc3f | sh |
| 3 | discovery | T1613 | Container and Resource Discovery | 2 | Podman Container and Resource Discovery | fc631702-3f03-4f2b-8d8a-6b3d055580a1 | sh |
| 4 | discovery | T1046 | Network Service Discovery | 9 | Network Service Discovery for Containers | 06eaafdb-8982-426e-8a31-d572da633caa | sh |
| 5 | credential-access | T1552.007 | Kubernetes List Secrets | 1 | List All Secrets | 31e794c4-48fd-4a76-aca4-6587c155bc11 | bash |
| 6 | credential-access | T1552.007 | Kubernetes List Secrets | 2 | ListSecrets | 43c3a49d-d15c-45e6-b303-f6e177e44a9a | bash |
| 7 | persistence | T1053.007 | Kubernetes Cronjob | 1 | ListCronjobs | ddfb0bc1-3c3f-47e9-a298-550ecfefacbd | bash |
| 8 | persistence | T1053.007 | Kubernetes Cronjob | 2 | CreateCronjob | f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 | bash |
| 9 | persistence | T1136.001 | Create Account: Local Account | 10 | Create a Linux user via kubectl in a Pod | d9efa6c7-6518-42b2-809a-4f2a8e242b9b | bash |
| 10 | privilege-escalation | T1053.007 | Kubernetes Cronjob | 1 | ListCronjobs | ddfb0bc1-3c3f-47e9-a298-550ecfefacbd | bash |
| 11 | privilege-escalation | T1053.007 | Kubernetes Cronjob | 2 | CreateCronjob | f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 | bash |
| 12 | privilege-escalation | T1611 | Escape to Host | 1 | Deploy container using nsenter container escape | 0b2f9520-a17a-4671-9dba-3bd034099fff | sh |
| 13 | privilege-escalation | T1611 | Escape to Host | 2 | Mount host filesystem to escape privileged Docker container | 6c499943-b098-4bc6-8d38-0956fc182984 | sh |
| 14 | privilege-escalation | T1611 | Escape to Host | 3 | Privilege Escalation via Docker Volume Mapping | 39fab1bc-fcb9-406f-bc2e-fe03e42ff0e4 | sh |
| 15 | execution | T1053.007 | Kubernetes Cronjob | 1 | ListCronjobs | ddfb0bc1-3c3f-47e9-a298-550ecfefacbd | bash |
| 16 | execution | T1053.007 | Kubernetes Cronjob | 2 | CreateCronjob | f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3 | bash |
| 17 | execution | T1610 | Deploy a container | 1 | Deploy Docker container | 59aa6f26-7620-417e-9318-589e0fb7a372 | bash |
| 18 | execution | T1609 | Kubernetes Exec Into Container | 1 | ExecIntoContainer | d03bfcd3-ed87-49c8-8880-44bb772dea4b | bash |
| 19 | execution | T1609 | Kubernetes Exec Into Container | 2 | Docker Exec Into Container | 900e2c49-221b-42ec-ae3c-4717e41e6219 | bash |
| 20 | stealth | T1612 | Build Image on Host | 1 | Build Image On Host | 2db30061-589d-409b-b125-7b473944f9b3 | sh |