diff --git a/.github/workflows/update-heatmap.yml b/.github/workflows/update-heatmap.yml
index 80e952b19..8736c8072 100644
--- a/.github/workflows/update-heatmap.yml
+++ b/.github/workflows/update-heatmap.yml
@@ -2,7 +2,6 @@ name: Generate Updated ATT&CK Heatmap
 on:
   schedule:
     - cron: "0 0 1 * *"
-    
   workflow_dispatch:
 
 
@@ -31,22 +30,22 @@ jobs:
           title: 'Update ATT&CK Heatmap Coverage'
           body: |
             ### Summary of the Pull Request
-  
+
             This PR updates sigma_attack_nav_coverage.json to reflect the current rule coverage.
-            To generate a new SVG file, go to the [MITRE ATT&CK Navigator](https://mitre-attack.github.io/attack-navigator/#layerURL=https://raw.githubusercontent.com/SigmaHQ/sigma/"${GITHUB_SHA}"/other/sigma_attack_nav_coverage.json) and export a SVG via "Layer Controls" > "Export" (download icon) > "render layer to SVG".
-  
+            To generate a new SVG file, go to the [MITRE ATT&CK Navigator](https://mitre-attack.github.io/attack-navigator/#layerURL=https://raw.githubusercontent.com/SigmaHQ/sigma/master/other/sigma_attack_nav_coverage.json) and export a SVG via "Layer Controls" > "Export" (download icon) > "render layer to SVG".
+
             ### Changelog
-  
+
             chore: update ATT&CK heatmap
-  
+
             ### Example Log Event
-  
+
             N/A
-  
+
             ### Fixed Issues
-  
+
             N/A
-  
+
             ### SigmaHQ Rule Creation Conventions
-            
+
             - If your PR adds new rules, please consider following and applying these [conventions](https://github.com/SigmaHQ/sigma-specification/blob/main/sigmahq/sigmahq_conventions.md)
diff --git a/other/sigma_attack_nav_coverage.json b/other/sigma_attack_nav_coverage.json
index d9fba3fc0..388a02ab1 100644
--- a/other/sigma_attack_nav_coverage.json
+++ b/other/sigma_attack_nav_coverage.json
@@ -1,4057 +1,5520 @@
 {
-	"name": "Sigma 2025-02",
-	"versions": {
-		"attack": "16",
-		"navigator": "5.1.0",
-		"layer": "4.5"
-	},
-	"domain": "enterprise-attack",
-	"description": "Sigma coverage heatmap generated by Sigma CLI with score function count",
-	"filters": {
-		"platforms": [
-			"Windows",
-			"Linux",
-			"macOS",
-			"Network",
-			"PRE",
-			"Containers",
-			"IaaS",
-			"SaaS",
-			"Office Suite",
-			"Identity Provider"
-		]
-	},
-	"sorting": 0,
-	"layout": {
-		"layout": "side",
-		"aggregateFunction": "average",
-		"showID": false,
-		"showName": true,
-		"showAggregateScores": false,
-		"countUnscored": false,
-		"expandedSubtechniques": "none"
-	},
-	"hideDisabled": false,
-	"techniques": [
-		{
-			"techniqueID": "T1047",
-			"tactic": "execution",
-			"score": 44,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1113",
-			"tactic": "collection",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1037.001",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1037.001",
-			"tactic": "privilege-escalation",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1037.005",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1037.005",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1557",
-			"tactic": "credential-access",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1557",
-			"tactic": "collection",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1557.001",
-			"tactic": "credential-access",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1557.001",
-			"tactic": "collection",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1033",
-			"tactic": "discovery",
-			"score": 31,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1592.004",
-			"tactic": "reconnaissance",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1003",
-			"tactic": "credential-access",
-			"score": 32,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1003.002",
-			"tactic": "credential-access",
-			"score": 25,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1003.003",
-			"tactic": "credential-access",
-			"score": 25,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1003.005",
-			"tactic": "credential-access",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1006",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1014",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1123",
-			"tactic": "collection",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543",
-			"tactic": "persistence",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543",
-			"tactic": "privilege-escalation",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.004",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.004",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.001",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.001",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.002",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.002",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.003",
-			"tactic": "persistence",
-			"score": 45,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1543.003",
-			"tactic": "privilege-escalation",
-			"score": 45,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1133",
-			"tactic": "persistence",
-			"score": 15,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1133",
-			"tactic": "initial-access",
-			"score": 15,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1578",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1069.002",
-			"tactic": "discovery",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1069.001",
-			"tactic": "discovery",
-			"score": 16,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1114.001",
-			"tactic": "collection",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1561.002",
-			"tactic": "impact",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1561.001",
-			"tactic": "impact",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1615",
-			"tactic": "discovery",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547",
-			"tactic": "persistence",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547",
-			"tactic": "privilege-escalation",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.009",
-			"tactic": "persistence",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.009",
-			"tactic": "privilege-escalation",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.006",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.006",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.004",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.004",
-			"tactic": "privilege-escalation",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.005",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.005",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.001",
-			"tactic": "persistence",
-			"score": 36,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.001",
-			"tactic": "privilege-escalation",
-			"score": 36,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.008",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.008",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.014",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.014",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.015",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.015",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.003",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.003",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.002",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.002",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.010",
-			"tactic": "persistence",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1547.010",
-			"tactic": "privilege-escalation",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1489",
-			"tactic": "impact",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1564.003",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1564.002",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1564.006",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1564.001",
-			"tactic": "defense-evasion",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1564.004",
-			"tactic": "defense-evasion",
-			"score": 23,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1115",
-			"tactic": "collection",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1007",
-			"tactic": "discovery",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1040",
-			"tactic": "credential-access",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1040",
-			"tactic": "discovery",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1135",
-			"tactic": "discovery",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1120",
-			"tactic": "discovery",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1082",
-			"tactic": "discovery",
-			"score": 30,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1071.004",
-			"tactic": "command-and-control",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1071.001",
-			"tactic": "command-and-control",
-			"score": 39,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1053",
-			"tactic": "execution",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1053",
-			"tactic": "persistence",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1053",
-			"tactic": "privilege-escalation",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1176",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1106",
-			"tactic": "execution",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1091",
-			"tactic": "lateral-movement",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1091",
-			"tactic": "initial-access",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1005",
-			"tactic": "collection",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1140",
-			"tactic": "defense-evasion",
-			"score": 19,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1562.003",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1562.004",
-			"tactic": "defense-evasion",
-			"score": 28,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1562.002",
-			"tactic": "defense-evasion",
-			"score": 23,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1562.001",
-			"tactic": "defense-evasion",
-			"score": 106,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1562.006",
-			"tactic": "defense-evasion",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1562.010",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1195",
-			"tactic": "initial-access",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1195.001",
-			"tactic": "initial-access",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1558.003",
-			"tactic": "credential-access",
-			"score": 16,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1555",
-			"tactic": "credential-access",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1555.004",
-			"tactic": "credential-access",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1555.001",
-			"tactic": "credential-access",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1567.001",
-			"tactic": "exfiltration",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1567.002",
-			"tactic": "exfiltration",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1219",
-			"tactic": "command-and-control",
-			"score": 40,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036",
-			"tactic": "defense-evasion",
-			"score": 41,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.008",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.003",
-			"tactic": "defense-evasion",
-			"score": 24,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.006",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.004",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.002",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.005",
-			"tactic": "defense-evasion",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1036.007",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1552.007",
-			"tactic": "credential-access",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1552.001",
-			"tactic": "credential-access",
-			"score": 21,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1552.002",
-			"tactic": "credential-access",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055",
-			"tactic": "defense-evasion",
-			"score": 31,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055",
-			"tactic": "privilege-escalation",
-			"score": 31,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.012",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.012",
-			"tactic": "privilege-escalation",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.009",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.009",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.011",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.011",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.001",
-			"tactic": "defense-evasion",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.001",
-			"tactic": "privilege-escalation",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.003",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1055.003",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218",
-			"tactic": "defense-evasion",
-			"score": 140,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.005",
-			"tactic": "defense-evasion",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.008",
-			"tactic": "defense-evasion",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.013",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.002",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.001",
-			"tactic": "defense-evasion",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.010",
-			"tactic": "defense-evasion",
-			"score": 19,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.009",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.003",
-			"tactic": "defense-evasion",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1218.007",
-			"tactic": "defense-evasion",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1620",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1611",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1010",
-			"tactic": "discovery",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1525",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1572",
-			"tactic": "command-and-control",
-			"score": 17,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1550.003",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1550.003",
-			"tactic": "lateral-movement",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1550.002",
-			"tactic": "defense-evasion",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1550.002",
-			"tactic": "lateral-movement",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1589",
-			"tactic": "reconnaissance",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1560",
-			"tactic": "collection",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1560.001",
-			"tactic": "collection",
-			"score": 16,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1185",
-			"tactic": "collection",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021",
-			"tactic": "lateral-movement",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021.006",
-			"tactic": "lateral-movement",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021.005",
-			"tactic": "lateral-movement",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021.002",
-			"tactic": "lateral-movement",
-			"score": 36,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021.001",
-			"tactic": "lateral-movement",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021.003",
-			"tactic": "lateral-movement",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1021.004",
-			"tactic": "lateral-movement",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1207",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1112",
-			"tactic": "defense-evasion",
-			"score": 85,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1580",
-			"tactic": "discovery",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1491.001",
-			"tactic": "impact",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1563.002",
-			"tactic": "lateral-movement",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1217",
-			"tactic": "discovery",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1222",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1222.002",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1222.001",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1595",
-			"tactic": "reconnaissance",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1595.002",
-			"tactic": "reconnaissance",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1548.001",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1548.001",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1548.002",
-			"tactic": "privilege-escalation",
-			"score": 53,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1548.002",
-			"tactic": "defense-evasion",
-			"score": 53,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1548.003",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1548.003",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1125",
-			"tactic": "collection",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1016",
-			"tactic": "discovery",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1087.002",
-			"tactic": "discovery",
-			"score": 17,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1087.001",
-			"tactic": "discovery",
-			"score": 13,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1090",
-			"tactic": "command-and-control",
-			"score": 22,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1090.001",
-			"tactic": "command-and-control",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1090.004",
-			"tactic": "command-and-control",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1090.002",
-			"tactic": "command-and-control",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1059.005",
-			"tactic": "execution",
-			"score": 21,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1059.002",
-			"tactic": "execution",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1059.003",
-			"tactic": "execution",
-			"score": 33,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1059.004",
-			"tactic": "execution",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1059.006",
-			"tactic": "execution",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1059.001",
-			"tactic": "execution",
-			"score": 214,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1482",
-			"tactic": "discovery",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1020",
-			"tactic": "exfiltration",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1070.004",
-			"tactic": "defense-evasion",
-			"score": 15,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1070.002",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1070.001",
-			"tactic": "defense-evasion",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1070.003",
-			"tactic": "defense-evasion",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1070.005",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1609",
-			"tactic": "execution",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1083",
-			"tactic": "discovery",
-			"score": 20,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1568",
-			"tactic": "command-and-control",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1074",
-			"tactic": "collection",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1074.001",
-			"tactic": "collection",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1049",
-			"tactic": "discovery",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1584",
-			"tactic": "resource-development",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1542.003",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1542.003",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1542.001",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1542.001",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1586",
-			"tactic": "resource-development",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1497.001",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1497.001",
-			"tactic": "discovery",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1102.003",
-			"tactic": "command-and-control",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1102.001",
-			"tactic": "command-and-control",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1102.002",
-			"tactic": "command-and-control",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1608",
-			"tactic": "resource-development",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1104",
-			"tactic": "command-and-control",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1057",
-			"tactic": "discovery",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1041",
-			"tactic": "exfiltration",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1591.004",
-			"tactic": "reconnaissance",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1590",
-			"tactic": "reconnaissance",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1590.001",
-			"tactic": "reconnaissance",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1210",
-			"tactic": "lateral-movement",
-			"score": 15,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1593.003",
-			"tactic": "reconnaissance",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1048.003",
-			"tactic": "exfiltration",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1048.001",
-			"tactic": "exfiltration",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1566.001",
-			"tactic": "initial-access",
-			"score": 21,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1565",
-			"tactic": "impact",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1565.002",
-			"tactic": "impact",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1565.001",
-			"tactic": "impact",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1559.002",
-			"tactic": "execution",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1559.001",
-			"tactic": "execution",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1039",
-			"tactic": "collection",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574",
-			"tactic": "persistence",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574",
-			"tactic": "privilege-escalation",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574",
-			"tactic": "defense-evasion",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.007",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.007",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.007",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.005",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.005",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.005",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.002",
-			"tactic": "persistence",
-			"score": 79,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.002",
-			"tactic": "privilege-escalation",
-			"score": 79,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.002",
-			"tactic": "defense-evasion",
-			"score": 79,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.006",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.006",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.006",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.008",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.008",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.008",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.011",
-			"tactic": "persistence",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.011",
-			"tactic": "privilege-escalation",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.011",
-			"tactic": "defense-evasion",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.012",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.012",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1574.012",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.002",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.002",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.002",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.002",
-			"tactic": "initial-access",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.003",
-			"tactic": "defense-evasion",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.003",
-			"tactic": "persistence",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.003",
-			"tactic": "privilege-escalation",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1078.003",
-			"tactic": "initial-access",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1571",
-			"tactic": "command-and-control",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1068",
-			"tactic": "privilege-escalation",
-			"score": 24,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027",
-			"tactic": "defense-evasion",
-			"score": 92,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027.005",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027.009",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027.010",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027.003",
-			"tactic": "defense-evasion",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027.002",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1027.001",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.002",
-			"tactic": "privilege-escalation",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.002",
-			"tactic": "persistence",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.013",
-			"tactic": "privilege-escalation",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.013",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.003",
-			"tactic": "privilege-escalation",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.003",
-			"tactic": "persistence",
-			"score": 12,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.011",
-			"tactic": "privilege-escalation",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.011",
-			"tactic": "persistence",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.015",
-			"tactic": "privilege-escalation",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.015",
-			"tactic": "persistence",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.004",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.004",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.010",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.010",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.007",
-			"tactic": "privilege-escalation",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.007",
-			"tactic": "persistence",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.012",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.012",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.001",
-			"tactic": "privilege-escalation",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.001",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.009",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.009",
-			"tactic": "persistence",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.014",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.014",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.008",
-			"tactic": "privilege-escalation",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1546.008",
-			"tactic": "persistence",
-			"score": 7,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1187",
-			"tactic": "credential-access",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1599.001",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1486",
-			"tactic": "impact",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1553",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1553.005",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1553.002",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1553.004",
-			"tactic": "defense-evasion",
-			"score": 10,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1553.003",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1553.001",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1573",
-			"tactic": "command-and-control",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1056.001",
-			"tactic": "collection",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1056.001",
-			"tactic": "credential-access",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1056.002",
-			"tactic": "collection",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1056.002",
-			"tactic": "credential-access",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1203",
-			"tactic": "execution",
-			"score": 26,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1570",
-			"tactic": "lateral-movement",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1095",
-			"tactic": "command-and-control",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1012",
-			"tactic": "discovery",
-			"score": 13,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1030",
-			"tactic": "exfiltration",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1499.001",
-			"tactic": "impact",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1614.001",
-			"tactic": "discovery",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1197",
-			"tactic": "defense-evasion",
-			"score": 16,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1197",
-			"tactic": "persistence",
-			"score": 16,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1132.001",
-			"tactic": "command-and-control",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1588",
-			"tactic": "resource-development",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1588.002",
-			"tactic": "resource-development",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1588.001",
-			"tactic": "resource-development",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1569.002",
-			"tactic": "execution",
-			"score": 42,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1200",
-			"tactic": "initial-access",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1505",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1505.002",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1505.004",
-			"tactic": "persistence",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1505.003",
-			"tactic": "persistence",
-			"score": 28,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1505.005",
-			"tactic": "persistence",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1221",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134",
-			"tactic": "privilege-escalation",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.001",
-			"tactic": "defense-evasion",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.001",
-			"tactic": "privilege-escalation",
-			"score": 9,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.004",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.004",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.005",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.005",
-			"tactic": "privilege-escalation",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.002",
-			"tactic": "defense-evasion",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.002",
-			"tactic": "privilege-escalation",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.003",
-			"tactic": "defense-evasion",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1134.003",
-			"tactic": "privilege-escalation",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1136.001",
-			"tactic": "persistence",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1136.002",
-			"tactic": "persistence",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1018",
-			"tactic": "discovery",
-			"score": 15,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1046",
-			"tactic": "discovery",
-			"score": 14,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1518",
-			"tactic": "discovery",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1518.001",
-			"tactic": "discovery",
-			"score": 8,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1622",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1622",
-			"tactic": "discovery",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1105",
-			"tactic": "command-and-control",
-			"score": 64,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1484.001",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1484.001",
-			"tactic": "privilege-escalation",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1220",
-			"tactic": "defense-evasion",
-			"score": 5,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1587",
-			"tactic": "resource-development",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1587.001",
-			"tactic": "resource-development",
-			"score": 11,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1008",
-			"tactic": "command-and-control",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1124",
-			"tactic": "discovery",
-			"score": 3,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1495",
-			"tactic": "impact",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1216",
-			"tactic": "defense-evasion",
-			"score": 13,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1216.001",
-			"tactic": "defense-evasion",
-			"score": 2,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1211",
-			"tactic": "defense-evasion",
-			"score": 4,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1127",
-			"tactic": "defense-evasion",
-			"score": 19,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1127.001",
-			"tactic": "defense-evasion",
-			"score": 1,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		},
-		{
-			"techniqueID": "T1529",
-			"tactic": "impact",
-			"score": 6,
-			"color": "",
-			"comment": "",
-			"enabled": true,
-			"metadata": [],
-			"links": [],
-			"showSubtechniques": false
-		}
-	],
-	"gradient": {
-		"colors": [
-			"#66b1ffff",
-			"#ff66f4ff"
-		],
-		"minValue": 0,
-		"maxValue": 10
-	},
-	"legendItems": [],
-	"metadata": [],
-	"links": [],
-	"showTacticRowBackground": false,
-	"tacticRowBackground": "#dddddd",
-	"selectTechniquesAcrossTactics": false,
-	"selectSubtechniquesWithParent": false,
-	"selectVisibleTechniques": false
-}
+  "name": "Sigma Analytics Coverage",
+  "versions": {
+    "attack": "17.0",
+    "navigator": "4.8.1",
+    "layer": "4.4"
+  },
+  "domain": "enterprise-attack",
+  "description": "Sigma coverage heatmap generated by Sigma CLI with score function count",
+  "gradient": {
+    "colors": [
+      "#ffffff00",
+      "#ff0000"
+    ],
+    "minValue": 0,
+    "maxValue": 1345
+  },
+  "techniques": [
+    {
+      "techniqueID": "T1071.001",
+      "tactic": "command-and-control",
+      "score": 40,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1197",
+      "tactic": "defense-evasion",
+      "score": 17,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1197",
+      "tactic": "persistence",
+      "score": 17,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1105",
+      "tactic": "command-and-control",
+      "score": 70,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1568",
+      "tactic": "command-and-control",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1190",
+      "tactic": "initial-access",
+      "score": 130,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1567.002",
+      "tactic": "exfiltration",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1189",
+      "tactic": "initial-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1204.002",
+      "tactic": "execution",
+      "score": 32,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.005",
+      "tactic": "defense-evasion",
+      "score": 15,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1590",
+      "tactic": "reconnaissance",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1566",
+      "tactic": "initial-access",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1203",
+      "tactic": "execution",
+      "score": 28,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1584",
+      "tactic": "resource-development",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1102.001",
+      "tactic": "command-and-control",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1102.003",
+      "tactic": "command-and-control",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1056",
+      "tactic": "collection",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1056",
+      "tactic": "credential-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1102.002",
+      "tactic": "command-and-control",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1110",
+      "tactic": "credential-access",
+      "score": 24,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1505.003",
+      "tactic": "persistence",
+      "score": 31,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1083",
+      "tactic": "discovery",
+      "score": 21,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1221",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1499.004",
+      "tactic": "impact",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1210",
+      "tactic": "lateral-movement",
+      "score": 15,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1566.001",
+      "tactic": "initial-access",
+      "score": 21,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1560.001",
+      "tactic": "collection",
+      "score": 16,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027",
+      "tactic": "defense-evasion",
+      "score": 92,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1490",
+      "tactic": "impact",
+      "score": 25,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.001",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.001",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.004",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.004",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059",
+      "tactic": "execution",
+      "score": 91,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1204",
+      "tactic": "execution",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1140",
+      "tactic": "defense-evasion",
+      "score": 19,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.006",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.002",
+      "tactic": "execution",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.007",
+      "tactic": "execution",
+      "score": 19,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1569.001",
+      "tactic": "execution",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.006",
+      "tactic": "defense-evasion",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.003",
+      "tactic": "execution",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.003",
+      "tactic": "persistence",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.003",
+      "tactic": "privilege-escalation",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1056.002",
+      "tactic": "collection",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1056.002",
+      "tactic": "credential-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1113",
+      "tactic": "collection",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1136.001",
+      "tactic": "persistence",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1566.002",
+      "tactic": "initial-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1204.001",
+      "tactic": "execution",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1553",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218",
+      "tactic": "defense-evasion",
+      "score": 144,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1564.004",
+      "tactic": "defense-evasion",
+      "score": 23,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552.001",
+      "tactic": "credential-access",
+      "score": 21,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1082",
+      "tactic": "discovery",
+      "score": 33,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078",
+      "tactic": "defense-evasion",
+      "score": 60,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078",
+      "tactic": "persistence",
+      "score": 60,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078",
+      "tactic": "privilege-escalation",
+      "score": 60,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078",
+      "tactic": "initial-access",
+      "score": 60,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.001",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.001",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.001",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.001",
+      "tactic": "initial-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.003",
+      "tactic": "defense-evasion",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.003",
+      "tactic": "persistence",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.003",
+      "tactic": "privilege-escalation",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.003",
+      "tactic": "initial-access",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1219.002",
+      "tactic": "command-and-control",
+      "score": 44,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.003",
+      "tactic": "defense-evasion",
+      "score": 26,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1564.002",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1497.001",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1497.001",
+      "tactic": "discovery",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1049",
+      "tactic": "discovery",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552.003",
+      "tactic": "credential-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1040",
+      "tactic": "credential-access",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1040",
+      "tactic": "discovery",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1087.001",
+      "tactic": "discovery",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1518.001",
+      "tactic": "discovery",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1071",
+      "tactic": "command-and-control",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.001",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1137.002",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1069.001",
+      "tactic": "discovery",
+      "score": 16,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.002",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1529",
+      "tactic": "impact",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1030",
+      "tactic": "exfiltration",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1115",
+      "tactic": "collection",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.001",
+      "tactic": "defense-evasion",
+      "score": 107,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1046",
+      "tactic": "discovery",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1018",
+      "tactic": "discovery",
+      "score": 16,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1555.001",
+      "tactic": "credential-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1133",
+      "tactic": "persistence",
+      "score": 15,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1133",
+      "tactic": "initial-access",
+      "score": 15,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1553.001",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1016",
+      "tactic": "discovery",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1037.005",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1037.005",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.014",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.014",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1068",
+      "tactic": "privilege-escalation",
+      "score": 26,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.004",
+      "tactic": "defense-evasion",
+      "score": 15,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.004",
+      "tactic": "execution",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1592.004",
+      "tactic": "reconnaissance",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1496",
+      "tactic": "impact",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.003",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.012",
+      "tactic": "execution",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1033",
+      "tactic": "discovery",
+      "score": 31,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1007",
+      "tactic": "discovery",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1531",
+      "tactic": "impact",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1485",
+      "tactic": "impact",
+      "score": 20,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1567",
+      "tactic": "exfiltration",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.002",
+      "tactic": "execution",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.002",
+      "tactic": "persistence",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.002",
+      "tactic": "privilege-escalation",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1565.001",
+      "tactic": "impact",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036",
+      "tactic": "defense-evasion",
+      "score": 41,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1136",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1553.004",
+      "tactic": "defense-evasion",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1222.002",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.004",
+      "tactic": "defense-evasion",
+      "score": 29,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1090",
+      "tactic": "command-and-control",
+      "score": 22,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1014",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548",
+      "tactic": "privilege-escalation",
+      "score": 20,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548",
+      "tactic": "defense-evasion",
+      "score": 20,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548.001",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548.001",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1593.003",
+      "tactic": "reconnaissance",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548.003",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548.003",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.009",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.009",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1564",
+      "tactic": "defense-evasion",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070",
+      "tactic": "defense-evasion",
+      "score": 19,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098",
+      "tactic": "persistence",
+      "score": 28,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098",
+      "tactic": "privilege-escalation",
+      "score": 28,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1587",
+      "tactic": "resource-development",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1571",
+      "tactic": "command-and-control",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1568.002",
+      "tactic": "command-and-control",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1572",
+      "tactic": "command-and-control",
+      "score": 17,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1102",
+      "tactic": "command-and-control",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.006",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.006",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.006",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.003",
+      "tactic": "defense-evasion",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.006",
+      "tactic": "defense-evasion",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1489",
+      "tactic": "impact",
+      "score": 19,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1499",
+      "tactic": "impact",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.003",
+      "tactic": "defense-evasion",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.001",
+      "tactic": "persistence",
+      "score": 87,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.001",
+      "tactic": "privilege-escalation",
+      "score": 87,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.001",
+      "tactic": "defense-evasion",
+      "score": 87,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.002",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.002",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1048.003",
+      "tactic": "exfiltration",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1201",
+      "tactic": "discovery",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1123",
+      "tactic": "collection",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1564.001",
+      "tactic": "defense-evasion",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.004",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.004",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.003",
+      "tactic": "persistence",
+      "score": 45,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543.003",
+      "tactic": "privilege-escalation",
+      "score": 45,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1106",
+      "tactic": "execution",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1057",
+      "tactic": "discovery",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003",
+      "tactic": "credential-access",
+      "score": 32,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1056.001",
+      "tactic": "collection",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1056.001",
+      "tactic": "credential-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.006",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.006",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1212",
+      "tactic": "credential-access",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1588.001",
+      "tactic": "resource-development",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1589",
+      "tactic": "reconnaissance",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.008",
+      "tactic": "defense-evasion",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.001",
+      "tactic": "defense-evasion",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1202",
+      "tactic": "defense-evasion",
+      "score": 36,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.005",
+      "tactic": "execution",
+      "score": 47,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.005",
+      "tactic": "persistence",
+      "score": 47,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053.005",
+      "tactic": "privilege-escalation",
+      "score": 47,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543",
+      "tactic": "persistence",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1543",
+      "tactic": "privilege-escalation",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1048",
+      "tactic": "exfiltration",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1518",
+      "tactic": "discovery",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1558.003",
+      "tactic": "credential-access",
+      "score": 16,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550.003",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550.003",
+      "tactic": "lateral-movement",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.011",
+      "tactic": "privilege-escalation",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.011",
+      "tactic": "persistence",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.009",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.002",
+      "tactic": "defense-evasion",
+      "score": 23,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.003",
+      "tactic": "execution",
+      "score": 35,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.002",
+      "tactic": "lateral-movement",
+      "score": 36,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574",
+      "tactic": "persistence",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574",
+      "tactic": "privilege-escalation",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574",
+      "tactic": "defense-evasion",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548.002",
+      "tactic": "privilege-escalation",
+      "score": 54,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1548.002",
+      "tactic": "defense-evasion",
+      "score": 54,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1542.001",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1542.001",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.004",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.004",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1614.001",
+      "tactic": "discovery",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003.003",
+      "tactic": "credential-access",
+      "score": 25,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1486",
+      "tactic": "impact",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.003",
+      "tactic": "defense-evasion",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1557.001",
+      "tactic": "credential-access",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1557.001",
+      "tactic": "collection",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.010",
+      "tactic": "defense-evasion",
+      "score": 19,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1482",
+      "tactic": "discovery",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1090.003",
+      "tactic": "command-and-control",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552.004",
+      "tactic": "credential-access",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.005",
+      "tactic": "lateral-movement",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562",
+      "tactic": "defense-evasion",
+      "score": 24,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1112",
+      "tactic": "defense-evasion",
+      "score": 85,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1112",
+      "tactic": "persistence",
+      "score": 85,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.001",
+      "tactic": "execution",
+      "score": 217,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1127",
+      "tactic": "defense-evasion",
+      "score": 19,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547",
+      "tactic": "persistence",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547",
+      "tactic": "privilege-escalation",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.009",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552.006",
+      "tactic": "credential-access",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1220",
+      "tactic": "defense-evasion",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003.001",
+      "tactic": "credential-access",
+      "score": 74,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1216.001",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.010",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1555",
+      "tactic": "credential-access",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1047",
+      "tactic": "execution",
+      "score": 46,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1090.001",
+      "tactic": "command-and-control",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.007",
+      "tactic": "defense-evasion",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1037.001",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1037.001",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.011",
+      "tactic": "persistence",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.011",
+      "tactic": "privilege-escalation",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.011",
+      "tactic": "defense-evasion",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1185",
+      "tactic": "collection",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1204.004",
+      "tactic": "execution",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1587.001",
+      "tactic": "resource-development",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.003",
+      "tactic": "privilege-escalation",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.003",
+      "tactic": "persistence",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.003",
+      "tactic": "lateral-movement",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.006",
+      "tactic": "lateral-movement",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.005",
+      "tactic": "execution",
+      "score": 21,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.011",
+      "tactic": "defense-evasion",
+      "score": 43,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.004",
+      "tactic": "defense-evasion",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1560",
+      "tactic": "collection",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.001",
+      "tactic": "defense-evasion",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.001",
+      "tactic": "privilege-escalation",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.013",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1104",
+      "tactic": "command-and-control",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1176",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1615",
+      "tactic": "discovery",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1087",
+      "tactic": "discovery",
+      "score": 15,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1087.002",
+      "tactic": "discovery",
+      "score": 18,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.005",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.001",
+      "tactic": "defense-evasion",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.001",
+      "tactic": "privilege-escalation",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.003",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.003",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1555.004",
+      "tactic": "credential-access",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1569.002",
+      "tactic": "execution",
+      "score": 42,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1569",
+      "tactic": "execution",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021",
+      "tactic": "lateral-movement",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1564.003",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.002",
+      "tactic": "defense-evasion",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.002",
+      "tactic": "privilege-escalation",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1216",
+      "tactic": "defense-evasion",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1620",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1048.001",
+      "tactic": "exfiltration",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1071.004",
+      "tactic": "command-and-control",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1132.001",
+      "tactic": "command-and-control",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.001",
+      "tactic": "lateral-movement",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003.002",
+      "tactic": "credential-access",
+      "score": 26,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556.002",
+      "tactic": "credential-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556.002",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556.002",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.010",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1124",
+      "tactic": "discovery",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.001",
+      "tactic": "persistence",
+      "score": 37,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.001",
+      "tactic": "privilege-escalation",
+      "score": 37,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1649",
+      "tactic": "credential-access",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552",
+      "tactic": "credential-access",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003.005",
+      "tactic": "credential-access",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055",
+      "tactic": "defense-evasion",
+      "score": 31,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055",
+      "tactic": "privilege-escalation",
+      "score": 31,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1072",
+      "tactic": "execution",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1072",
+      "tactic": "lateral-movement",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1622",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1622",
+      "tactic": "discovery",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.006",
+      "tactic": "execution",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1484.001",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1484.001",
+      "tactic": "privilege-escalation",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1135",
+      "tactic": "discovery",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.007",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1528",
+      "tactic": "credential-access",
+      "score": 14,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1539",
+      "tactic": "credential-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1005",
+      "tactic": "collection",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552.002",
+      "tactic": "credential-access",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003.004",
+      "tactic": "credential-access",
+      "score": 11,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1003.006",
+      "tactic": "credential-access",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.002",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1119",
+      "tactic": "collection",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.007",
+      "tactic": "privilege-escalation",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.007",
+      "tactic": "persistence",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.001",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.001",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1608",
+      "tactic": "resource-development",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1012",
+      "tactic": "discovery",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1595",
+      "tactic": "reconnaissance",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1491.001",
+      "tactic": "impact",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1563.002",
+      "tactic": "lateral-movement",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1074.001",
+      "tactic": "collection",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1588.002",
+      "tactic": "resource-development",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1542.003",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1542.003",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1570",
+      "tactic": "lateral-movement",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.005",
+      "tactic": "defense-evasion",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053",
+      "tactic": "execution",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053",
+      "tactic": "persistence",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1053",
+      "tactic": "privilege-escalation",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.005",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.005",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.005",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1526",
+      "tactic": "discovery",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1555.003",
+      "tactic": "credential-access",
+      "score": 8,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1564.006",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1069.002",
+      "tactic": "discovery",
+      "score": 12,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.001",
+      "tactic": "defense-evasion",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.005",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.008",
+      "tactic": "privilege-escalation",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.008",
+      "tactic": "persistence",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1217",
+      "tactic": "discovery",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1505.004",
+      "tactic": "persistence",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.002",
+      "tactic": "privilege-escalation",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.002",
+      "tactic": "persistence",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1069",
+      "tactic": "discovery",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1222.001",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1110.002",
+      "tactic": "credential-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1095",
+      "tactic": "command-and-control",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1039",
+      "tactic": "collection",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1590.001",
+      "tactic": "reconnaissance",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1211",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1505.005",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.007",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.007",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.007",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.014",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.014",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.010",
+      "tactic": "persistence",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.010",
+      "tactic": "privilege-escalation",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.002",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.002",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1557",
+      "tactic": "credential-access",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1557",
+      "tactic": "collection",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1505.002",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1114",
+      "tactic": "collection",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.004",
+      "tactic": "lateral-movement",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1218.002",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546",
+      "tactic": "privilege-escalation",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546",
+      "tactic": "persistence",
+      "score": 10,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1110.001",
+      "tactic": "credential-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.015",
+      "tactic": "privilege-escalation",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.015",
+      "tactic": "persistence",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.008",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.008",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.008",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1120",
+      "tactic": "discovery",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1027.002",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1567.001",
+      "tactic": "exfiltration",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1127.001",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1559.001",
+      "tactic": "execution",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1558",
+      "tactic": "credential-access",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1041",
+      "tactic": "exfiltration",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1090.002",
+      "tactic": "command-and-control",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.012",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.012",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.003",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.003",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1555.005",
+      "tactic": "credential-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1554",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1006",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.011",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1055.011",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1599.001",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1137",
+      "tactic": "persistence",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1001.003",
+      "tactic": "command-and-control",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.009",
+      "tactic": "persistence",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.009",
+      "tactic": "privilege-escalation",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1008",
+      "tactic": "command-and-control",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1136.002",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.013",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.013",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1195",
+      "tactic": "initial-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1195.001",
+      "tactic": "initial-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1137.006",
+      "tactic": "persistence",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.015",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.015",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1137.003",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1553.005",
+      "tactic": "defense-evasion",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1573",
+      "tactic": "command-and-control",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1565",
+      "tactic": "impact",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.012",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.012",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1574.012",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1222",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1114.001",
+      "tactic": "collection",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1020",
+      "tactic": "exfiltration",
+      "score": 9,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.004",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.004",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1589.002",
+      "tactic": "reconnaissance",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.005",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.005",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.009",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.009",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.010",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.010",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1125",
+      "tactic": "collection",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.008",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.008",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.003",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1547.003",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556",
+      "tactic": "credential-access",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556",
+      "tactic": "defense-evasion",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556",
+      "tactic": "persistence",
+      "score": 13,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.012",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1546.012",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1553.003",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1559.002",
+      "tactic": "execution",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1590.002",
+      "tactic": "reconnaissance",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1200",
+      "tactic": "initial-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1010",
+      "tactic": "discovery",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1187",
+      "tactic": "credential-access",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1553.002",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1207",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.005",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1134.005",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550.002",
+      "tactic": "defense-evasion",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550.002",
+      "tactic": "lateral-movement",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1091",
+      "tactic": "lateral-movement",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1091",
+      "tactic": "initial-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550",
+      "tactic": "defense-evasion",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550",
+      "tactic": "lateral-movement",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.002",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.002",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.002",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.002",
+      "tactic": "initial-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1588",
+      "tactic": "resource-development",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1499.001",
+      "tactic": "impact",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1505.001",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1213",
+      "tactic": "collection",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1498",
+      "tactic": "impact",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1611",
+      "tactic": "privilege-escalation",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1552.007",
+      "tactic": "credential-access",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1609",
+      "tactic": "execution",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1069.003",
+      "tactic": "discovery",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1087.004",
+      "tactic": "discovery",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1595.002",
+      "tactic": "reconnaissance",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1495",
+      "tactic": "impact",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1561.001",
+      "tactic": "impact",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1561.002",
+      "tactic": "impact",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1074",
+      "tactic": "collection",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1505",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1565.002",
+      "tactic": "impact",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098.003",
+      "tactic": "persistence",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098.003",
+      "tactic": "privilege-escalation",
+      "score": 7,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1586.003",
+      "tactic": "resource-development",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098.001",
+      "tactic": "persistence",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098.001",
+      "tactic": "privilege-escalation",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.004",
+      "tactic": "defense-evasion",
+      "score": 38,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.004",
+      "tactic": "persistence",
+      "score": 38,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.004",
+      "tactic": "privilege-escalation",
+      "score": 38,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1078.004",
+      "tactic": "initial-access",
+      "score": 38,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556.006",
+      "tactic": "credential-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556.006",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1556.006",
+      "tactic": "persistence",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1213.003",
+      "tactic": "collection",
+      "score": 5,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1537",
+      "tactic": "exfiltration",
+      "score": 6,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1136.003",
+      "tactic": "persistence",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1621",
+      "tactic": "credential-access",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1578.003",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1578",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1562.007",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098.005",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1098.005",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1484",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1484",
+      "tactic": "privilege-escalation",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1606",
+      "tactic": "credential-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1591.004",
+      "tactic": "reconnaissance",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1586",
+      "tactic": "resource-development",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1525",
+      "tactic": "persistence",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1021.007",
+      "tactic": "lateral-movement",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550.001",
+      "tactic": "defense-evasion",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1550.001",
+      "tactic": "lateral-movement",
+      "score": 4,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1580",
+      "tactic": "discovery",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1059.009",
+      "tactic": "execution",
+      "score": 3,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1199",
+      "tactic": "initial-access",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.004",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1129",
+      "tactic": "execution",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1559",
+      "tactic": "execution",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1090.004",
+      "tactic": "command-and-control",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1036.008",
+      "tactic": "defense-evasion",
+      "score": 1,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    },
+    {
+      "techniqueID": "T1070.008",
+      "tactic": "defense-evasion",
+      "score": 2,
+      "color": "",
+      "comment": "",
+      "enabled": true,
+      "metadata": [],
+      "links": [],
+      "showSubtechniques": false
+    }
+  ]
+}
\ No newline at end of file
diff --git a/other/sigma_attack_nav_coverage.png b/other/sigma_attack_nav_coverage.png
deleted file mode 100644
index 47a7a4c63..000000000
Binary files a/other/sigma_attack_nav_coverage.png and /dev/null differ
diff --git a/other/sigma_attack_nav_coverage.svg b/other/sigma_attack_nav_coverage.svg
new file mode 100644
index 000000000..e7a631c0f
--- /dev/null
+++ b/other/sigma_attack_nav_coverage.svg
@@ -0,0 +1,2 @@
+<?xml version="1.0" standalone="no"?>
+<svg width="1056" height="816" xmlns="http://www.w3.org/2000/svg" id="svgvm0"><g transform="translate(5,5)" style="font-family: sans-serif;"><g><g transform="translate(0, 0)"><g transform="translate(0,5)"><rect class="header-box" width="251.56962025316454" height="86" stroke="black" fill="white" rx="5"/><rect class="label-cover" x="8" y="-12" width="37.13333511352539" height="21" fill="white" rx="5"/><text class="header-box-label" x="10" font-size="12" fill="black" y="3">about</text><g class="header-box-content" fill="black" transform="translate(5, 0)"><g transform="translate(0, 2.0975609756097526)"><text font-size="12"><tspan x="4" y="23.426829268292682">Sigma 2025-02</tspan></text><line x1="0" x2="241.56962025316454" y1="39.853658536585364" y2="39.853658536585364" stroke="#dddddd"/></g><g transform="translate(0, 44.048780487804876)"><text font-size="10.627642276422764"><tspan x="4" y="10.475609756097562">Sigma coverage</tspan><tspan x="4" y="23.426829268292682">heatmap generated by Sigma</tspan><tspan x="4" y="36.3780487804878">CLI with score function count</tspan></text></g></g></g></g><g transform="translate(264.8101265822785, 0)"><g transform="translate(0,5)"><rect class="header-box" width="251.56962025316454" height="86" stroke="black" fill="white" rx="5"/><rect class="label-cover" x="8" y="-12" width="47.11666488647461" height="21" fill="white" rx="5"/><text class="header-box-label" x="10" font-size="12" fill="black" y="3">domain</text><g class="header-box-content" fill="black" transform="translate(5, 0)"><g transform="translate(0, 4.095238095238102)"><text font-size="12"><tspan x="4" y="42.4047619047619">Enterprise ATT&amp;CK v16</tspan></text></g></g></g></g><g transform="translate(529.620253164557, 0)"><g transform="translate(0,5)"><rect class="header-box" width="251.56962025316454" height="86" stroke="black" fill="white" rx="5"/><rect class="label-cover" x="8" y="-12" width="58.86666488647461" height="21" fill="white" rx="5"/><text class="header-box-label" x="10" font-size="12" fill="black" y="3">platforms</text><g class="header-box-content" fill="black" transform="translate(5, 0)"><g transform="translate(0, 4.095238095238102)"><text font-size="12"><tspan x="4" y="20.279761904761898">Windows, Linux, macOS,</tspan><tspan x="4" y="35.0297619047619">Network, PRE, Containers,</tspan><tspan x="4" y="49.7797619047619">IaaS, SaaS, Office</tspan><tspan x="4" y="64.5297619047619">Suite, Identity Provider</tspan></text></g></g></g></g><g transform="translate(794.4303797468355, 0)"><g transform="translate(0,5)"><rect class="header-box" width="251.56962025316454" height="86" stroke="black" fill="white" rx="5"/><rect class="label-cover" x="8" y="-12" width="42.81666564941406" height="21" fill="white" rx="5"/><text class="header-box-label" x="10" font-size="12" fill="black" y="3">legend</text><g class="header-box-content" fill="black" transform="translate(5, 0)"><g transform="translate(0, 4.095238095238102)"><g transform="translate(0, 5)"><g class="legendCells"><g class="cell" transform="translate(0,0)"><rect class="swatch" height="15" width="60.392405063291136" style="fill: rgb(102, 177, 255);"/><text class="label" transform="translate(30.196203231811523,&#xA;          25)" style="text-anchor: middle;">0.0</text></g><g class="cell" transform="translate(60.39240646362305,0)"><rect class="swatch" height="15" width="60.392405063291136" style="fill: rgb(153, 152, 251);"/><text class="label" transform="translate(30.196203231811523,&#xA;          25)" style="text-anchor: middle;">3.3</text></g><g class="cell" transform="translate(120.7848129272461,0)"><rect class="swatch" height="15" width="60.392405063291136" style="fill: rgb(204, 127, 248);"/><text class="label" transform="translate(30.196203231811523,&#xA;          25)" style="text-anchor: middle;">6.7</text></g><g class="cell" transform="translate(181.17721939086914,0)"><rect class="swatch" height="15" width="60.392405063291136" style="fill: rgb(255, 102, 244);"/><text class="label" transform="translate(30.196203231811523,&#xA;          25)" style="text-anchor: middle;">10</text></g></g></g></g></g></g></g></g><g transform="translate(0,97)"><g><g class="tactic reconnaissance" transform="translate(0, 0)"><g class="techniques"><g class="technique T1595" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="9.38888888888889">Active Scanning</tspan></text></g><g class="technique T1592" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Gather Victim</tspan><tspan x="4" y="13.083333333333334">Host Information</tspan></text></g><g class="technique T1589" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Gather Victim</tspan><tspan x="4" y="13.083333333333334">Identity Information</tspan></text></g><g class="technique T1590" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Gather Victim</tspan><tspan x="4" y="13.083333333333334">Network Information</tspan></text></g><g class="technique T1591" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Gather Victim</tspan><tspan x="4" y="13.083333333333334">Org Information</tspan></text></g><g class="technique T1598" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Phishing</tspan><tspan x="4" y="13.083333333333334">for Information</tspan></text></g><g class="technique T1597" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Search</tspan><tspan x="4" y="13.083333333333334">Closed Sources</tspan></text></g><g class="technique T1596" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Search Open</tspan><tspan x="4" y="13.083333333333334">Technical Databases</tspan></text></g><g class="technique T1593" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Search Open</tspan><tspan x="4" y="13.083333333333334">Websites/Domains</tspan></text></g><g class="technique T1594" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Search Victim-Owned</tspan><tspan x="4" y="13.083333333333334">Websites</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="10.38888888888889">Reconnaissance</tspan></text></g></g><g class="tactic resource-development" transform="translate(74.71428571428571, 0)"><g class="techniques"><g class="technique T1650" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Acquire Access</tspan></text></g><g class="technique T1583" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Acquire</tspan><tspan x="4" y="13.083333333333334">Infrastructure</tspan></text></g><g class="technique T1586" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Compromise</tspan><tspan x="4" y="13.083333333333334">Accounts</tspan></text></g><g class="technique T1584" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Compromise</tspan><tspan x="4" y="13.083333333333334">Infrastructure</tspan></text></g><g class="technique T1587" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#c384f8" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Develop</tspan><tspan x="4" y="13.083333333333334">Capabilities</tspan></text></g><g class="technique T1585" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Establish</tspan><tspan x="4" y="13.083333333333334">Accounts</tspan></text></g><g class="technique T1588" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Obtain</tspan><tspan x="4" y="13.083333333333334">Capabilities</tspan></text></g><g class="technique T1608" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Stage</tspan><tspan x="4" y="13.083333333333334">Capabilities</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="5.694444444444445">Resource</tspan><tspan text-anchor="middle" x="37.357142857142854" y="13.083333333333334">Development</tspan></text></g></g><g class="tactic initial-access" transform="translate(149.42857142857142, 0)"><g class="techniques"><g class="technique T1659" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Content</tspan><tspan x="4" y="13.083333333333334">Injection</tspan></text></g><g class="technique T1189" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Drive-by</tspan><tspan x="4" y="13.083333333333334">Compromise</tspan></text></g><g class="technique T1190" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Exploit Public-Facing</tspan><tspan x="4" y="13.083333333333334">Application</tspan></text></g><g class="technique T1133" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">External</tspan><tspan x="4" y="13.083333333333334">Remote Services</tspan></text></g><g class="technique T1200" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Hardware</tspan><tspan x="4" y="13.083333333333334">Additions</tspan></text></g><g class="technique T1566" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="11.38888888888889">Phishing</tspan></text></g><g class="technique T1091" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Replication Through</tspan><tspan x="4" y="13.083333333333334">Removable Media</tspan></text></g><g class="technique T1195" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Supply Chain</tspan><tspan x="4" y="13.083333333333334">Compromise</tspan></text></g><g class="technique T1199" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Trusted</tspan><tspan x="4" y="13.083333333333334">Relationship</tspan></text></g><g class="technique T1078" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Valid Accounts</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="10.38888888888889">Initial Access</tspan></text></g></g><g class="tactic execution" transform="translate(224.1428571428571, 0)"><g class="techniques"><g class="technique T1651" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Cloud Administration</tspan><tspan x="4" y="13.083333333333334">Command</tspan></text></g><g class="technique T1059" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Command and</tspan><tspan x="4" y="13.083333333333334">Scripting Interpreter</tspan></text></g><g class="technique T1609" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Container</tspan><tspan x="4" y="13.083333333333334">Administration Command</tspan></text></g><g class="technique T1610" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Deploy</tspan><tspan x="4" y="13.083333333333334">Container</tspan></text></g><g class="technique T1203" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Exploitation for</tspan><tspan x="4" y="13.083333333333334">Client Execution</tspan></text></g><g class="technique T1559" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Inter-Process</tspan><tspan x="4" y="13.083333333333334">Communication</tspan></text></g><g class="technique T1106" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Native API</tspan></text></g><g class="technique T1053" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Scheduled</tspan><tspan x="4" y="13.083333333333334">Task/Job</tspan></text></g><g class="technique T1648" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Serverless</tspan><tspan x="4" y="13.083333333333334">Execution</tspan></text></g><g class="technique T1129" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Shared Modules</tspan></text></g><g class="technique T1072" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Software</tspan><tspan x="4" y="13.083333333333334">Deployment Tools</tspan></text></g><g class="technique T1569" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="9.38888888888889">System Services</tspan></text></g><g class="technique T1204" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">User Execution</tspan></text></g><g class="technique T1047" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Windows Management</tspan><tspan x="4" y="13.083333333333334">Instrumentation</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="11.38888888888889">Execution</tspan></text></g></g><g class="tactic persistence" transform="translate(298.85714285714283, 0)"><g class="techniques"><g class="technique T1098" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Account</tspan><tspan x="4" y="13.083333333333334">Manipulation</tspan></text></g><g class="technique T1197" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="11.38888888888889">BITS Jobs</tspan></text></g><g class="technique T1547" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#d27cf7" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Boot or Logon</tspan><tspan x="4" y="13.083333333333334">Autostart Execution</tspan></text></g><g class="technique T1037" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Boot or Logon</tspan><tspan x="4" y="13.083333333333334">Initialization Scripts</tspan></text></g><g class="technique T1176" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Browser</tspan><tspan x="4" y="13.083333333333334">Extensions</tspan></text></g><g class="technique T1554" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Compromise Host</tspan><tspan x="4" y="13.083333333333334">Software Binary</tspan></text></g><g class="technique T1136" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Create Account</tspan></text></g><g class="technique T1543" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#f16df5" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Create or Modify</tspan><tspan x="4" y="13.083333333333334">System Process</tspan></text></g><g class="technique T1546" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Event Triggered</tspan><tspan x="4" y="13.083333333333334">Execution</tspan></text></g><g class="technique T1133" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">External</tspan><tspan x="4" y="13.083333333333334">Remote Services</tspan></text></g><g class="technique T1574" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#e274f6" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Hijack</tspan><tspan x="4" y="13.083333333333334">Execution Flow</tspan></text></g><g class="technique T1525" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Implant</tspan><tspan x="4" y="13.083333333333334">Internal Image</tspan></text></g><g class="technique T1556" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Modify Authentication</tspan><tspan x="4" y="13.083333333333334">Process</tspan></text></g><g class="technique T1137" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Office Application</tspan><tspan x="4" y="13.083333333333334">Startup</tspan></text></g><g class="technique T1653" transform="translate(0, 236.66666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Power Settings</tspan></text></g><g class="technique T1542" transform="translate(0, 252.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Pre-OS Boot</tspan></text></g><g class="technique T1053" transform="translate(0, 268.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Scheduled</tspan><tspan x="4" y="13.083333333333334">Task/Job</tspan></text></g><g class="technique T1505" transform="translate(0, 284)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Server Software</tspan><tspan x="4" y="13.083333333333334">Component</tspan></text></g><g class="technique T1205" transform="translate(0, 299.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Traffic</tspan><tspan x="4" y="13.083333333333334">Signaling</tspan></text></g><g class="technique T1078" transform="translate(0, 315.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Valid Accounts</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="10.38888888888889">Persistence</tspan></text></g></g><g class="tactic privilege-escalation" transform="translate(373.57142857142856, 0)"><g class="techniques"><g class="technique T1548" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Abuse Elevation</tspan><tspan x="4" y="13.083333333333334">Control Mechanism</tspan></text></g><g class="technique T1134" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Access Token</tspan><tspan x="4" y="13.083333333333334">Manipulation</tspan></text></g><g class="technique T1098" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Account</tspan><tspan x="4" y="13.083333333333334">Manipulation</tspan></text></g><g class="technique T1547" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#d27cf7" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Boot or Logon</tspan><tspan x="4" y="13.083333333333334">Autostart Execution</tspan></text></g><g class="technique T1037" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Boot or Logon</tspan><tspan x="4" y="13.083333333333334">Initialization Scripts</tspan></text></g><g class="technique T1543" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#f16df5" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Create or Modify</tspan><tspan x="4" y="13.083333333333334">System Process</tspan></text></g><g class="technique T1484" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Domain or Tenant</tspan><tspan x="4" y="13.083333333333334">Policy Modification</tspan></text></g><g class="technique T1611" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Escape to Host</tspan></text></g><g class="technique T1546" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Event Triggered</tspan><tspan x="4" y="13.083333333333334">Execution</tspan></text></g><g class="technique T1068" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Exploitation for</tspan><tspan x="4" y="13.083333333333334">Privilege Escalation</tspan></text></g><g class="technique T1574" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#e274f6" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Hijack</tspan><tspan x="4" y="13.083333333333334">Execution Flow</tspan></text></g><g class="technique T1055" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Process</tspan><tspan x="4" y="13.083333333333334">Injection</tspan></text></g><g class="technique T1053" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Scheduled</tspan><tspan x="4" y="13.083333333333334">Task/Job</tspan></text></g><g class="technique T1078" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Valid Accounts</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="5.694444444444445">Privilege</tspan><tspan text-anchor="middle" x="37.357142857142854" y="13.083333333333334">Escalation</tspan></text></g></g><g class="tactic defense-evasion" transform="translate(448.2857142857142, 0)"><g class="techniques"><g class="technique T1548" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Abuse Elevation</tspan><tspan x="4" y="13.083333333333334">Control Mechanism</tspan></text></g><g class="technique T1134" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Access Token</tspan><tspan x="4" y="13.083333333333334">Manipulation</tspan></text></g><g class="technique T1197" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="11.38888888888889">BITS Jobs</tspan></text></g><g class="technique T1612" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Build</tspan><tspan x="4" y="13.083333333333334">Image on Host</tspan></text></g><g class="technique T1622" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Debugger</tspan><tspan x="4" y="13.083333333333334">Evasion</tspan></text></g><g class="technique T1140" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Deobfuscate/Decode</tspan><tspan x="4" y="13.083333333333334">Files or Information</tspan></text></g><g class="technique T1610" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Deploy</tspan><tspan x="4" y="13.083333333333334">Container</tspan></text></g><g class="technique T1006" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Direct</tspan><tspan x="4" y="13.083333333333334">Volume Access</tspan></text></g><g class="technique T1484" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Domain or Tenant</tspan><tspan x="4" y="13.083333333333334">Policy Modification</tspan></text></g><g class="technique T1480" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Execution</tspan><tspan x="4" y="13.083333333333334">Guardrails</tspan></text></g><g class="technique T1211" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Exploitation for</tspan><tspan x="4" y="13.083333333333334">Defense Evasion</tspan></text></g><g class="technique T1222" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="4.462962962962964">File and</tspan><tspan x="4" y="9.38888888888889">Directory Permissions</tspan><tspan x="4" y="14.314814814814817">Modification</tspan></text></g><g class="technique T1564" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Hide Artifacts</tspan></text></g><g class="technique T1574" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#e274f6" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Hijack</tspan><tspan x="4" y="13.083333333333334">Execution Flow</tspan></text></g><g class="technique T1562" transform="translate(0, 236.66666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="9.38888888888889">Impair Defenses</tspan></text></g><g class="technique T1656" transform="translate(0, 252.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Impersonation</tspan></text></g><g class="technique T1070" transform="translate(0, 268.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Indicator</tspan><tspan x="4" y="13.083333333333334">Removal</tspan></text></g><g class="technique T1202" transform="translate(0, 284)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Indirect Command</tspan><tspan x="4" y="13.083333333333334">Execution</tspan></text></g><g class="technique T1036" transform="translate(0, 299.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Masquerading</tspan></text></g><g class="technique T1556" transform="translate(0, 315.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Modify Authentication</tspan><tspan x="4" y="13.083333333333334">Process</tspan></text></g><g class="technique T1578" transform="translate(0, 331.3333333333333)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Modify Cloud Compute</tspan><tspan x="4" y="13.083333333333334">Infrastructure</tspan></text></g><g class="technique T1666" transform="translate(0, 347.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Modify Cloud</tspan><tspan x="4" y="13.083333333333334">Resource Hierarchy</tspan></text></g><g class="technique T1112" transform="translate(0, 362.88888888888886)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="9.38888888888889">Modify Registry</tspan></text></g><g class="technique T1601" transform="translate(0, 378.6666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Modify</tspan><tspan x="4" y="13.083333333333334">System Image</tspan></text></g><g class="technique T1599" transform="translate(0, 394.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Network Boundary</tspan><tspan x="4" y="13.083333333333334">Bridging</tspan></text></g><g class="technique T1027" transform="translate(0, 410.2222222222222)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Obfuscated Files</tspan><tspan x="4" y="13.083333333333334">or Information</tspan></text></g><g class="technique T1647" transform="translate(0, 426)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Plist File</tspan><tspan x="4" y="13.083333333333334">Modification</tspan></text></g><g class="technique T1542" transform="translate(0, 441.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Pre-OS Boot</tspan></text></g><g class="technique T1055" transform="translate(0, 457.5555555555556)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Process</tspan><tspan x="4" y="13.083333333333334">Injection</tspan></text></g><g class="technique T1620" transform="translate(0, 473.3333333333333)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Reflective</tspan><tspan x="4" y="13.083333333333334">Code Loading</tspan></text></g><g class="technique T1207" transform="translate(0, 489.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Rogue Domain</tspan><tspan x="4" y="13.083333333333334">Controller</tspan></text></g><g class="technique T1014" transform="translate(0, 504.8888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="11.38888888888889">Rootkit</tspan></text></g><g class="technique T1553" transform="translate(0, 520.6666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Subvert</tspan><tspan x="4" y="13.083333333333334">Trust Controls</tspan></text></g><g class="technique T1218" transform="translate(0, 536.4444444444445)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System Binary</tspan><tspan x="4" y="13.083333333333334">Proxy Execution</tspan></text></g><g class="technique T1216" transform="translate(0, 552.2222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System Script</tspan><tspan x="4" y="13.083333333333334">Proxy Execution</tspan></text></g><g class="technique T1221" transform="translate(0, 568)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Template</tspan><tspan x="4" y="13.083333333333334">Injection</tspan></text></g><g class="technique T1205" transform="translate(0, 583.7777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Traffic</tspan><tspan x="4" y="13.083333333333334">Signaling</tspan></text></g><g class="technique T1127" transform="translate(0, 599.5555555555555)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="4.462962962962964">Trusted</tspan><tspan x="4" y="9.38888888888889">Developer Utilities</tspan><tspan x="4" y="14.314814814814817">Proxy Execution</tspan></text></g><g class="technique T1535" transform="translate(0, 615.3333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Unused/Unsupported</tspan><tspan x="4" y="13.083333333333334">Cloud Regions</tspan></text></g><g class="technique T1550" transform="translate(0, 631.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="4.462962962962964">Use Alternate</tspan><tspan x="4" y="9.38888888888889">Authentication</tspan><tspan x="4" y="14.314814814814817">Material</tspan></text></g><g class="technique T1078" transform="translate(0, 646.8888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Valid Accounts</tspan></text></g><g class="technique T1497" transform="translate(0, 662.6666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Virtualization/Sandbox</tspan><tspan x="4" y="13.083333333333334">Evasion</tspan></text></g><g class="technique T1600" transform="translate(0, 678.4444444444445)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Weaken</tspan><tspan x="4" y="13.083333333333334">Encryption</tspan></text></g><g class="technique T1220" transform="translate(0, 694.2222222222222)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#b38bf9" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">XSL Script</tspan><tspan x="4" y="13.083333333333334">Processing</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="9.38888888888889">Defense Evasion</tspan></text></g></g><g class="tactic credential-access" transform="translate(523, 0)"><g class="techniques"><g class="technique T1557" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#b38bf9" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="9.38888888888889">Adversary-in-the-Middle</tspan></text></g><g class="technique T1110" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Brute Force</tspan></text></g><g class="technique T1555" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#d27cf7" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Credentials from</tspan><tspan x="4" y="13.083333333333334">Password Stores</tspan></text></g><g class="technique T1212" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Exploitation for</tspan><tspan x="4" y="13.083333333333334">Credential Access</tspan></text></g><g class="technique T1187" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Forced</tspan><tspan x="4" y="13.083333333333334">Authentication</tspan></text></g><g class="technique T1606" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Forge</tspan><tspan x="4" y="13.083333333333334">Web Credentials</tspan></text></g><g class="technique T1056" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Input Capture</tspan></text></g><g class="technique T1556" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Modify Authentication</tspan><tspan x="4" y="13.083333333333334">Process</tspan></text></g><g class="technique T1111" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="4.462962962962964">Multi-Factor</tspan><tspan x="4" y="9.38888888888889">Authentication</tspan><tspan x="4" y="14.314814814814817">Interception</tspan></text></g><g class="technique T1621" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="4.462962962962964">Multi-Factor</tspan><tspan x="4" y="9.38888888888889">Authentication</tspan><tspan x="4" y="14.314814814814817">Request Generation</tspan></text></g><g class="technique T1040" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#f16df5" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Network</tspan><tspan x="4" y="13.083333333333334">Sniffing</tspan></text></g><g class="technique T1003" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">OS Credential</tspan><tspan x="4" y="13.083333333333334">Dumping</tspan></text></g><g class="technique T1528" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Steal Application</tspan><tspan x="4" y="13.083333333333334">Access Token</tspan></text></g><g class="technique T1649" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="4.462962962962964">Steal or</tspan><tspan x="4" y="9.38888888888889">Forge Authentication</tspan><tspan x="4" y="14.314814814814817">Certificates</tspan></text></g><g class="technique T1558" transform="translate(0, 236.66666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Steal or Forge</tspan><tspan x="4" y="13.083333333333334">Kerberos Tickets</tspan></text></g><g class="technique T1539" transform="translate(0, 252.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Steal Web</tspan><tspan x="4" y="13.083333333333334">Session Cookie</tspan></text></g><g class="technique T1552" transform="translate(0, 268.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Unsecured</tspan><tspan x="4" y="13.083333333333334">Credentials</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="5.694444444444445">Credential</tspan><tspan text-anchor="middle" x="37.357142857142854" y="13.083333333333334">Access</tspan></text></g></g><g class="tactic discovery" transform="translate(597.7142857142857, 0)"><g class="techniques"><g class="technique T1087" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Account</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1010" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Application</tspan><tspan x="4" y="13.083333333333334">Window Discovery</tspan></text></g><g class="technique T1217" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Browser Information</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1580" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Cloud Infrastructure</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1538" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Cloud Service</tspan><tspan x="4" y="13.083333333333334">Dashboard</tspan></text></g><g class="technique T1526" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Cloud Service</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1619" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Cloud Storage</tspan><tspan x="4" y="13.083333333333334">Object Discovery</tspan></text></g><g class="technique T1613" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Container and</tspan><tspan x="4" y="13.083333333333334">Resource Discovery</tspan></text></g><g class="technique T1622" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Debugger</tspan><tspan x="4" y="13.083333333333334">Evasion</tspan></text></g><g class="technique T1652" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Device Driver</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1482" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Domain</tspan><tspan x="4" y="13.083333333333334">Trust Discovery</tspan></text></g><g class="technique T1083" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">File and Directory</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1615" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#b38bf9" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Group Policy</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1654" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="9.38888888888889">Log Enumeration</tspan></text></g><g class="technique T1046" transform="translate(0, 236.66666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Network Service</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1135" transform="translate(0, 252.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#d27cf7" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Network</tspan><tspan x="4" y="13.083333333333334">Share Discovery</tspan></text></g><g class="technique T1040" transform="translate(0, 268.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#f16df5" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Network</tspan><tspan x="4" y="13.083333333333334">Sniffing</tspan></text></g><g class="technique T1201" transform="translate(0, 284)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Password Policy</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1120" transform="translate(0, 299.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Peripheral</tspan><tspan x="4" y="13.083333333333334">Device Discovery</tspan></text></g><g class="technique T1069" transform="translate(0, 315.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Permission</tspan><tspan x="4" y="13.083333333333334">Groups Discovery</tspan></text></g><g class="technique T1057" transform="translate(0, 331.3333333333333)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#c384f8" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Process</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1012" transform="translate(0, 347.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Query Registry</tspan></text></g><g class="technique T1018" transform="translate(0, 362.88888888888886)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Remote System</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1518" transform="translate(0, 378.6666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Software</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1082" transform="translate(0, 394.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System Information</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1614" transform="translate(0, 410.2222222222222)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">System Location</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1016" transform="translate(0, 426)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="4.462962962962964">System</tspan><tspan x="4" y="9.38888888888889">Network Configuration</tspan><tspan x="4" y="14.314814814814817">Discovery</tspan></text></g><g class="technique T1049" transform="translate(0, 441.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#f16df5" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System Network</tspan><tspan x="4" y="13.083333333333334">Connections Discovery</tspan></text></g><g class="technique T1033" transform="translate(0, 457.5555555555556)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System Owner/User</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1007" transform="translate(0, 473.3333333333333)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System Service</tspan><tspan x="4" y="13.083333333333334">Discovery</tspan></text></g><g class="technique T1124" transform="translate(0, 489.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System</tspan><tspan x="4" y="13.083333333333334">Time Discovery</tspan></text></g><g class="technique T1497" transform="translate(0, 504.8888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Virtualization/Sandbox</tspan><tspan x="4" y="13.083333333333334">Evasion</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="11.38888888888889">Discovery</tspan></text></g></g><g class="tactic lateral-movement" transform="translate(672.4285714285713, 0)"><g class="techniques"><g class="technique T1210" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Exploitation of</tspan><tspan x="4" y="13.083333333333334">Remote Services</tspan></text></g><g class="technique T1534" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Internal</tspan><tspan x="4" y="13.083333333333334">Spearphishing</tspan></text></g><g class="technique T1570" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#b38bf9" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Lateral</tspan><tspan x="4" y="13.083333333333334">Tool Transfer</tspan></text></g><g class="technique T1563" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Remote Service</tspan><tspan x="4" y="13.083333333333334">Session Hijacking</tspan></text></g><g class="technique T1021" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="9.38888888888889">Remote Services</tspan></text></g><g class="technique T1091" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Replication Through</tspan><tspan x="4" y="13.083333333333334">Removable Media</tspan></text></g><g class="technique T1072" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Software</tspan><tspan x="4" y="13.083333333333334">Deployment Tools</tspan></text></g><g class="technique T1080" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Taint</tspan><tspan x="4" y="13.083333333333334">Shared Content</tspan></text></g><g class="technique T1550" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="4.462962962962964">Use Alternate</tspan><tspan x="4" y="9.38888888888889">Authentication</tspan><tspan x="4" y="14.314814814814817">Material</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="5.694444444444445">Lateral</tspan><tspan text-anchor="middle" x="37.357142857142854" y="13.083333333333334">Movement</tspan></text></g></g><g class="tactic collection" transform="translate(747.1428571428571, 0)"><g class="techniques"><g class="technique T1557" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#b38bf9" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="9.38888888888889">Adversary-in-the-Middle</tspan></text></g><g class="technique T1560" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Archive</tspan><tspan x="4" y="13.083333333333334">Collected Data</tspan></text></g><g class="technique T1123" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#d27cf7" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Audio Capture</tspan></text></g><g class="technique T1119" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Automated</tspan><tspan x="4" y="13.083333333333334">Collection</tspan></text></g><g class="technique T1185" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Browser Session</tspan><tspan x="4" y="13.083333333333334">Hijacking</tspan></text></g><g class="technique T1115" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#e274f6" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Clipboard Data</tspan></text></g><g class="technique T1530" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Data from</tspan><tspan x="4" y="13.083333333333334">Cloud Storage</tspan></text></g><g class="technique T1602" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="4.462962962962964">Data</tspan><tspan x="4" y="9.38888888888889">from Configuration</tspan><tspan x="4" y="14.314814814814817">Repository</tspan></text></g><g class="technique T1213" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Data from Information</tspan><tspan x="4" y="13.083333333333334">Repositories</tspan></text></g><g class="technique T1005" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Data from</tspan><tspan x="4" y="13.083333333333334">Local System</tspan></text></g><g class="technique T1039" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Data from Network</tspan><tspan x="4" y="13.083333333333334">Shared Drive</tspan></text></g><g class="technique T1025" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Data from</tspan><tspan x="4" y="13.083333333333334">Removable Media</tspan></text></g><g class="technique T1074" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Data Staged</tspan></text></g><g class="technique T1114" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Email</tspan><tspan x="4" y="13.083333333333334">Collection</tspan></text></g><g class="technique T1056" transform="translate(0, 236.66666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Input Capture</tspan></text></g><g class="technique T1113" transform="translate(0, 252.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Screen Capture</tspan></text></g><g class="technique T1125" transform="translate(0, 268.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Video Capture</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="10.38888888888889">Collection</tspan></text></g></g><g class="tactic command-and-control" transform="translate(821.8571428571428, 0)"><g class="techniques"><g class="technique T1071" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Application</tspan><tspan x="4" y="13.083333333333334">Layer Protocol</tspan></text></g><g class="technique T1092" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Communication Through</tspan><tspan x="4" y="13.083333333333334">Removable Media</tspan></text></g><g class="technique T1659" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Content</tspan><tspan x="4" y="13.083333333333334">Injection</tspan></text></g><g class="technique T1132" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Data Encoding</tspan></text></g><g class="technique T1001" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Data</tspan><tspan x="4" y="13.083333333333334">Obfuscation</tspan></text></g><g class="technique T1568" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Dynamic</tspan><tspan x="4" y="13.083333333333334">Resolution</tspan></text></g><g class="technique T1573" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#c384f8" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Encrypted</tspan><tspan x="4" y="13.083333333333334">Channel</tspan></text></g><g class="technique T1008" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Fallback</tspan><tspan x="4" y="13.083333333333334">Channels</tspan></text></g><g class="technique T1665" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Hide</tspan><tspan x="4" y="13.083333333333334">Infrastructure</tspan></text></g><g class="technique T1105" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Ingress</tspan><tspan x="4" y="13.083333333333334">Tool Transfer</tspan></text></g><g class="technique T1104" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Multi-Stage</tspan><tspan x="4" y="13.083333333333334">Channels</tspan></text></g><g class="technique T1095" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Non-Application</tspan><tspan x="4" y="13.083333333333334">Layer Protocol</tspan></text></g><g class="technique T1571" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#b38bf9" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Non-Standard</tspan><tspan x="4" y="13.083333333333334">Port</tspan></text></g><g class="technique T1572" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Protocol</tspan><tspan x="4" y="13.083333333333334">Tunneling</tspan></text></g><g class="technique T1090" transform="translate(0, 236.66666666666666)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="11.38888888888889">Proxy</tspan></text></g><g class="technique T1219" transform="translate(0, 252.44444444444446)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Remote</tspan><tspan x="4" y="13.083333333333334">Access Software</tspan></text></g><g class="technique T1205" transform="translate(0, 268.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Traffic</tspan><tspan x="4" y="13.083333333333334">Signaling</tspan></text></g><g class="technique T1102" transform="translate(0, 284)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Web Service</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="5.694444444444445">Command</tspan><tspan text-anchor="middle" x="37.357142857142854" y="13.083333333333334">and Control</tspan></text></g></g><g class="tactic exfiltration" transform="translate(896.5714285714284, 0)"><g class="techniques"><g class="technique T1020" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#f16df5" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Automated</tspan><tspan x="4" y="13.083333333333334">Exfiltration</tspan></text></g><g class="technique T1030" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#85a2fd" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Data Transfer</tspan><tspan x="4" y="13.083333333333334">Size Limits</tspan></text></g><g class="technique T1048" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Exfiltration Over</tspan><tspan x="4" y="13.083333333333334">Alternative Protocol</tspan></text></g><g class="technique T1041" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#a493fb" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Exfiltration</tspan><tspan x="4" y="13.083333333333334">Over C2 Channel</tspan></text></g><g class="technique T1011" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Exfiltration Over</tspan><tspan x="4" y="13.083333333333334">Other Network Medium</tspan></text></g><g class="technique T1052" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Exfiltration Over</tspan><tspan x="4" y="13.083333333333334">Physical Medium</tspan></text></g><g class="technique T1567" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Exfiltration</tspan><tspan x="4" y="13.083333333333334">Over Web Service</tspan></text></g><g class="technique T1029" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Scheduled</tspan><tspan x="4" y="13.083333333333334">Transfer</tspan></text></g><g class="technique T1537" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Transfer Data</tspan><tspan x="4" y="13.083333333333334">to Cloud Account</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="10.38888888888889">Exfiltration</tspan></text></g></g><g class="tactic impact" transform="translate(971.2857142857142, 0)"><g class="techniques"><g class="technique T1531" transform="translate(0, 15.777777777777779)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Account</tspan><tspan x="4" y="13.083333333333334">Access Removal</tspan></text></g><g class="technique T1485" transform="translate(0, 31.555555555555557)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Data</tspan><tspan x="4" y="13.083333333333334">Destruction</tspan></text></g><g class="technique T1486" transform="translate(0, 47.333333333333336)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Data Encrypted</tspan><tspan x="4" y="13.083333333333334">for Impact</tspan></text></g><g class="technique T1565" transform="translate(0, 63.111111111111114)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#949afc" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Data</tspan><tspan x="4" y="13.083333333333334">Manipulation</tspan></text></g><g class="technique T1491" transform="translate(0, 78.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="10.38888888888889">Defacement</tspan></text></g><g class="technique T1561" transform="translate(0, 94.66666666666667)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="11.38888888888889">Disk Wipe</tspan></text></g><g class="technique T1499" transform="translate(0, 110.44444444444444)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Endpoint Denial</tspan><tspan x="4" y="13.083333333333334">of Service</tspan></text></g><g class="technique T1657" transform="translate(0, 126.22222222222223)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="9.38888888888889">Financial Theft</tspan></text></g><g class="technique T1495" transform="translate(0, 142)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#75a9fe" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">Firmware</tspan><tspan x="4" y="13.083333333333334">Corruption</tspan></text></g><g class="technique T1490" transform="translate(0, 157.77777777777777)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Inhibit</tspan><tspan x="4" y="13.083333333333334">System Recovery</tspan></text></g><g class="technique T1498" transform="translate(0, 173.55555555555554)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Network Denial</tspan><tspan x="4" y="13.083333333333334">of Service</tspan></text></g><g class="technique T1496" transform="translate(0, 189.33333333333334)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ffffff" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,12" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="#000000"><tspan x="4" y="5.694444444444445">Resource</tspan><tspan x="4" y="13.083333333333334">Hijacking</tspan></text></g><g class="technique T1489" transform="translate(0, 205.1111111111111)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#ff66f4" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="10.38888888888889">Service Stop</tspan></text></g><g class="technique T1529" transform="translate(0, 220.88888888888889)"><rect class="cell" height="15.777777777777779" width="74.71428571428571" fill="#c384f8" stroke="#6B7279"/><polygon class="sidebar" transform="translate(0, 15.777777777777779)" points="0,0 12,0 12,0" fill="#6B7279" visibility="hidden"/><text font-size="4.205900621118012" fill="black"><tspan x="4" y="5.694444444444445">System</tspan><tspan x="4" y="13.083333333333334">Shutdown/Reboot</tspan></text></g></g><g class="subtechniques"/><g class="tactic-label"><text font-size="6.311111111111112" fill="black" font-weight="bold"><tspan text-anchor="middle" x="37.357142857142854" y="11.38888888888889">Impact</tspan></text></g></g></g></g></g></svg>
\ No newline at end of file