CIC-ATT&CK

Critical Infrastructure Cybersecurity

Secure Environment

Critical Infrastructure Cybersecurity Framework|Secure Environment

CIC-ATT&CKCRITICAL INFRASTRUCTURECYBERSECURITY

Home TacticsPriv Esc

ATT&CK Tactics

Tactics represent the "why" of an ATT&CK technique. They are the adversary's tactical goals: the reason for performing an action. There are 14 tactics in the Enterprise ATT&CK Matrix.

Recon

Resource Dev

Initial Access

Execution

Persistence

Priv Esc

Defense Evasion

Cred Access

Discovery

Lateral Move

Collection

C2

Exfiltration

Impact

TA0004

Privilege Escalation

The adversary is trying to gain higher-level permissions. Privilege Escalation consists of techniques that adversaries use to gain higher-level permissions on a system or network.

Associated Techniques(6)

Abuse Elevation Control Mechanism

Adversaries may circumvent mechanisms designed to control elevated privileges to gain higher-level permissions.

6 sub-techniques

Access Token Manipulation

Adversaries may modify access tokens to operate under a different user or system security context.

5 sub-techniques

Escape to Host

Adversaries may break out of a container to gain access to the underlying host.

Exploitation for Privilege Escalation

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.

Process Injection

Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges.

12 sub-techniques

Domain/Tenant Policy Modification

Adversaries may modify the configuration settings of a domain or identity tenant to evade defenses and/or escalate privileges.

2 sub-techniques

By using this website, you agree to our legal documents. Please review our Privacy Policy, Terms of Use, and Accessibility Statement in the footer.