Reference documentation and code samples for the Google Cloud Security Command Center V2 Client class Technique.
MITRE ATT&CK techniques that can be referenced by Security Command Center findings. See: https://attack.mitre.org/techniques/enterprise/
Protobuf type google.cloud.securitycenter.v2.MitreAttack.Technique
Namespace
Google \ Cloud \ SecurityCenter \ V2 \ MitreAttackMethods
static::name
Parameter | |
---|---|
Name | Description |
value |
mixed
|
static::value
Parameter | |
---|---|
Name | Description |
name |
mixed
|
Constants
TECHNIQUE_UNSPECIFIED
Value: 0
Unspecified value.
Generated from protobuf enum TECHNIQUE_UNSPECIFIED = 0;
DATA_OBFUSCATION
Value: 70
T1001
Generated from protobuf enum DATA_OBFUSCATION = 70;
DATA_OBFUSCATION_STEGANOGRAPHY
Value: 71
T1001.002
Generated from protobuf enum DATA_OBFUSCATION_STEGANOGRAPHY = 71;
OS_CREDENTIAL_DUMPING
Value: 114
T1003
Generated from protobuf enum OS_CREDENTIAL_DUMPING = 114;
OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM
Value: 115
T1003.007
Generated from protobuf enum OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM = 115;
OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW
Value: 122
T1003.008
Generated from protobuf enum OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW = 122;
DATA_FROM_LOCAL_SYSTEM
Value: 117
T1005
Generated from protobuf enum DATA_FROM_LOCAL_SYSTEM = 117;
AUTOMATED_EXFILTRATION
Value: 68
T1020
Generated from protobuf enum AUTOMATED_EXFILTRATION = 68;
OBFUSCATED_FILES_OR_INFO
Value: 72
T1027
Generated from protobuf enum OBFUSCATED_FILES_OR_INFO = 72;
STEGANOGRAPHY
Value: 73
T1027.003
Generated from protobuf enum STEGANOGRAPHY = 73;
COMPILE_AFTER_DELIVERY
Value: 74
T1027.004
Generated from protobuf enum COMPILE_AFTER_DELIVERY = 74;
COMMAND_OBFUSCATION
Value: 75
T1027.010
Generated from protobuf enum COMMAND_OBFUSCATION = 75;
SCHEDULED_TRANSFER
Value: 120
T1029
Generated from protobuf enum SCHEDULED_TRANSFER = 120;
SYSTEM_OWNER_USER_DISCOVERY
Value: 118
T1033
Generated from protobuf enum SYSTEM_OWNER_USER_DISCOVERY = 118;
MASQUERADING
Value: 49
T1036
Generated from protobuf enum MASQUERADING = 49;
MATCH_LEGITIMATE_NAME_OR_LOCATION
Value: 50
T1036.005
Generated from protobuf enum MATCH_LEGITIMATE_NAME_OR_LOCATION = 50;
BOOT_OR_LOGON_INITIALIZATION_SCRIPTS
Value: 37
T1037
Generated from protobuf enum BOOT_OR_LOGON_INITIALIZATION_SCRIPTS = 37;
STARTUP_ITEMS
Value: 38
T1037.005
Generated from protobuf enum STARTUP_ITEMS = 38;
NETWORK_SERVICE_DISCOVERY
Value: 32
T1046
Generated from protobuf enum NETWORK_SERVICE_DISCOVERY = 32;
SCHEDULED_TASK_JOB
Value: 89
T1053
Generated from protobuf enum SCHEDULED_TASK_JOB = 89;
SCHEDULED_TASK_JOB_CRON
Value: 119
T1053.003
Generated from protobuf enum SCHEDULED_TASK_JOB_CRON = 119;
CONTAINER_ORCHESTRATION_JOB
Value: 90
T1053.007
Generated from protobuf enum CONTAINER_ORCHESTRATION_JOB = 90;
PROCESS_INJECTION
Value: 93
T1055
Generated from protobuf enum PROCESS_INJECTION = 93;
INPUT_CAPTURE
Value: 103
T1056
Generated from protobuf enum INPUT_CAPTURE = 103;
INPUT_CAPTURE_KEYLOGGING
Value: 104
T1056.001
Generated from protobuf enum INPUT_CAPTURE_KEYLOGGING = 104;
PROCESS_DISCOVERY
Value: 56
T1057
Generated from protobuf enum PROCESS_DISCOVERY = 56;
COMMAND_AND_SCRIPTING_INTERPRETER
Value: 6
T1059
Generated from protobuf enum COMMAND_AND_SCRIPTING_INTERPRETER = 6;
UNIX_SHELL
Value: 7
T1059.004
Generated from protobuf enum UNIX_SHELL = 7;
PYTHON
Value: 59
T1059.006
Generated from protobuf enum PYTHON = 59;
EXPLOITATION_FOR_PRIVILEGE_ESCALATION
Value: 63
T1068
Generated from protobuf enum EXPLOITATION_FOR_PRIVILEGE_ESCALATION = 63;
PERMISSION_GROUPS_DISCOVERY
Value: 18
T1069
Generated from protobuf enum PERMISSION_GROUPS_DISCOVERY = 18;
CLOUD_GROUPS
Value: 19
T1069.003
Generated from protobuf enum CLOUD_GROUPS = 19;
INDICATOR_REMOVAL
Value: 123
T1070
Generated from protobuf enum INDICATOR_REMOVAL = 123;
INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS
Value: 124
T1070.002
Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS = 124;
INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY
Value: 125
T1070.003
Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY = 125;
INDICATOR_REMOVAL_FILE_DELETION
Value: 64
T1070.004
Generated from protobuf enum INDICATOR_REMOVAL_FILE_DELETION = 64;
INDICATOR_REMOVAL_TIMESTOMP
Value: 128
T1070.006
Generated from protobuf enum INDICATOR_REMOVAL_TIMESTOMP = 128;
INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA
Value: 126
T1070.008
Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA = 126;
APPLICATION_LAYER_PROTOCOL
Value: 45
T1071
Generated from protobuf enum APPLICATION_LAYER_PROTOCOL = 45;
DNS
Value: 46
T1071.004
Generated from protobuf enum DNS = 46;
SOFTWARE_DEPLOYMENT_TOOLS
Value: 47
T1072
Generated from protobuf enum SOFTWARE_DEPLOYMENT_TOOLS = 47;
VALID_ACCOUNTS
Value: 14
T1078
Generated from protobuf enum VALID_ACCOUNTS = 14;
DEFAULT_ACCOUNTS
Value: 35
T1078.001
Generated from protobuf enum DEFAULT_ACCOUNTS = 35;
LOCAL_ACCOUNTS
Value: 15
T1078.003
Generated from protobuf enum LOCAL_ACCOUNTS = 15;
CLOUD_ACCOUNTS
Value: 16
T1078.004
Generated from protobuf enum CLOUD_ACCOUNTS = 16;
FILE_AND_DIRECTORY_DISCOVERY
Value: 121
T1083
Generated from protobuf enum FILE_AND_DIRECTORY_DISCOVERY = 121;
ACCOUNT_DISCOVERY_LOCAL_ACCOUNT
Value: 116
T1087.001
Generated from protobuf enum ACCOUNT_DISCOVERY_LOCAL_ACCOUNT = 116;
PROXY
Value: 9
T1090
Generated from protobuf enum PROXY = 9;
EXTERNAL_PROXY
Value: 10
T1090.002
Generated from protobuf enum EXTERNAL_PROXY = 10;
MULTI_HOP_PROXY
Value: 11
T1090.003
Generated from protobuf enum MULTI_HOP_PROXY = 11;
ACCOUNT_MANIPULATION
Value: 22
T1098
Generated from protobuf enum ACCOUNT_MANIPULATION = 22;
ADDITIONAL_CLOUD_CREDENTIALS
Value: 40
T1098.001
Generated from protobuf enum ADDITIONAL_CLOUD_CREDENTIALS = 40;
ADDITIONAL_CLOUD_ROLES
Value: 67
T1098.003
Generated from protobuf enum ADDITIONAL_CLOUD_ROLES = 67;
SSH_AUTHORIZED_KEYS
Value: 23
T1098.004
Generated from protobuf enum SSH_AUTHORIZED_KEYS = 23;
ADDITIONAL_CONTAINER_CLUSTER_ROLES
Value: 58
T1098.006
Generated from protobuf enum ADDITIONAL_CONTAINER_CLUSTER_ROLES = 58;
MULTI_STAGE_CHANNELS
Value: 76
T1104
Generated from protobuf enum MULTI_STAGE_CHANNELS = 76;
INGRESS_TOOL_TRANSFER
Value: 3
T1105
Generated from protobuf enum INGRESS_TOOL_TRANSFER = 3;
NATIVE_API
Value: 4
T1106
Generated from protobuf enum NATIVE_API = 4;
BRUTE_FORCE
Value: 44
T1110
Generated from protobuf enum BRUTE_FORCE = 44;
AUTOMATED_COLLECTION
Value: 94
T1119
Generated from protobuf enum AUTOMATED_COLLECTION = 94;
SHARED_MODULES
Value: 5
T1129
Generated from protobuf enum SHARED_MODULES = 5;
DATA_ENCODING
Value: 77
T1132
Generated from protobuf enum DATA_ENCODING = 77;
STANDARD_ENCODING
Value: 78
T1132.001
Generated from protobuf enum STANDARD_ENCODING = 78;
ACCESS_TOKEN_MANIPULATION
Value: 33
T1134
Generated from protobuf enum ACCESS_TOKEN_MANIPULATION = 33;
TOKEN_IMPERSONATION_OR_THEFT
Value: 39
T1134.001
Generated from protobuf enum TOKEN_IMPERSONATION_OR_THEFT = 39;
CREATE_ACCOUNT
Value: 79
T1136
Generated from protobuf enum CREATE_ACCOUNT = 79;
LOCAL_ACCOUNT
Value: 80
T1136.001
Generated from protobuf enum LOCAL_ACCOUNT = 80;
DEOBFUSCATE_DECODE_FILES_OR_INFO
Value: 95
T1140
Generated from protobuf enum DEOBFUSCATE_DECODE_FILES_OR_INFO = 95;
EXPLOIT_PUBLIC_FACING_APPLICATION
Value: 27
T1190
Generated from protobuf enum EXPLOIT_PUBLIC_FACING_APPLICATION = 27;
SUPPLY_CHAIN_COMPROMISE
Value: 129
T1195
Generated from protobuf enum SUPPLY_CHAIN_COMPROMISE = 129;
COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS
Value: 130
T1195.001
Generated from protobuf enum COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS = 130;
EXPLOITATION_FOR_CLIENT_EXECUTION
Value: 134
T1203
Generated from protobuf enum EXPLOITATION_FOR_CLIENT_EXECUTION = 134;
USER_EXECUTION
Value: 69
T1204
Generated from protobuf enum USER_EXECUTION = 69;
LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION
Value: 135
T1222.002
Generated from protobuf enum LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION = 135;
DOMAIN_POLICY_MODIFICATION
Value: 30
T1484
Generated from protobuf enum DOMAIN_POLICY_MODIFICATION = 30;
DATA_DESTRUCTION
Value: 29
T1485
Generated from protobuf enum DATA_DESTRUCTION = 29;
DATA_ENCRYPTED_FOR_IMPACT
Value: 132
T1486
Generated from protobuf enum DATA_ENCRYPTED_FOR_IMPACT = 132;
SERVICE_STOP
Value: 52
T1489
Generated from protobuf enum SERVICE_STOP = 52;
INHIBIT_SYSTEM_RECOVERY
Value: 36
T1490
Generated from protobuf enum INHIBIT_SYSTEM_RECOVERY = 36;
FIRMWARE_CORRUPTION
Value: 81
T1495
Generated from protobuf enum FIRMWARE_CORRUPTION = 81;
RESOURCE_HIJACKING
Value: 8
T1496
Generated from protobuf enum RESOURCE_HIJACKING = 8;
NETWORK_DENIAL_OF_SERVICE
Value: 17
T1498
Generated from protobuf enum NETWORK_DENIAL_OF_SERVICE = 17;
CLOUD_SERVICE_DISCOVERY
Value: 48
T1526
Generated from protobuf enum CLOUD_SERVICE_DISCOVERY = 48;
STEAL_APPLICATION_ACCESS_TOKEN
Value: 42
T1528
Generated from protobuf enum STEAL_APPLICATION_ACCESS_TOKEN = 42;
ACCOUNT_ACCESS_REMOVAL
Value: 51
T1531
Generated from protobuf enum ACCOUNT_ACCESS_REMOVAL = 51;
TRANSFER_DATA_TO_CLOUD_ACCOUNT
Value: 91
T1537
Generated from protobuf enum TRANSFER_DATA_TO_CLOUD_ACCOUNT = 91;
STEAL_WEB_SESSION_COOKIE
Value: 25
T1539
Generated from protobuf enum STEAL_WEB_SESSION_COOKIE = 25;
CREATE_OR_MODIFY_SYSTEM_PROCESS
Value: 24
T1543
Generated from protobuf enum CREATE_OR_MODIFY_SYSTEM_PROCESS = 24;
EVENT_TRIGGERED_EXECUTION
Value: 65
T1546
Generated from protobuf enum EVENT_TRIGGERED_EXECUTION = 65;
BOOT_OR_LOGON_AUTOSTART_EXECUTION
Value: 82
T1547
Generated from protobuf enum BOOT_OR_LOGON_AUTOSTART_EXECUTION = 82;
KERNEL_MODULES_AND_EXTENSIONS
Value: 83
T1547.006
Generated from protobuf enum KERNEL_MODULES_AND_EXTENSIONS = 83;
SHORTCUT_MODIFICATION
Value: 127
T1547.009
Generated from protobuf enum SHORTCUT_MODIFICATION = 127;
ABUSE_ELEVATION_CONTROL_MECHANISM
Value: 34
T1548
Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM = 34;
ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID
Value: 136
T1548.001
Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID = 136;
ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING
Value: 109
T1548.003
Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING = 109;
UNSECURED_CREDENTIALS
Value: 13
T1552
Generated from protobuf enum UNSECURED_CREDENTIALS = 13;
CREDENTIALS_IN_FILES
Value: 105
T1552.001
Generated from protobuf enum CREDENTIALS_IN_FILES = 105;
BASH_HISTORY
Value: 96
T1552.003
Generated from protobuf enum BASH_HISTORY = 96;
PRIVATE_KEYS
Value: 97
T1552.004
Generated from protobuf enum PRIVATE_KEYS = 97;
SUBVERT_TRUST_CONTROL
Value: 106
T1553
Generated from protobuf enum SUBVERT_TRUST_CONTROL = 106;
INSTALL_ROOT_CERTIFICATE
Value: 107
T1553.004
Generated from protobuf enum INSTALL_ROOT_CERTIFICATE = 107;
COMPROMISE_HOST_SOFTWARE_BINARY
Value: 84
T1554
Generated from protobuf enum COMPROMISE_HOST_SOFTWARE_BINARY = 84;
CREDENTIALS_FROM_PASSWORD_STORES
Value: 98
T1555
Generated from protobuf enum CREDENTIALS_FROM_PASSWORD_STORES = 98;
MODIFY_AUTHENTICATION_PROCESS
Value: 28
T1556
Generated from protobuf enum MODIFY_AUTHENTICATION_PROCESS = 28;
PLUGGABLE_AUTHENTICATION_MODULES
Value: 108
T1556.003
Generated from protobuf enum PLUGGABLE_AUTHENTICATION_MODULES = 108;
MULTI_FACTOR_AUTHENTICATION
Value: 137
T1556.006
Generated from protobuf enum MULTI_FACTOR_AUTHENTICATION = 137;
IMPAIR_DEFENSES
Value: 31
T1562
Generated from protobuf enum IMPAIR_DEFENSES = 31;
DISABLE_OR_MODIFY_TOOLS
Value: 55
T1562.001
Generated from protobuf enum DISABLE_OR_MODIFY_TOOLS = 55;
INDICATOR_BLOCKING
Value: 110
T1562.006
Generated from protobuf enum INDICATOR_BLOCKING = 110;
DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM
Value: 111
T1562.012
Generated from protobuf enum DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM = 111;
HIDE_ARTIFACTS
Value: 85
T1564
Generated from protobuf enum HIDE_ARTIFACTS = 85;
HIDDEN_FILES_AND_DIRECTORIES
Value: 86
T1564.001
Generated from protobuf enum HIDDEN_FILES_AND_DIRECTORIES = 86;
HIDDEN_USERS
Value: 87
T1564.002
Generated from protobuf enum HIDDEN_USERS = 87;
EXFILTRATION_OVER_WEB_SERVICE
Value: 20
T1567
Generated from protobuf enum EXFILTRATION_OVER_WEB_SERVICE = 20;
EXFILTRATION_TO_CLOUD_STORAGE
Value: 21
T1567.002
Generated from protobuf enum EXFILTRATION_TO_CLOUD_STORAGE = 21;
DYNAMIC_RESOLUTION
Value: 12
T1568
Generated from protobuf enum DYNAMIC_RESOLUTION = 12;
LATERAL_TOOL_TRANSFER
Value: 41
T1570
Generated from protobuf enum LATERAL_TOOL_TRANSFER = 41;
HIJACK_EXECUTION_FLOW
Value: 112
T1574
Generated from protobuf enum HIJACK_EXECUTION_FLOW = 112;
HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING
Value: 113
T1574.006
Generated from protobuf enum HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING = 113;
MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE
Value: 26
T1578
Generated from protobuf enum MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE = 26;
CREATE_SNAPSHOT
Value: 54
T1578.001
Generated from protobuf enum CREATE_SNAPSHOT = 54;
CLOUD_INFRASTRUCTURE_DISCOVERY
Value: 53
T1580
Generated from protobuf enum CLOUD_INFRASTRUCTURE_DISCOVERY = 53;
DEVELOP_CAPABILITIES
Value: 99
T1587
Generated from protobuf enum DEVELOP_CAPABILITIES = 99;
DEVELOP_CAPABILITIES_MALWARE
Value: 100
T1587.001
Generated from protobuf enum DEVELOP_CAPABILITIES_MALWARE = 100;
OBTAIN_CAPABILITIES
Value: 43
T1588
Generated from protobuf enum OBTAIN_CAPABILITIES = 43;
OBTAIN_CAPABILITIES_MALWARE
Value: 101
T1588.001
Generated from protobuf enum OBTAIN_CAPABILITIES_MALWARE = 101;
OBTAIN_CAPABILITIES_VULNERABILITIES
Value: 133
T1588.006
Generated from protobuf enum OBTAIN_CAPABILITIES_VULNERABILITIES = 133;
ACTIVE_SCANNING
Value: 1
T1595
Generated from protobuf enum ACTIVE_SCANNING = 1;
SCANNING_IP_BLOCKS
Value: 2
T1595.001
Generated from protobuf enum SCANNING_IP_BLOCKS = 2;
STAGE_CAPABILITIES
Value: 88
T1608
Generated from protobuf enum STAGE_CAPABILITIES = 88;
UPLOAD_MALWARE
Value: 102
T1608.001
Generated from protobuf enum UPLOAD_MALWARE = 102;
CONTAINER_ADMINISTRATION_COMMAND
Value: 60
T1609
Generated from protobuf enum CONTAINER_ADMINISTRATION_COMMAND = 60;
DEPLOY_CONTAINER
Value: 66
T1610
Generated from protobuf enum DEPLOY_CONTAINER = 66;
ESCAPE_TO_HOST
Value: 61
T1611
Generated from protobuf enum ESCAPE_TO_HOST = 61;
CONTAINER_AND_RESOURCE_DISCOVERY
Value: 57
T1613
Generated from protobuf enum CONTAINER_AND_RESOURCE_DISCOVERY = 57;
REFLECTIVE_CODE_LOADING
Value: 92
T1620
Generated from protobuf enum REFLECTIVE_CODE_LOADING = 92;
STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES
Value: 62
T1649
Generated from protobuf enum STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES = 62;
FINANCIAL_THEFT
Value: 131
T1657
Generated from protobuf enum FINANCIAL_THEFT = 131;