<!-- Static HTMl page with correlation rule categories -->

<template>

  Korelační pravidla Sigma je možné zobrazit ve dvou možných frameworcích - MITRE a ENISA. Zvolený framework nemá vliv na mapování pravidel na jednotlivé zdroje logů, ale na
  pojmenování a kategorizaci.

  <h2>Kategorie</h2>

  V následující tabulce jsou zobrazeny kategorie ENISA a MITRE.

  <table border="0" cellpadding="0" cellspacing="0" id="sheet0" class="sheet0 gridlines">
    <col class="col0">
    <col class="col1">
    <col class="col2">
    <col class="col3">
    <col class="col4">
    <col class="col5">
    <col class="col6">
    <col class="col7">
    <tbody>
    <tr class="row0">
      <td class="column0 style5 s"><b>ENISA Kategorie <i>(Category)</i><hr></b></td>
      <td class="column1 style5 s"><b>Zkratka<hr></b></td>
      <td class="column2 style5 s"><b>MITRE Kategorie <i>(Tactic)</i><hr></b></td>
      <td class="column3 style5 s"><b>Zkratka<hr></b></td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row2">
      <td class="column0 style3 s style3" rowspan="2">Information Gathering</td>
      <td class="column1 style2 s style2" rowspan="2">infg</td>
      <td class="column2 style1 s">Reconnaissance</td>
      <td class="column3 style1 s">rec</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row3">
      <td class="column2 style1 s">Discovery</td>
      <td class="column3 style1 s">disc</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row4">
      <td class="column0 style1 s"><hr>Availability<hr></td>
      <td class="column1 style1 s"><hr>ava<hr></td>
      <td class="column2 style1 s"><hr>Resource Development<hr></td>
      <td class="column3 style1 s"><hr>resdev<hr></td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row5">
      <td class="column0 style1 s">Intrusion Attempts<hr></td>
      <td class="column1 style1 s">inatt<hr></td>
      <td class="column2 style1 s">Initial Access<hr></td>
      <td class="column3 style1 s">inac<hr></td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row6">
      <td class="column0 style3 s style3" rowspan="5">Intrusions</td>
      <td class="column1 style3 s style3" rowspan="5">int</td>
      <td class="column2 style1 s">Persistence</td>
      <td class="column3 style1 s">pers</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row7">
      <td class="column2 style1 s">Privilege Escalation</td>
      <td class="column3 style1 s">presc</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row8">
      <td class="column2 style1 s">Credential Access</td>
      <td class="column3 style1 s">ca</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row9">
      <td class="column2 style1 s">Command and Control</td>
      <td class="column3 style1 s">c&amp;c</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row10">
      <td class="column2 style1 s">Lateral Movement</td>
      <td class="column3 style1 s">lmov</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row11">
      <td class="column0 style1 s"><hr>Abusive Content<hr></td>
      <td class="column1 style1 s"><hr>abc<hr></td>
      <td class="column2 style1 s"><hr>Collection<hr></td>
      <td class="column3 style1 s"><hr>col<hr></td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row12">
      <td class="column0 style3 s style3" rowspan="2">Information Security</td>
      <td class="column1 style3 s style3" rowspan="2">insec</td>
      <td class="column2 style1 s">Exfiltration</td>
      <td class="column3 style1 s">exf</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row13">
      <td class="column2 style1 s">Defense Evasion</td>
      <td class="column3 style1 s">de</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row14">
      <td class="column0 style1 s"><hr>Malicious Code<hr></td>
      <td class="column1 style1 s"><hr>malw<hr></td>
      <td class="column2 style1 s"><hr>Execution<hr></td>
      <td class="column3 style1 s"><hr>exec<hr></td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    <tr class="row15">
      <td class="column0 style1 s">Fraud</td>
      <td class="column1 style1 s">fraud</td>
      <td class="column2 style1 s">Impact</td>
      <td class="column3 style1 s">imp</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
      <td class="column6">&nbsp;</td>
      <td class="column7">&nbsp;</td>
    </tr>
    </tbody>
  </table>

  <h2>Subkategorie</h2>

  MITRE používá narozdíl od ENISA ke kategorizaci i subkategorie. Všechny MITRE subkategorie jsou zobrazeny v následující tabulce:

  <table border="0" cellpadding="0" cellspacing="0" id="sheet0" class="sheet0 gridlines">
    <col class="col0">
    <col class="col1">
    <col class="col2">
    <col class="col3">
    <col class="col4">
    <col class="col5">
    <tbody>
    <tr class="row0">
      <td class="column0 style3 s"><b>Kategorie <i>(Tactic)</i><hr></b></td>
      <td class="column1 style3 s"><b>Subkategorie <i>(Technique)</i><hr></b></td>
      <td class="column2 style3 s"><b>Zkratka<hr></b></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row1">
      <td class="column0 style7 s style9" rowspan="10">Reconnaissance</td>
      <td class="column1 style4 s">Active Scanning</td>
      <td class="column2 style4 s">ascan</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row2">
      <td class="column1 style4 s">Gather Victim Host Information</td>
      <td class="column2 style4 s">gathvhi</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row3">
      <td class="column1 style4 s">Gather Victim Identity Information</td>
      <td class="column2 style4 s">gathvii</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row4">
      <td class="column1 style4 s">Gather Victim Network Information</td>
      <td class="column2 style4 s">gathvni</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row5">
      <td class="column1 style4 s">Gather Victim Org Information</td>
      <td class="column2 style4 s">gathvoi</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row6">
      <td class="column1 style4 s">Phishing for Information</td>
      <td class="column2 style4 s">phish</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row7">
      <td class="column1 style4 s">Search Closed Sources</td>
      <td class="column2 style4 s">scs</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row8">
      <td class="column1 style4 s">Search Open Technical Databases</td>
      <td class="column2 style4 s">sotd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row9">
      <td class="column1 style5 s">Search Open Websites/Domains</td>
      <td class="column2 style4 s">sowd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row10">
      <td class="column1 style4 s">Search Victim-Owned Websites<hr></td>
      <td class="column2 style4 s">svow<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row11">
      <td class="column0 style7 s style9" rowspan="7">Resource Development</td>
      <td class="column1 style4 s">Acquire Infrastructure</td>
      <td class="column2 style4 s">acqinf</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row12">
      <td class="column1 style4 s">Compromise Accounts</td>
      <td class="column2 style4 s">compacc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row13">
      <td class="column1 style4 s">Compromise Infrastructure</td>
      <td class="column2 style4 s">cominf</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row14">
      <td class="column1 style4 s">Develop Capabilities</td>
      <td class="column2 style4 s">devcap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row15">
      <td class="column1 style4 s">Establish Accounts</td>
      <td class="column2 style4 s">estacc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row16">
      <td class="column1 style4 s">Obtain Capabilities</td>
      <td class="column2 style4 s">obtcap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row17">
      <td class="column1 style4 s">Stage Capabilities<hr></td>
      <td class="column2 style4 s">stcap<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row18">
      <td class="column0 style10 s style12" rowspan="8">Initial Access</td>
      <td class="column1 style6 s">Drive-by Compromise</td>
      <td class="column2 style5 s">dvcomp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row19">
      <td class="column1 style5 s">Exploit Public-Facing Application</td>
      <td class="column2 style5 s">exppfa</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row20">
      <td class="column1 style5 s">External Remote Services</td>
      <td class="column2 style6 s">extrs</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row21">
      <td class="column1 style6 s">Hardware Additions</td>
      <td class="column2 style6 s">hwadd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row22">
      <td class="column1 style6 s">Phishing</td>
      <td class="column2 style6 s">phish</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row23">
      <td class="column1 style6 s">Replication Through Removable Media</td>
      <td class="column2 style6 s">rtrmed</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row24">
      <td class="column1 style6 s">Supply Chain Compromise</td>
      <td class="column2 style6 s">sccomp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row25">
      <td class="column1 style6 s">Trusted Relationship<hr></td>
      <td class="column2 style6 s">trrel<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row26">
      <td class="column0 style7 s style9" rowspan="12">Execution</td>
      <td class="column1 style4 s">Command and Scripting Interpreter</td>
      <td class="column2 style4 s">c&amp;sint</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row27">
      <td class="column1 style4 s">Native API</td>
      <td class="column2 style4 s">natapi</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row28">
      <td class="column1 style4 s">Container Administration Command</td>
      <td class="column2 style4 s">cadcom</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row29">
      <td class="column1 style4 s">Deploy Container</td>
      <td class="column2 style4 s">depcon</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row30">
      <td class="column1 style4 s">Exploitation for Client Execution</td>
      <td class="column2 style4 s">expfce</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row31">
      <td class="column1 style4 s">Inter-Process Communication</td>
      <td class="column2 style4 s">intpcom</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row32">
      <td class="column1 style4 s">Serverless Execution</td>
      <td class="column2 style4 s">slexec</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row33">
      <td class="column1 style4 s">Shared Modules</td>
      <td class="column2 style4 s">shmod</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row34">
      <td class="column1 style4 s">Software Deployment Tools</td>
      <td class="column2 style4 s">swdtool</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row35">
      <td class="column1 style4 s">System Services</td>
      <td class="column2 style4 s">sysserv</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row36">
      <td class="column1 style4 s">User Execution</td>
      <td class="column2 style4 s">usrexe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row37">
      <td class="column1 style4 s">Windows Management Instrumentation<hr></td>
      <td class="column2 style4 s">winmin<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row38">
      <td class="column0 style7 s style9" rowspan="12">Persistence</td>
      <td class="column1 style4 s">Account Manipulation</td>
      <td class="column2 style4 s">accman</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row39">
      <td class="column1 style4 s">BITS Jobs</td>
      <td class="column2 style4 s">bits</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row40">
      <td class="column1 style4 s">Browser Extensions</td>
      <td class="column2 style4 s">browext</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row41">
      <td class="column1 style4 s">Compromise Client Software Binary</td>
      <td class="column2 style4 s">ccsb</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row42">
      <td class="column1 style4 s">Create Account</td>
      <td class="column2 style4 s">creacc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row43">
      <td class="column1 style4 s">External Remote Services</td>
      <td class="column2 style4 s">extrs</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5 style2 null"></td>
    </tr>
    <tr class="row44">
      <td class="column1 style4 s">Implant Internal Image</td>
      <td class="column2 style4 s">iintim</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row45">
      <td class="column1 style4 s">Office Application Startup</td>
      <td class="column2 style4 s">oappst</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row46">
      <td class="column1 style4 s">Pre-OS Boot</td>
      <td class="column2 style4 s">preosb</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row47">
      <td class="column1 style4 s">Server Software Component</td>
      <td class="column2 style4 s">sscomp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row48">
      <td class="column1 style4 s">Traffic Signaling</td>
      <td class="column2 style4 s">trsig</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row49">
      <td class="column1 style4 s">Valid Accounts<hr></td>
      <td class="column2 style4 s">valacc<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row50">
      <td class="column0 style7 s style9" rowspan="12">Privilege Escalation</td>
      <td class="column1 style4 s">Scheduled Task/Job</td>
      <td class="column2 style4 s">scht</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row51">
      <td class="column1 style4 s">Boot or Logon Autostart Execution</td>
      <td class="column2 style4 s">bolae</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row52">
      <td class="column1 style4 s">Abuse Elevation Control Mechanism</td>
      <td class="column2 style4 s">aecm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row53">
      <td class="column1 style4 s">Access Token Manipulation</td>
      <td class="column2 style4 s">acctm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row54">
      <td class="column1 style4 s">Event Triggered Execution</td>
      <td class="column2 style4 s">etexec</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row55">
      <td class="column1 style4 s">Boot or Logon Initialization Scripts</td>
      <td class="column2 style4 s">bolis</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row56">
      <td class="column1 style4 s">Create or Modify System Process</td>
      <td class="column2 style4 s">comsp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row57">
      <td class="column1 style4 s">Domain Policy Modification</td>
      <td class="column2 style4 s">dpmod</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row58">
      <td class="column1 style4 s">Escape to Host</td>
      <td class="column2 style4 s">escth</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row59">
      <td class="column1 style4 s">Exploitation for Privilege Escalation</td>
      <td class="column2 style4 s">expfpe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row60">
      <td class="column1 style4 s">Hijack Execution Flow</td>
      <td class="column2 style4 s">hijexf</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row61">
      <td class="column1 style4 s">Process Injection<hr></td>
      <td class="column2 style4 s">prinj<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row62">
      <td class="column0 style7 s style9" rowspan="33">Defense Evasion</td>
      <td class="column1 style4 s">Abuse Elevation Control Mechanism</td>
      <td class="column2 style4 s">aecm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row63">
      <td class="column1 style4 s">Build Image on Host</td>
      <td class="column2 style4 s">bimonh</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row64">
      <td class="column1 style4 s">Debuger Evasion</td>
      <td class="column2 style4 s">debev</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row65">
      <td class="column1 style4 s">Deobfuscate/Decode Files or Information</td>
      <td class="column2 style4 s">dcfoi</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row66">
      <td class="column1 style4 s">Direct Volume Access</td>
      <td class="column2 style4 s">dirvac</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row67">
      <td class="column1 style4 s">Domain Policy Modification</td>
      <td class="column2 style4 s">dpmod</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row68">
      <td class="column1 style4 s">Exploitation for Defense Evasion</td>
      <td class="column2 style4 s">expfde</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row69">
      <td class="column1 style4 s">File and Directory Permissions Modification</td>
      <td class="column2 style4 s">fadpmod</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row70">
      <td class="column1 style4 s">Hide Artifacts</td>
      <td class="column2 style4 s">hidart</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row71">
      <td class="column1 style4 s">Impair Defenses</td>
      <td class="column2 style4 s">impdef</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row72">
      <td class="column1 style4 s">Indicator Removal</td>
      <td class="column2 style4 s">indrem</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row73">
      <td class="column1 style4 s">Indirect Command Execution</td>
      <td class="column2 style4 s">incexec</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row74">
      <td class="column1 style4 s">Masquerading</td>
      <td class="column2 style4 s">masq</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row75">
      <td class="column1 style4 s">Modify Authentication Process</td>
      <td class="column2 style4 s">modauthp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row76">
      <td class="column1 style4 s">Modify Cloud Compute Infrastructure</td>
      <td class="column2 style4 s">modcci</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row77">
      <td class="column1 style4 s">Modify Registry</td>
      <td class="column2 style4 s">modr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row78">
      <td class="column1 style4 s">Modify System Image</td>
      <td class="column2 style4 s">modsi</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row79">
      <td class="column1 style4 s">Network Boundary Bridging</td>
      <td class="column2 style4 s">nwbbr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row80">
      <td class="column1 style4 s">Obfuscated Files or Information</td>
      <td class="column2 style4 s">obfoi</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row81">
      <td class="column1 style4 s">Plist File Modification</td>
      <td class="column2 style4 s">plfmod</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row82">
      <td class="column1 style4 s">Reflective Code Loading</td>
      <td class="column2 style4 s">refclo</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row83">
      <td class="column1 style4 s">Rogue Domain Controller</td>
      <td class="column2 style4 s">rogdc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row84">
      <td class="column1 style4 s">Rootkit</td>
      <td class="column2 style4 s">rootkit</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row85">
      <td class="column1 style4 s">Subvert Trust Controls</td>
      <td class="column2 style4 s">strcon</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row86">
      <td class="column1 style4 s">System Binary Proxy Execution</td>
      <td class="column2 style4 s">sbpe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row87">
      <td class="column1 style4 s">System Script Proxy Execution</td>
      <td class="column2 style4 s">sspe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row88">
      <td class="column1 style4 s">Template Injection</td>
      <td class="column2 style4 s">tempinj</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row89">
      <td class="column1 style4 s">Trusted Developer Utilities Proxy Execution</td>
      <td class="column2 style4 s">tdupe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row90">
      <td class="column1 style4 s">Unused/Unsupported Cloud Regions</td>
      <td class="column2 style4 s">ucreg</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row91">
      <td class="column1 style4 s">Use Alternate Authentication Material</td>
      <td class="column2 style4 s">uaam</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row92">
      <td class="column1 style4 s">Virtualization/Sandbox Evasion</td>
      <td class="column2 style4 s">vmevas</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row93">
      <td class="column1 style4 s">Weaken Encryption</td>
      <td class="column2 style4 s">wencr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row94">
      <td class="column1 style4 s">XSL Script Processing<hr></td>
      <td class="column2 style4 s">xslsp<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row95">
      <td class="column0 style7 s style9" rowspan="16">Credential Access</td>
      <td class="column1 style4 s">OS Credential Dumping</td>
      <td class="column2 style4 s">crdump</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row96">
      <td class="column1 style4 s">Brute Force</td>
      <td class="column2 style4 s">brufor</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row97">
      <td class="column1 style4 s">Credentials from Password Stores</td>
      <td class="column2 style4 s">crfps</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row98">
      <td class="column1 style4 s">Unsecured Credentials</td>
      <td class="column2 style4 s">unsecc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row99">
      <td class="column1 style4 s">Forced Authentication</td>
      <td class="column2 style4 s">forauth</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row100">
      <td class="column1 style4 s">Input Capture</td>
      <td class="column2 style4 s">inpcap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row101">
      <td class="column1 style4 s">Adversary-in-the-Middle</td>
      <td class="column2 style4 s">advitm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row102">
      <td class="column1 style4 s">Exploitation for Credential Access</td>
      <td class="column2 style4 s">expfca</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row103">
      <td class="column1 style4 s">Forge Web Credentials</td>
      <td class="column2 style4 s">fwcred</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row104">
      <td class="column1 style4 s">Multi-Factor Authentication Interception</td>
      <td class="column2 style4 s">mfaint</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row105">
      <td class="column1 style4 s">Multi-Factor Authentication Request Generation</td>
      <td class="column2 style4 s">mfarg</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row106">
      <td class="column1 style4 s">Network Sniffing</td>
      <td class="column2 style4 s">nwsniff</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row107">
      <td class="column1 style4 s">Steal Application Access Token</td>
      <td class="column2 style4 s">stappat</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row108">
      <td class="column1 style4 s">Steal or Forge Authentication Certificates</td>
      <td class="column2 style4 s">saucrt</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row109">
      <td class="column1 style4 s">Steal or Forge Kerberos Tickets</td>
      <td class="column2 style4 s">stkerb</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row110">
      <td class="column1 style4 s">Steal Web Session Cookie<hr></td>
      <td class="column2 style4 s">stwsc<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row111">
      <td class="column0 style7 s style9" rowspan="26">Discovery</td>
      <td class="column1 style4 s">System Network Configuration Discovery</td>
      <td class="column2 style4 s">sncd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row112">
      <td class="column1 style4 s">System Information Discovery</td>
      <td class="column2 style4 s">sid</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row113">
      <td class="column1 style4 s">Network Service Discovery</td>
      <td class="column2 style4 s">nsd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row114">
      <td class="column1 style4 s">Account Discovery</td>
      <td class="column2 style4 s">ad</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row115">
      <td class="column1 style4 s">System Owner/User Discovery</td>
      <td class="column2 style4 s">sodisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row116">
      <td class="column1 style4 s">Remote System Discovery</td>
      <td class="column2 style4 s">rsdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row117">
      <td class="column1 style4 s">System Network Configuration Discovery</td>
      <td class="column2 style4 s">sncdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row118">
      <td class="column1 style4 s">System Network Connections Discovery</td>
      <td class="column2 style4 s">sncodisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row119">
      <td class="column1 style4 s">Permission Groups Discovery</td>
      <td class="column2 style4 s">pgdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row120">
      <td class="column1 style4 s">Application Window Discovery</td>
      <td class="column2 style4 s">awdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row121">
      <td class="column1 style4 s">Browser Bookmark Discovery</td>
      <td class="column2 style4 s">bbdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row122">
      <td class="column1 style4 s">Cloud Infrastructure Discovery</td>
      <td class="column2 style4 s">cidisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row123">
      <td class="column1 style4 s">Cloud Service Dashboard</td>
      <td class="column2 style4 s">csdash</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row124">
      <td class="column1 style4 s">Cloud Service Discovery</td>
      <td class="column2 style4 s">csdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row125">
      <td class="column1 style4 s">Cloud Storage Object Discovery</td>
      <td class="column2 style4 s">csodisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row126">
      <td class="column1 style4 s">Container and Resource Discovery</td>
      <td class="column2 style4 s">cardisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row127">
      <td class="column1 style4 s">Debugger Evasion</td>
      <td class="column2 style4 s">debeva</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row128">
      <td class="column1 style4 s">Domain Trust Discovery</td>
      <td class="column2 style4 s">dtdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row129">
      <td class="column1 style4 s">File and Directory Discovery</td>
      <td class="column2 style4 s">faddisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row130">
      <td class="column1 style4 s">Group Policy Discovery</td>
      <td class="column2 style4 s">gpdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row131">
      <td class="column1 style4 s">Password Policy Discovery</td>
      <td class="column2 style4 s">ppdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row132">
      <td class="column1 style4 s">Peripheral Device Discovery</td>
      <td class="column2 style4 s">pddisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row133">
      <td class="column1 style4 s">Process Discovery</td>
      <td class="column2 style4 s">pdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row134">
      <td class="column1 style4 s">Query Registry</td>
      <td class="column2 style4 s">qreg</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row135">
      <td class="column1 style4 s">Software Discocery</td>
      <td class="column2 style4 s">sdisc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row136">
      <td class="column1 style4 s">System Time Discovery<hr></td>
      <td class="column2 style4 s">stdisc<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row137">
      <td class="column0 style7 s style9" rowspan="8">Lateral Movement</td>
      <td class="column1 style4 s">Exploitation of Remote Services</td>
      <td class="column2 style4 s">expors</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row138">
      <td class="column1 style4 s">Internal Spearphishing</td>
      <td class="column2 style4 s">intspe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row139">
      <td class="column1 style4 s">Lateral Tool Transfer</td>
      <td class="column2 style4 s">lttr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row140">
      <td class="column1 style4 s">Remote Service Session Hijacking</td>
      <td class="column2 style4 s">rsshij</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row141">
      <td class="column1 style4 s">Remote Services</td>
      <td class="column2 style4 s">remser</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row142">
      <td class="column1 style4 s">Replication Through Removable Media</td>
      <td class="column2 style4 s">rtrm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row143">
      <td class="column1 style4 s">Software Deployment Tools</td>
      <td class="column2 style4 s">swdt</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row144">
      <td class="column1 style4 s">Taint Shared Content<hr></td>
      <td class="column2 style4 s">tscon<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row145">
      <td class="column0 style7 s style9" rowspan="17">Collection</td>
      <td class="column1 style4 s">Email Collection</td>
      <td class="column2 style4 s">emcol</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row146">
      <td class="column1 style4 s">Data from Local System</td>
      <td class="column2 style4 s">dfls</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row147">
      <td class="column1 style4 s">Automated Collection</td>
      <td class="column2 style4 s">acol</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row148">
      <td class="column1 style4 s">Screen Capture</td>
      <td class="column2 style4 s">scrcap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row149">
      <td class="column1 style4 s">Clipboard Data</td>
      <td class="column2 style4 s">cldata</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row150">
      <td class="column1 style4 s">Data from Network Shared Drive</td>
      <td class="column2 style4 s">dfnsd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row151">
      <td class="column1 style4 s">Archive Collected Data</td>
      <td class="column2 style4 s">arcd</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row152">
      <td class="column1 style4 s">Audio Capture</td>
      <td class="column2 style4 s">audcap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row153">
      <td class="column1 style4 s">Browser Session Hijacking</td>
      <td class="column2 style4 s">brshij</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row154">
      <td class="column1 style4 s">Data from Cloud Storage</td>
      <td class="column2 style4 s">dfcs</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row155">
      <td class="column1 style4 s">Data from Configuration Repository</td>
      <td class="column2 style4 s">dfcr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row156">
      <td class="column1 style4 s">Data from Information Repositories</td>
      <td class="column2 style4 s">dfir</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row157">
      <td class="column1 style4 s">Data from Local System</td>
      <td class="column2 style4 s">dfls</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row158">
      <td class="column1 style4 s">Data from Removable Media</td>
      <td class="column2 style4 s">dfrm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row159">
      <td class="column1 style4 s">Data Staged</td>
      <td class="column2 style4 s">datsta</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row160">
      <td class="column1 style4 s">Input Capture</td>
      <td class="column2 style4 s">inpcap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row161">
      <td class="column1 style4 s">Video Capture<hr></td>
      <td class="column2 style4 s">vidcap<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row162">
      <td class="column0 style7 s style9" rowspan="14">Command and Control</td>
      <td class="column1 style4 s">Application Layer Protocol</td>
      <td class="column2 style4 s">applp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row163">
      <td class="column1 style4 s">Non-Application Layer Protocol</td>
      <td class="column2 style4 s">napplp</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row164">
      <td class="column1 style4 s">Proxy</td>
      <td class="column2 style4 s">proxy</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row165">
      <td class="column1 style4 s">Communication Through Removable Media</td>
      <td class="column2 style4 s">ctrmed</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row166">
      <td class="column1 style4 s">Data Encoding</td>
      <td class="column2 style4 s">datenc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row167">
      <td class="column1 style4 s">Data Obfuscation</td>
      <td class="column2 style4 s">datobf</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row168">
      <td class="column1 style4 s">Dynamic Resolution</td>
      <td class="column2 style4 s">dynres</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row169">
      <td class="column1 style4 s">Encrypted Channel</td>
      <td class="column2 style4 s">encrc</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row170">
      <td class="column1 style4 s">Fallback Channels</td>
      <td class="column2 style4 s">fallch</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row171">
      <td class="column1 style4 s">Ingress Tool Transfer</td>
      <td class="column2 style4 s">ingttr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row172">
      <td class="column1 style4 s">Multi-Stage Channels</td>
      <td class="column2 style4 s">mschan</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row173">
      <td class="column1 style4 s">Protocol Tunneling</td>
      <td class="column2 style4 s">prtunn</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row174">
      <td class="column1 style4 s">Remote Access Software</td>
      <td class="column2 style4 s">rasw</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row175">
      <td class="column1 style4 s">Web Service<hr></td>
      <td class="column2 style4 s">webserv<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row176">
      <td class="column0 style7 s style9" rowspan="9">Exfiltration</td>
      <td class="column1 style4 s">Automated Exfiltration</td>
      <td class="column2 style4 s">auexf</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row177">
      <td class="column1 style4 s">Exfiltration Over C2 Channel</td>
      <td class="column2 style4 s">exfoc2ch</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row178">
      <td class="column1 style4 s">Exfiltration Over Alternative Protocol</td>
      <td class="column2 style4 s">exfoap</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row179">
      <td class="column1 style4 s">Transfer Data to Cloud Account</td>
      <td class="column2 style4 s">trdtca</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row180">
      <td class="column1 style4 s">Exfiltration Over Physical Medium</td>
      <td class="column2 style4 s">exfopm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row181">
      <td class="column1 style4 s">Data Transfer Size Limits</td>
      <td class="column2 style4 s">dtsl</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row182">
      <td class="column1 style4 s">Exfiltration Over Other Network Medium</td>
      <td class="column2 style4 s">exfoonm</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row183">
      <td class="column1 style4 s">Exfiltration Over Web Service</td>
      <td class="column2 style4 s">exfows</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row184">
      <td class="column1 style4 s">Scheduled Transfer<hr></td>
      <td class="column2 style4 s">schtr<hr></td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row185">
      <td class="column0 style7 s style9" rowspan="13">Impact</td>
      <td class="column1 style4 s">Endpoint Denial of Service</td>
      <td class="column2 style4 s">edos</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row186">
      <td class="column1 style4 s">Defacement</td>
      <td class="column2 style4 s">def</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row187">
      <td class="column1 style4 s">Data encrypted</td>
      <td class="column2 style4 s">dencr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row188">
      <td class="column1 style4 s">Inhibit System Recovery</td>
      <td class="column2 style4 s">insr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row189">
      <td class="column1 style4 s">Account Access Removal</td>
      <td class="column2 style4 s">acacre</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row190">
      <td class="column1 style4 s">Data Destruction</td>
      <td class="column2 style4 s">datdes</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row191">
      <td class="column1 style4 s">Data Manipulation</td>
      <td class="column2 style4 s">datman</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row192">
      <td class="column1 style4 s">Disk Wipe</td>
      <td class="column2 style4 s">dwipe</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row193">
      <td class="column1 style4 s">Firmware Corruption</td>
      <td class="column2 style4 s">fwcorr</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row194">
      <td class="column1 style4 s">Network Denial of Service</td>
      <td class="column2 style4 s">ndos</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row195">
      <td class="column1 style4 s">Resource Hijacking</td>
      <td class="column2 style4 s">rhij</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row196">
      <td class="column1 style4 s">Service Stop</td>
      <td class="column2 style4 s">serstop</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    <tr class="row197">
      <td class="column1 style4 s">System Shutdown/Reboot</td>
      <td class="column2 style4 s">syssh</td>
      <td class="column3">&nbsp;</td>
      <td class="column4">&nbsp;</td>
      <td class="column5">&nbsp;</td>
    </tr>
    </tbody>
  </table>

</template>

<script>
export default {
  name: "Rules"
}
</script>

<style type="text/css">

</style>