Google Cloud Security Command Center V2 Client - Class Technique (2.2.1)

Reference documentation and code samples for the Google Cloud Security Command Center V2 Client class Technique.

MITRE ATT&CK techniques that can be referenced by Security Command Center findings. See: https://attack.mitre.org/techniques/enterprise/

Protobuf type google.cloud.securitycenter.v2.MitreAttack.Technique

  Value: 0 
 

Unspecified value.

Generated from protobuf enum TECHNIQUE_UNSPECIFIED = 0;

  Value: 70 
 

T1001

Generated from protobuf enum DATA_OBFUSCATION = 70;

  Value: 71 
 

T1001.002

Generated from protobuf enum DATA_OBFUSCATION_STEGANOGRAPHY = 71;

  Value: 114 
 

T1003

Generated from protobuf enum OS_CREDENTIAL_DUMPING = 114;

  Value: 115 
 

T1003.007

Generated from protobuf enum OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM = 115;

  Value: 122 
 

T1003.008

Generated from protobuf enum OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW = 122;

  Value: 117 
 

T1005

Generated from protobuf enum DATA_FROM_LOCAL_SYSTEM = 117;

  Value: 68 
 

T1020

Generated from protobuf enum AUTOMATED_EXFILTRATION = 68;

  Value: 72 
 

T1027

Generated from protobuf enum OBFUSCATED_FILES_OR_INFO = 72;

  Value: 73 
 

T1027.003

Generated from protobuf enum STEGANOGRAPHY = 73;

  Value: 74 
 

T1027.004

Generated from protobuf enum COMPILE_AFTER_DELIVERY = 74;

  Value: 75 
 

T1027.010

Generated from protobuf enum COMMAND_OBFUSCATION = 75;

  Value: 120 
 

T1029

Generated from protobuf enum SCHEDULED_TRANSFER = 120;

  Value: 118 
 

T1033

Generated from protobuf enum SYSTEM_OWNER_USER_DISCOVERY = 118;

  Value: 49 
 

T1036

Generated from protobuf enum MASQUERADING = 49;

  Value: 50 
 

T1036.005

Generated from protobuf enum MATCH_LEGITIMATE_NAME_OR_LOCATION = 50;

  Value: 37 
 

T1037

Generated from protobuf enum BOOT_OR_LOGON_INITIALIZATION_SCRIPTS = 37;

  Value: 38 
 

T1037.005

Generated from protobuf enum STARTUP_ITEMS = 38;

  Value: 32 
 

T1046

Generated from protobuf enum NETWORK_SERVICE_DISCOVERY = 32;

  Value: 89 
 

T1053

Generated from protobuf enum SCHEDULED_TASK_JOB = 89;

  Value: 119 
 

T1053.003

Generated from protobuf enum SCHEDULED_TASK_JOB_CRON = 119;

  Value: 90 
 

T1053.007

Generated from protobuf enum CONTAINER_ORCHESTRATION_JOB = 90;

  Value: 93 
 

T1055

Generated from protobuf enum PROCESS_INJECTION = 93;

  Value: 103 
 

T1056

Generated from protobuf enum INPUT_CAPTURE = 103;

  Value: 104 
 

T1056.001

Generated from protobuf enum INPUT_CAPTURE_KEYLOGGING = 104;

  Value: 56 
 

T1057

Generated from protobuf enum PROCESS_DISCOVERY = 56;

  Value: 6 
 

T1059

Generated from protobuf enum COMMAND_AND_SCRIPTING_INTERPRETER = 6;

  Value: 7 
 

T1059.004

Generated from protobuf enum UNIX_SHELL = 7;

  Value: 59 
 

T1059.006

Generated from protobuf enum PYTHON = 59;

  Value: 63 
 

T1068

Generated from protobuf enum EXPLOITATION_FOR_PRIVILEGE_ESCALATION = 63;

  Value: 18 
 

T1069

Generated from protobuf enum PERMISSION_GROUPS_DISCOVERY = 18;

  Value: 19 
 

T1069.003

Generated from protobuf enum CLOUD_GROUPS = 19;

  Value: 123 
 

T1070

Generated from protobuf enum INDICATOR_REMOVAL = 123;

  Value: 124 
 

T1070.002

Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS = 124;

  Value: 125 
 

T1070.003

Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY = 125;

  Value: 64 
 

T1070.004

Generated from protobuf enum INDICATOR_REMOVAL_FILE_DELETION = 64;

  Value: 128 
 

T1070.006

Generated from protobuf enum INDICATOR_REMOVAL_TIMESTOMP = 128;

  Value: 126 
 

T1070.008

Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA = 126;

  Value: 45 
 

T1071

Generated from protobuf enum APPLICATION_LAYER_PROTOCOL = 45;

  Value: 46 
 

T1071.004

Generated from protobuf enum DNS = 46;

  Value: 47 
 

T1072

Generated from protobuf enum SOFTWARE_DEPLOYMENT_TOOLS = 47;

  Value: 14 
 

T1078

Generated from protobuf enum VALID_ACCOUNTS = 14;

  Value: 35 
 

T1078.001

Generated from protobuf enum DEFAULT_ACCOUNTS = 35;

  Value: 15 
 

T1078.003

Generated from protobuf enum LOCAL_ACCOUNTS = 15;

  Value: 16 
 

T1078.004

Generated from protobuf enum CLOUD_ACCOUNTS = 16;

  Value: 121 
 

T1083

Generated from protobuf enum FILE_AND_DIRECTORY_DISCOVERY = 121;

  Value: 116 
 

T1087.001

Generated from protobuf enum ACCOUNT_DISCOVERY_LOCAL_ACCOUNT = 116;

  Value: 9 
 

T1090

Generated from protobuf enum PROXY = 9;

  Value: 10 
 

T1090.002

Generated from protobuf enum EXTERNAL_PROXY = 10;

  Value: 11 
 

T1090.003

Generated from protobuf enum MULTI_HOP_PROXY = 11;

  Value: 22 
 

T1098

Generated from protobuf enum ACCOUNT_MANIPULATION = 22;

  Value: 40 
 

T1098.001

Generated from protobuf enum ADDITIONAL_CLOUD_CREDENTIALS = 40;

  Value: 67 
 

T1098.003

Generated from protobuf enum ADDITIONAL_CLOUD_ROLES = 67;

  Value: 23 
 

T1098.004

Generated from protobuf enum SSH_AUTHORIZED_KEYS = 23;

  Value: 58 
 

T1098.006

Generated from protobuf enum ADDITIONAL_CONTAINER_CLUSTER_ROLES = 58;

  Value: 76 
 

T1104

Generated from protobuf enum MULTI_STAGE_CHANNELS = 76;

  Value: 3 
 

T1105

Generated from protobuf enum INGRESS_TOOL_TRANSFER = 3;

  Value: 4 
 

T1106

Generated from protobuf enum NATIVE_API = 4;

  Value: 44 
 

T1110

Generated from protobuf enum BRUTE_FORCE = 44;

  Value: 94 
 

T1119

Generated from protobuf enum AUTOMATED_COLLECTION = 94;

  Value: 5 
 

T1129

Generated from protobuf enum SHARED_MODULES = 5;

  Value: 77 
 

T1132

Generated from protobuf enum DATA_ENCODING = 77;

  Value: 78 
 

T1132.001

Generated from protobuf enum STANDARD_ENCODING = 78;

  Value: 33 
 

T1134

Generated from protobuf enum ACCESS_TOKEN_MANIPULATION = 33;

  Value: 39 
 

T1134.001

Generated from protobuf enum TOKEN_IMPERSONATION_OR_THEFT = 39;

  Value: 79 
 

T1136

Generated from protobuf enum CREATE_ACCOUNT = 79;

  Value: 80 
 

T1136.001

Generated from protobuf enum LOCAL_ACCOUNT = 80;

  Value: 95 
 

T1140

Generated from protobuf enum DEOBFUSCATE_DECODE_FILES_OR_INFO = 95;

  Value: 27 
 

T1190

Generated from protobuf enum EXPLOIT_PUBLIC_FACING_APPLICATION = 27;

  Value: 129 
 

T1195

Generated from protobuf enum SUPPLY_CHAIN_COMPROMISE = 129;

  Value: 130 
 

T1195.001

Generated from protobuf enum COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS = 130;

  Value: 134 
 

T1203

Generated from protobuf enum EXPLOITATION_FOR_CLIENT_EXECUTION = 134;

  Value: 69 
 

T1204

Generated from protobuf enum USER_EXECUTION = 69;

  Value: 135 
 

T1222.002

Generated from protobuf enum LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION = 135;

  Value: 30 
 

T1484

Generated from protobuf enum DOMAIN_POLICY_MODIFICATION = 30;

  Value: 29 
 

T1485

Generated from protobuf enum DATA_DESTRUCTION = 29;

  Value: 132 
 

T1486

Generated from protobuf enum DATA_ENCRYPTED_FOR_IMPACT = 132;

  Value: 52 
 

T1489

Generated from protobuf enum SERVICE_STOP = 52;

  Value: 36 
 

T1490

Generated from protobuf enum INHIBIT_SYSTEM_RECOVERY = 36;

  Value: 81 
 

T1495

Generated from protobuf enum FIRMWARE_CORRUPTION = 81;

  Value: 8 
 

T1496

Generated from protobuf enum RESOURCE_HIJACKING = 8;

  Value: 17 
 

T1498

Generated from protobuf enum NETWORK_DENIAL_OF_SERVICE = 17;

  Value: 48 
 

T1526

Generated from protobuf enum CLOUD_SERVICE_DISCOVERY = 48;

  Value: 42 
 

T1528

Generated from protobuf enum STEAL_APPLICATION_ACCESS_TOKEN = 42;

  Value: 51 
 

T1531

Generated from protobuf enum ACCOUNT_ACCESS_REMOVAL = 51;

  Value: 91 
 

T1537

Generated from protobuf enum TRANSFER_DATA_TO_CLOUD_ACCOUNT = 91;

  Value: 25 
 

T1539

Generated from protobuf enum STEAL_WEB_SESSION_COOKIE = 25;

  Value: 24 
 

T1543

Generated from protobuf enum CREATE_OR_MODIFY_SYSTEM_PROCESS = 24;

  Value: 65 
 

T1546

Generated from protobuf enum EVENT_TRIGGERED_EXECUTION = 65;

  Value: 82 
 

T1547

Generated from protobuf enum BOOT_OR_LOGON_AUTOSTART_EXECUTION = 82;

  Value: 83 
 

T1547.006

Generated from protobuf enum KERNEL_MODULES_AND_EXTENSIONS = 83;

  Value: 127 
 

T1547.009

Generated from protobuf enum SHORTCUT_MODIFICATION = 127;

  Value: 34 
 

T1548

Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM = 34;

  Value: 136 
 

T1548.001

Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID = 136;

  Value: 109 
 

T1548.003

Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING = 109;

  Value: 13 
 

T1552

Generated from protobuf enum UNSECURED_CREDENTIALS = 13;

  Value: 105 
 

T1552.001

Generated from protobuf enum CREDENTIALS_IN_FILES = 105;

  Value: 96 
 

T1552.003

Generated from protobuf enum BASH_HISTORY = 96;

  Value: 97 
 

T1552.004

Generated from protobuf enum PRIVATE_KEYS = 97;

  Value: 106 
 

T1553

Generated from protobuf enum SUBVERT_TRUST_CONTROL = 106;

  Value: 107 
 

T1553.004

Generated from protobuf enum INSTALL_ROOT_CERTIFICATE = 107;

  Value: 84 
 

T1554

Generated from protobuf enum COMPROMISE_HOST_SOFTWARE_BINARY = 84;

  Value: 98 
 

T1555

Generated from protobuf enum CREDENTIALS_FROM_PASSWORD_STORES = 98;

  Value: 28 
 

T1556

Generated from protobuf enum MODIFY_AUTHENTICATION_PROCESS = 28;

  Value: 108 
 

T1556.003

Generated from protobuf enum PLUGGABLE_AUTHENTICATION_MODULES = 108;

  Value: 137 
 

T1556.006

Generated from protobuf enum MULTI_FACTOR_AUTHENTICATION = 137;

  Value: 31 
 

T1562

Generated from protobuf enum IMPAIR_DEFENSES = 31;

  Value: 55 
 

T1562.001

Generated from protobuf enum DISABLE_OR_MODIFY_TOOLS = 55;

  Value: 110 
 

T1562.006

Generated from protobuf enum INDICATOR_BLOCKING = 110;

  Value: 111 
 

T1562.012

Generated from protobuf enum DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM = 111;

  Value: 85 
 

T1564

Generated from protobuf enum HIDE_ARTIFACTS = 85;

  Value: 86 
 

T1564.001

Generated from protobuf enum HIDDEN_FILES_AND_DIRECTORIES = 86;

  Value: 87 
 

T1564.002

Generated from protobuf enum HIDDEN_USERS = 87;

  Value: 20 
 

T1567

Generated from protobuf enum EXFILTRATION_OVER_WEB_SERVICE = 20;

  Value: 21 
 

T1567.002

Generated from protobuf enum EXFILTRATION_TO_CLOUD_STORAGE = 21;

  Value: 12 
 

T1568

Generated from protobuf enum DYNAMIC_RESOLUTION = 12;

  Value: 41 
 

T1570

Generated from protobuf enum LATERAL_TOOL_TRANSFER = 41;

  Value: 112 
 

T1574

Generated from protobuf enum HIJACK_EXECUTION_FLOW = 112;

  Value: 113 
 

T1574.006

Generated from protobuf enum HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING = 113;

  Value: 26 
 

T1578

Generated from protobuf enum MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE = 26;

  Value: 54 
 

T1578.001

Generated from protobuf enum CREATE_SNAPSHOT = 54;

  Value: 53 
 

T1580

Generated from protobuf enum CLOUD_INFRASTRUCTURE_DISCOVERY = 53;

  Value: 99 
 

T1587

Generated from protobuf enum DEVELOP_CAPABILITIES = 99;

  Value: 100 
 

T1587.001

Generated from protobuf enum DEVELOP_CAPABILITIES_MALWARE = 100;

  Value: 43 
 

T1588

Generated from protobuf enum OBTAIN_CAPABILITIES = 43;

  Value: 101 
 

T1588.001

Generated from protobuf enum OBTAIN_CAPABILITIES_MALWARE = 101;

  Value: 133 
 

T1588.006

Generated from protobuf enum OBTAIN_CAPABILITIES_VULNERABILITIES = 133;

  Value: 1 
 

T1595

Generated from protobuf enum ACTIVE_SCANNING = 1;

  Value: 2 
 

T1595.001

Generated from protobuf enum SCANNING_IP_BLOCKS = 2;

  Value: 88 
 

T1608

Generated from protobuf enum STAGE_CAPABILITIES = 88;

  Value: 102 
 

T1608.001

Generated from protobuf enum UPLOAD_MALWARE = 102;

  Value: 60 
 

T1609

Generated from protobuf enum CONTAINER_ADMINISTRATION_COMMAND = 60;

  Value: 66 
 

T1610

Generated from protobuf enum DEPLOY_CONTAINER = 66;

  Value: 61 
 

T1611

Generated from protobuf enum ESCAPE_TO_HOST = 61;

  Value: 57 
 

T1613

Generated from protobuf enum CONTAINER_AND_RESOURCE_DISCOVERY = 57;

  Value: 92 
 

T1620

Generated from protobuf enum REFLECTIVE_CODE_LOADING = 92;

  Value: 62 
 

T1649

Generated from protobuf enum STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES = 62;

  Value: 131 
 

T1657

Generated from protobuf enum FINANCIAL_THEFT = 131;