Google Cloud Security Command Center V2 Client - Class Technique (2.2.1)

Reference documentation and code samples for the Google Cloud Security Command Center V2 Client class Technique.

MITRE ATT&CK techniques that can be referenced by Security Command Center findings. See: https://attack.mitre.org/techniques/enterprise/

Protobuf type google.cloud.securitycenter.v2.MitreAttack.Technique

Unspecified value.

Generated from protobuf enum TECHNIQUE_UNSPECIFIED = 0;

T1001

Generated from protobuf enum DATA_OBFUSCATION = 70;

T1001.002

Generated from protobuf enum DATA_OBFUSCATION_STEGANOGRAPHY = 71;

T1003

Generated from protobuf enum OS_CREDENTIAL_DUMPING = 114;

T1003.007

Generated from protobuf enum OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM = 115;

T1003.008

Generated from protobuf enum OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW = 122;

T1005

Generated from protobuf enum DATA_FROM_LOCAL_SYSTEM = 117;

T1020

Generated from protobuf enum AUTOMATED_EXFILTRATION = 68;

T1027

Generated from protobuf enum OBFUSCATED_FILES_OR_INFO = 72;

T1027.003

Generated from protobuf enum STEGANOGRAPHY = 73;

T1027.004

Generated from protobuf enum COMPILE_AFTER_DELIVERY = 74;

T1027.010

Generated from protobuf enum COMMAND_OBFUSCATION = 75;

T1029

Generated from protobuf enum SCHEDULED_TRANSFER = 120;

T1033

Generated from protobuf enum SYSTEM_OWNER_USER_DISCOVERY = 118;

T1036

Generated from protobuf enum MASQUERADING = 49;

T1036.005

Generated from protobuf enum MATCH_LEGITIMATE_NAME_OR_LOCATION = 50;

T1037

Generated from protobuf enum BOOT_OR_LOGON_INITIALIZATION_SCRIPTS = 37;

T1037.005

Generated from protobuf enum STARTUP_ITEMS = 38;

T1046

Generated from protobuf enum NETWORK_SERVICE_DISCOVERY = 32;

T1053

Generated from protobuf enum SCHEDULED_TASK_JOB = 89;

T1053.003

Generated from protobuf enum SCHEDULED_TASK_JOB_CRON = 119;

T1053.007

Generated from protobuf enum CONTAINER_ORCHESTRATION_JOB = 90;

T1055

Generated from protobuf enum PROCESS_INJECTION = 93;

T1056

Generated from protobuf enum INPUT_CAPTURE = 103;

T1056.001

Generated from protobuf enum INPUT_CAPTURE_KEYLOGGING = 104;

T1057

Generated from protobuf enum PROCESS_DISCOVERY = 56;

T1059

Generated from protobuf enum COMMAND_AND_SCRIPTING_INTERPRETER = 6;

T1059.004

Generated from protobuf enum UNIX_SHELL = 7;

T1059.006

Generated from protobuf enum PYTHON = 59;

T1068

Generated from protobuf enum EXPLOITATION_FOR_PRIVILEGE_ESCALATION = 63;

T1069

Generated from protobuf enum PERMISSION_GROUPS_DISCOVERY = 18;

T1069.003

Generated from protobuf enum CLOUD_GROUPS = 19;

T1070

Generated from protobuf enum INDICATOR_REMOVAL = 123;

T1070.002

Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS = 124;

T1070.003

Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY = 125;

T1070.004

Generated from protobuf enum INDICATOR_REMOVAL_FILE_DELETION = 64;

T1070.006

Generated from protobuf enum INDICATOR_REMOVAL_TIMESTOMP = 128;

T1070.008

Generated from protobuf enum INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA = 126;

T1071

Generated from protobuf enum APPLICATION_LAYER_PROTOCOL = 45;

T1071.004

Generated from protobuf enum DNS = 46;

T1072

Generated from protobuf enum SOFTWARE_DEPLOYMENT_TOOLS = 47;

T1078

Generated from protobuf enum VALID_ACCOUNTS = 14;

T1078.001

Generated from protobuf enum DEFAULT_ACCOUNTS = 35;

T1078.003

Generated from protobuf enum LOCAL_ACCOUNTS = 15;

T1078.004

Generated from protobuf enum CLOUD_ACCOUNTS = 16;

T1083

Generated from protobuf enum FILE_AND_DIRECTORY_DISCOVERY = 121;

T1087.001

Generated from protobuf enum ACCOUNT_DISCOVERY_LOCAL_ACCOUNT = 116;

T1090

Generated from protobuf enum PROXY = 9;

T1090.002

Generated from protobuf enum EXTERNAL_PROXY = 10;

T1090.003

Generated from protobuf enum MULTI_HOP_PROXY = 11;

T1098

Generated from protobuf enum ACCOUNT_MANIPULATION = 22;

T1098.001

Generated from protobuf enum ADDITIONAL_CLOUD_CREDENTIALS = 40;

T1098.003

Generated from protobuf enum ADDITIONAL_CLOUD_ROLES = 67;

T1098.004

Generated from protobuf enum SSH_AUTHORIZED_KEYS = 23;

T1098.006

Generated from protobuf enum ADDITIONAL_CONTAINER_CLUSTER_ROLES = 58;

T1104

Generated from protobuf enum MULTI_STAGE_CHANNELS = 76;

T1105

Generated from protobuf enum INGRESS_TOOL_TRANSFER = 3;

T1106

Generated from protobuf enum NATIVE_API = 4;

T1110

Generated from protobuf enum BRUTE_FORCE = 44;

T1119

Generated from protobuf enum AUTOMATED_COLLECTION = 94;

T1129

Generated from protobuf enum SHARED_MODULES = 5;

T1132

Generated from protobuf enum DATA_ENCODING = 77;

T1132.001

Generated from protobuf enum STANDARD_ENCODING = 78;

T1134

Generated from protobuf enum ACCESS_TOKEN_MANIPULATION = 33;

T1134.001

Generated from protobuf enum TOKEN_IMPERSONATION_OR_THEFT = 39;

T1136

Generated from protobuf enum CREATE_ACCOUNT = 79;

T1136.001

Generated from protobuf enum LOCAL_ACCOUNT = 80;

T1140

Generated from protobuf enum DEOBFUSCATE_DECODE_FILES_OR_INFO = 95;

T1190

Generated from protobuf enum EXPLOIT_PUBLIC_FACING_APPLICATION = 27;

T1195

Generated from protobuf enum SUPPLY_CHAIN_COMPROMISE = 129;

T1195.001

Generated from protobuf enum COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS = 130;

T1203

Generated from protobuf enum EXPLOITATION_FOR_CLIENT_EXECUTION = 134;

T1204

Generated from protobuf enum USER_EXECUTION = 69;

T1222.002

Generated from protobuf enum LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION = 135;

T1484

Generated from protobuf enum DOMAIN_POLICY_MODIFICATION = 30;

T1485

Generated from protobuf enum DATA_DESTRUCTION = 29;

T1486

Generated from protobuf enum DATA_ENCRYPTED_FOR_IMPACT = 132;

T1489

Generated from protobuf enum SERVICE_STOP = 52;

T1490

Generated from protobuf enum INHIBIT_SYSTEM_RECOVERY = 36;

T1495

Generated from protobuf enum FIRMWARE_CORRUPTION = 81;

T1496

Generated from protobuf enum RESOURCE_HIJACKING = 8;

T1498

Generated from protobuf enum NETWORK_DENIAL_OF_SERVICE = 17;

T1526

Generated from protobuf enum CLOUD_SERVICE_DISCOVERY = 48;

T1528

Generated from protobuf enum STEAL_APPLICATION_ACCESS_TOKEN = 42;

T1531

Generated from protobuf enum ACCOUNT_ACCESS_REMOVAL = 51;

T1537

Generated from protobuf enum TRANSFER_DATA_TO_CLOUD_ACCOUNT = 91;

T1539

Generated from protobuf enum STEAL_WEB_SESSION_COOKIE = 25;

T1543

Generated from protobuf enum CREATE_OR_MODIFY_SYSTEM_PROCESS = 24;

T1546

Generated from protobuf enum EVENT_TRIGGERED_EXECUTION = 65;

T1547

Generated from protobuf enum BOOT_OR_LOGON_AUTOSTART_EXECUTION = 82;

T1547.006

Generated from protobuf enum KERNEL_MODULES_AND_EXTENSIONS = 83;

T1547.009

Generated from protobuf enum SHORTCUT_MODIFICATION = 127;

T1548

Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM = 34;

T1548.001

Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID = 136;

T1548.003

Generated from protobuf enum ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING = 109;

T1552

Generated from protobuf enum UNSECURED_CREDENTIALS = 13;

T1552.001

Generated from protobuf enum CREDENTIALS_IN_FILES = 105;

T1552.003

Generated from protobuf enum BASH_HISTORY = 96;

T1552.004

Generated from protobuf enum PRIVATE_KEYS = 97;

T1553

Generated from protobuf enum SUBVERT_TRUST_CONTROL = 106;

T1553.004

Generated from protobuf enum INSTALL_ROOT_CERTIFICATE = 107;

T1554

Generated from protobuf enum COMPROMISE_HOST_SOFTWARE_BINARY = 84;

T1555

Generated from protobuf enum CREDENTIALS_FROM_PASSWORD_STORES = 98;

T1556

Generated from protobuf enum MODIFY_AUTHENTICATION_PROCESS = 28;

T1556.003

Generated from protobuf enum PLUGGABLE_AUTHENTICATION_MODULES = 108;

T1556.006

Generated from protobuf enum MULTI_FACTOR_AUTHENTICATION = 137;

T1562

Generated from protobuf enum IMPAIR_DEFENSES = 31;

T1562.001

Generated from protobuf enum DISABLE_OR_MODIFY_TOOLS = 55;

T1562.006

Generated from protobuf enum INDICATOR_BLOCKING = 110;

T1562.012

Generated from protobuf enum DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM = 111;

T1564

Generated from protobuf enum HIDE_ARTIFACTS = 85;

T1564.001

Generated from protobuf enum HIDDEN_FILES_AND_DIRECTORIES = 86;

T1564.002

Generated from protobuf enum HIDDEN_USERS = 87;

T1567

Generated from protobuf enum EXFILTRATION_OVER_WEB_SERVICE = 20;

T1567.002

Generated from protobuf enum EXFILTRATION_TO_CLOUD_STORAGE = 21;

T1568

Generated from protobuf enum DYNAMIC_RESOLUTION = 12;

T1570

Generated from protobuf enum LATERAL_TOOL_TRANSFER = 41;

T1574

Generated from protobuf enum HIJACK_EXECUTION_FLOW = 112;

T1574.006

Generated from protobuf enum HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING = 113;

T1578

Generated from protobuf enum MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE = 26;

T1578.001

Generated from protobuf enum CREATE_SNAPSHOT = 54;

T1580

Generated from protobuf enum CLOUD_INFRASTRUCTURE_DISCOVERY = 53;

T1587

Generated from protobuf enum DEVELOP_CAPABILITIES = 99;

T1587.001

Generated from protobuf enum DEVELOP_CAPABILITIES_MALWARE = 100;

T1588

Generated from protobuf enum OBTAIN_CAPABILITIES = 43;

T1588.001

Generated from protobuf enum OBTAIN_CAPABILITIES_MALWARE = 101;

T1588.006

Generated from protobuf enum OBTAIN_CAPABILITIES_VULNERABILITIES = 133;

T1595

Generated from protobuf enum ACTIVE_SCANNING = 1;

T1595.001

Generated from protobuf enum SCANNING_IP_BLOCKS = 2;

T1608

Generated from protobuf enum STAGE_CAPABILITIES = 88;

T1608.001

Generated from protobuf enum UPLOAD_MALWARE = 102;

T1609

Generated from protobuf enum CONTAINER_ADMINISTRATION_COMMAND = 60;

T1610

Generated from protobuf enum DEPLOY_CONTAINER = 66;

T1611

Generated from protobuf enum ESCAPE_TO_HOST = 61;

T1613

Generated from protobuf enum CONTAINER_AND_RESOURCE_DISCOVERY = 57;

T1620

Generated from protobuf enum REFLECTIVE_CODE_LOADING = 92;

T1649

Generated from protobuf enum STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES = 62;

T1657

Generated from protobuf enum FINANCIAL_THEFT = 131;