Skip to content

Command and Scripting Interpreter

Technique · ATTACK:enterprise:T1059

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:T1059",
  "title": "Command and Scripting Interpreter",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1059",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--7385dfaf-6886-4229-9ecd-6fd678040830",
  "external_id": "T1059",
  "domain": "enterprise",
  "created": "2017-05-31T21:30:49.546Z",
  "modified": "2026-05-12T15:12:00.641Z",
  "version": "2.7",
  "aliases": [

  ],
  "tactics": [
    "execution"
  ],
  "source_references": [
    {
      "source_name": "Remote Shell Execution in Python",
      "url": "https://www.thepythoncode.com/article/executing-bash-commands-remotely-in-python"
    },
    {
      "source_name": "Cisco IOS Software Integrity Assurance - Command History",
      "url": "https://tools.cisco.com/security/center/resources/integrity_assurance.html#23"
    },
    {
      "source_name": "Powershell Remote Commands",
      "url": "https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/running-remote-commands?view=powershell-7.1"
    }
  ]
}

Explicit source assertions (67)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0117 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--00fb61de-33f5-4e85-aca3-8e4016aa0bf8

ClearSky Pay2Kitten December 2020

ATTACK:enterprise:G0038 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0d63f3cf-bace-4210-9b76-199c5cdb8764

Citizen Lab Stealth Falcon May 2016

ATTACK:enterprise:G1035 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--120adfe2-5ad8-49bb-b6e8-e474b306814b

DomainTools WinterVivern 2021

ATTACK:enterprise:T1059.005 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1313b6ce-f09b-4747-abd9-0220293d60f3

ATTACK:enterprise:G0046 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1332e859-38be-45ed-9ebc-09efd7117c17

FireEye FIN7 Aug 2018 · Flashpoint FIN 7 March 2019 · FireEye FIN7 Aug 2018

ATTACK:enterprise:S0334 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1d1eaec4-ceeb-4fda-b177-f92fad7d3e44

Malwarebytes DarkComet March 2018

ATTACK:enterprise:G0037 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--1f764874-0e08-4799-9487-a9e12c499c13

FireEye FIN6 April 2016 · FireEye FIN6 Apr 2019

ATTACK:enterprise:T1059.002 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--20c01d16-fdd8-4f6b-ba0c-d81b70329440

ATTACK:enterprise:M1033 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--292e29e8-79d9-4b15-930e-a7e26c27ca15

ATTACK:enterprise:S1227 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--29ff7a09-f6d2-4a3a-a851-c9054e5fe9f8

ATTACK:enterprise:C0005 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2b4b6861-7143-4155-aaac-60213a314abd

ESET Operation Spalax Jan 2021

ATTACK:enterprise:T1059.003 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2bd00c10-dace-4747-931e-67915d9aab7d

ATTACK:enterprise:M1045 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2cf7243f-d5d7-473b-9cb7-27c7186565d3

ATTACK:enterprise:S0023 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2fa20fad-4ede-42f4-8ce5-7f5a6ce83ed8

Crowdstrike DNC June 2016 · ESET Sednit Part 2

ATTACK:enterprise:S0695 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34351a4f-ea7c-4420-9063-1d8644073ea7

ATTACK:enterprise:S0618 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35887eab-0306-4e28-910d-2235207cc621

FireEye FiveHands April 2021 · NCC Group Fivehands June 2021

ATTACK:enterprise:G0053 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--39590383-ba69-4d8f-9520-e893cd4ebcdf

Mandiant FIN5 GrrCON Oct 2016

ATTACK:enterprise:S0167 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3ba2b8bc-1c5b-4cb3-8234-a7dc7b7552d0

ClearSky Wilted Tulip July 2017

ATTACK:enterprise:S0434 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--45c4d1f9-414f-4542-8272-c783f7314514

QiAnXin APT-C-36 Feb2019

ATTACK:enterprise:S0487 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--46da305e-d59a-42a4-9d2b-cdd223c69664

ESET ForSSHe December 2018

ATTACK:enterprise:C0029 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4827d600-cf36-48c8-ba73-46d89d34143b

Mandiant Cutting Edge Part 2 January 2024 · Mandiant Cutting Edge January 2024

ATTACK:enterprise:T1059.013 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--48890ae3-f271-4cb7-9dc2-9e51c7d16b78

ATTACK:enterprise:G0073 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4f2e62d0-5345-45dc-9e9d-46bb11c5f35d

ATTACK:enterprise:T1059.004 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--5a67ece5-7409-4eb5-8c64-4a67e2f52776

ATTACK:enterprise:S1151 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--65684059-3a14-431f-8380-9b940b9a1fc1

Mandiant ROADSWEEP August 2022

ATTACK:enterprise:S0032 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--68852bf2-c3cf-4d59-b1c1-f6af8fb61be6

FireEye Hacking Team · Nccgroup Gh0st April 2018

ATTACK:enterprise:T1059.010 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6a2d3362-53f6-455b-bc1f-be9b85706a47

ATTACK:enterprise:M1042 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--6abc6901-d152-4b5f-b27d-8b973ae567cb

ATTACK:enterprise:T1059.008 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--74192d82-680f-412e-80df-27b86fdfa20c

ATTACK:enterprise:G0050 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--768a6678-4823-4af5-bfd9-1a92c562b9f2

Cybereason Cobalt Kitty 2017

ATTACK:enterprise:G0035 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--769a2214-5e04-4290-a172-b770f8bb223e

US-CERT TA18-074A

ATTACK:enterprise:C0064 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7aea8a2a-6a12-422a-bf08-6e1f43b41f6d

AI-Mexico-Govt-Breach

ATTACK:enterprise:S0598 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7e3bdb4d-76b3-42ce-8f68-587320e39ec7

ANSSI Sandworm January 2021

ATTACK:enterprise:T1059.012 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--7f16fb67-a9d1-44ff-bfd0-3c2d7294747b

ATTACK:enterprise:S0219 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--819a5c4e-2bd6-4d9b-844c-21dc31e85a67

FireEye APT37 Feb 2018

ATTACK:enterprise:S1110 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--81c7148b-3608-40ac-bd35-a72d88207d52

Mandiant Pulse Secure Zero-Day April 2021

ATTACK:enterprise:C0053 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--828cc716-d3ea-49e8-80a8-67d471a62017

ATTACK:enterprise:M1038 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--87fd0088-41da-47ac-bd69-a8ac151a0d39

Microsoft PowerShell CLM

ATTACK:enterprise:S0234 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--89e07be1-6d8b-4886-ab3d-68fb23275c8c

CheckPoint Bandook Nov 2020

ATTACK:enterprise:G1031 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8a7baaae-c0d5-4465-917d-4612232a6dae

Palo Alto Unit 42 OutSteel SaintBot February 2022

ATTACK:enterprise:M1049 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8d56622d-547a-4daa-89b8-1c555d1ac5b7

ATTACK:enterprise:S1154 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8e29c8f6-8155-47b3-9704-1ba93586af3a

Lumen Versa 2024

ATTACK:enterprise:G0107 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--92b00f56-c9ac-4e48-9890-40b78ab0c361

Symantec Whitefly March 2019

ATTACK:enterprise:S0330 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9317c15e-44ae-4d00-9f2b-ad1b07ff52b5

GDATA Zeus Panda June 2017

ATTACK:enterprise:S1192 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--941a62af-7c95-466d-8575-95d61198e82e

Mandiant APT42-untangling

ATTACK:enterprise:T1059.006 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--96575047-df79-4e74-9f88-44307a46bce0

ATTACK:enterprise:S0374 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9b174c9b-eab5-4715-aa31-915689054baa

CheckPoint SpeakUp Feb 2019

ATTACK:enterprise:G0087 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a1c62ce5-2f11-415f-bca1-c9021530c090

FBI FLASH APT39 September 2020 · FireEye APT39 Jan 2019

ATTACK:enterprise:G0004 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a5a63d5c-acf7-4720-866d-fcf6e576a58f

Mandiant Operation Ke3chang November 2014 · NCC Group APT15 Alive and Strong

ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ad32e902-6f48-4c8f-bc3d-2fc06f045eed

Microsoft PS JEA · Netspi PowerShell Execution Policy Bypass

ATTACK:enterprise:C0046 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b1b426d2-7fde-4e08-8de0-11d19076c030

Cisco ArcaneDoor 2024

ATTACK:enterprise:T1059.001 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b7dc0db4-b1fb-4235-8b49-0792e7019377

ATTACK:enterprise:G0067 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b906b0a1-12a3-4d6f-82ec-d72a4ef711b4

Volexity InkySquid RokRAT August 2021

ATTACK:enterprise:G0129 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bcb23d08-7670-4373-94a0-370191d01297

Cisco Talos MUSTANG PANDA PLUGX PUBLOAD MAY 2022

ATTACK:enterprise:G0124 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bea0bf7c-62c8-4334-b523-5cc6ec8b36c8

ESET ForSSHe December 2018

ATTACK:enterprise:S0460 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c14e629a-c0cd-4600-873b-924d04d8b627

Proofpoint TA505 October 2019

ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c8ff4bb6-92df-40ca-b975-6682d7c6ac82

ATTACK:enterprise:M1021 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d4dbffc2-246d-4fd4-8c3c-0e7901aaef05

ATTACK:enterprise:S9032 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d8133f0a-2f24-4697-b5f5-3a0d60c6b3dd

ESET_MuddyWater_Dec2025

ATTACK:enterprise:T1059.009 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dc724053-6ac6-43c6-b24a-3e1234a973de

ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e8ce10b4-3b00-40c1-983a-1d87ff9a68ee

FireEye APT34 Dec 2017 · OilRig ISMAgent July 2017 · Unit 42 OopsIE! Feb 2018 · Unit 42 QUADAGENT July 2018 · Unit42 OilRig Nov 2018

ATTACK:enterprise:M1040 → mitigates → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e93059c7-2f60-47f5-af11-bc0a6e7e6d25

ATTACK:enterprise:S0363 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ee448e12-4b71-4c0c-bcca-daff26072d41

Github PowerShell Empire

ATTACK:enterprise:T1059.011 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f1c979e0-3bcd-418c-9ab5-f00e92461b4f

ATTACK:enterprise:S1130 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f34e6a88-bb49-47cc-b0bc-1d2abb63aa56

HP RaspberryRobin 2024

ATTACK:enterprise:S0486 → uses → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f56f953d-7df2-4eee-93b6-f2c8377153bb

ESET ForSSHe December 2018

ATTACK:enterprise:T1059.007 → subtechnique-of → ATTACK:enterprise:T1059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f9867ca2-18a1-4e84-ad1d-61d7c85fe4b3

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.