{"name":"VANTAGE: Acme Corp (synthetic, real catalog)","domain":"enterprise-attack","versions":{"attack":"19","navigator":"5.1.0","layer":"4.5"},"description":"Generated by VANTAGE. SENSITIVE: a map of blind spots.","techniques":[{"techniqueID":"T1001","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1001.001","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1001.002","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1001.003","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-14.1, CIS-14.3, CIS-16.1, CIS-16.9, CIS-18.3, CIS-2.6, CIS-3.11, CIS-3.12, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.001","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.3, CIS-16.1, CIS-16.9, CIS-18.3, CIS-2.6, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 7","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.002","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.3, CIS-16.1, CIS-16.9, CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.003","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-14.1, CIS-14.3, CIS-16.1, CIS-16.9, CIS-3.11, CIS-3.12, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.004","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.3, CIS-16.1, CIS-16.9, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.005","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.3, CIS-16.1, CIS-16.9, CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.006","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 4","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.007","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1003.008","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1005","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1006","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1007","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1008","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1010","tactic":"discovery","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1011","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1011.001","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1012","tactic":"discovery","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1014","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1016","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1016.001","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1016.002","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1018","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1020","tactic":"exfiltration","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1020.001","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.10, CIS-4.2, CIS-4.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.001","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-12.7, CIS-13.5, CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-4.8, CIS-5.3, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5, CIS-7.6, CIS-7.7; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.002","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.7, CIS-5.2, CIS-5.3, CIS-6.1, CIS-6.2, CIS-7.6, CIS-7.7; live rules: 14","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.003","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.4, CIS-4.5, CIS-4.8, CIS-7.7; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.004","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5, CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.005","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-18.2, CIS-18.3, CIS-2.1, CIS-2.2, CIS-2.3, CIS-2.4, CIS-2.5, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.006","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.4, CIS-4.5, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.007","tactic":"lateral-movement","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1021.008","tactic":"lateral-movement","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1025","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2; live rules: 26","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.001","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.002","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.003","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.004","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.005","tactic":"stealth","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.006","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.007","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.008","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.009","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.010","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.011","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.012","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.013","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.014","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.015","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.016","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.017","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1027.018","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1029","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1030","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1033","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-2.5, CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.004","tactic":"stealth","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.005","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-2.5, CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.006","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.007","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.008","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.009","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.010","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.011","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1036.012","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.001","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.003","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.003","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.005","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1037.005","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1039","tactic":"collection","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1040","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.10, CIS-4.2, CIS-4.6, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1040","tactic":"discovery","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.10, CIS-4.2, CIS-4.6, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1041","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1046","tactic":"discovery","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-16.10, CIS-16.8, CIS-18.2, CIS-18.3, CIS-3.12, CIS-4.4, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1047","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1048","tactic":"exfiltration","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.6, CIS-7.7, CIS-9.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1048.001","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.6, CIS-7.7, CIS-9.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1048.002","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.6, CIS-7.7, CIS-9.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1048.003","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.6, CIS-7.7, CIS-9.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1049","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1052","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.3, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1052.001","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.3, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.002","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.11, CIS-8.2, CIS-8.3, CIS-8.5, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.002","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.11, CIS-8.2, CIS-8.3, CIS-8.5, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.002","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.11, CIS-8.2, CIS-8.3, CIS-8.5, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.003","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.11, CIS-8.2, CIS-8.5, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.003","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.11, CIS-8.2, CIS-8.5, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.003","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.11, CIS-8.2, CIS-8.5, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.005","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.3; live rules: 9","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.005","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.3; live rules: 9","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.005","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.3; live rules: 9","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.006","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.006","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.006","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.007","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.007","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1053.007","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.001","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.002","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.003","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.004","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.005","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.005","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.008","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.008","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.009","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.009","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.011","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.011","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.012","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.012","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.013","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.013","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.014","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.014","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.2, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.015","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1055.015","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.001","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.001","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.002","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.002","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.003","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.003","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.004","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1056.004","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1057","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2, CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-9.3, CIS-9.6; live rules: 4","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.001","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2, CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 23","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.002","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.003","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-2.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.004","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-2.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.005","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2, CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8, CIS-9.3, CIS-9.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.006","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2, CIS-18.3, CIS-2.1, CIS-2.2, CIS-2.3, CIS-2.4, CIS-2.5, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.007","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8, CIS-9.3, CIS-9.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.008","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-12.5, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.009","tactic":"execution","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.010","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.011","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.012","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1059.013","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1068","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1069","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1069.001","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1069.002","tactic":"discovery","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1069.003","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.1, CIS-3.10, CIS-3.11, CIS-3.12, CIS-3.3, CIS-3.4, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.2, CIS-8.3, CIS-8.9; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.004","tactic":"stealth","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.005","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.006","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.007","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.008","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.009","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1070.010","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1071","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1071.001","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3; live rules: 23","enabled":true,"showSubtechniques":false},{"techniqueID":"T1071.002","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1071.003","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1071.004","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.9, CIS-9.2, CIS-9.3; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1071.005","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1072","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-14.9, CIS-16.1, CIS-16.10, CIS-16.8, CIS-16.9, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.4, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1072","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-14.9, CIS-16.1, CIS-16.10, CIS-16.8, CIS-16.9, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.4, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1074","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1074.001","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1074.002","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-16.1, CIS-16.9, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 38","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-16.1, CIS-16.9, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 38","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-16.1, CIS-16.9, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 38","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-16.1, CIS-16.9, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 38","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.001","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.001","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.002","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.002","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.002","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.002","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.003","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.003","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.003","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.004","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 30","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.004","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 30","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.004","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 30","enabled":true,"showSubtechniques":false},{"techniqueID":"T1078.004","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.1, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 30","enabled":true,"showSubtechniques":false},{"techniqueID":"T1080","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.5, CIS-2.5, CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1082","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1083","tactic":"discovery","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1087","tactic":"discovery","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.8; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1087.001","tactic":"discovery","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1087.002","tactic":"discovery","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.8; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1087.003","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1087.004","tactic":"discovery","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.4, CIS-9.3; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090.001","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090.002","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090.003","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1090.004","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1091","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.3, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1091","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.3, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1092","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.3, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1095","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.2, CIS-4.4, CIS-4.5, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-16.8, CIS-18.3, CIS-3.12, CIS-3.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 13","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-16.8, CIS-18.3, CIS-3.12, CIS-3.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 13","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.001","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-16.8, CIS-3.12, CIS-3.3, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.001","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-16.8, CIS-3.12, CIS-3.3, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.003","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.5; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.003","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.5; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.8, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.8, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.005","tactic":"persistence","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.005","tactic":"privilege-escalation","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.006","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.006","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.007","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1098.007","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1102","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-2.3, CIS-2.5, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1102.001","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-2.3, CIS-2.5, CIS-9.3; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1102.002","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-2.3, CIS-2.5, CIS-9.3; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1102.003","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-2.3, CIS-2.5, CIS-9.3; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1104","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1105","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1106","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.10, CIS-4.7, CIS-5.2, CIS-5.3, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 13","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110.001","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.10, CIS-4.7, CIS-5.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110.002","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110.003","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.10, CIS-4.7, CIS-5.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1110.004","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.10, CIS-4.7, CIS-5.2, CIS-5.3, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1111","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1112","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1112","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1113","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1114","tactic":"collection","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.10, CIS-6.3, CIS-6.5; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1114.001","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.10; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1114.002","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.10, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1114.003","tactic":"collection","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.10; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1115","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1119","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.4, CIS-3.11; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1120","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1123","tactic":"collection","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1124","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1125","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127.001","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127.002","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127.003","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1127.003","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1129","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1132","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1132.001","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1132.002","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1133","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-12.7, CIS-13.5, CIS-16.10, CIS-16.8, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.8, CIS-6.3, CIS-6.4, CIS-6.5, CIS-7.6, CIS-7.7; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1133","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-12.7, CIS-13.5, CIS-16.10, CIS-16.8, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.8, CIS-6.3, CIS-6.4, CIS-6.5, CIS-7.6, CIS-7.7; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.001","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 4","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.001","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 4","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.002","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.002","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.003","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.004","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.004","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.005","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1134.005","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1135","tactic":"discovery","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1136","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1136.001","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1136.002","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1136.003","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-16.8, CIS-3.12, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-4.1, CIS-4.8, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5, CIS-7.7, CIS-9.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-4.1, CIS-4.8, CIS-9.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.003","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.005","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1137.006","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1140","tactic":"stealth","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1176","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.4, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-9.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1176.001","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1176.002","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1185","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.4, CIS-3.3, CIS-4.7, CIS-5.3, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1187","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.2, CIS-7.6, CIS-7.7; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1189","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-18.3, CIS-2.3, CIS-7.1, CIS-7.2, CIS-7.4, CIS-7.5, CIS-9.1, CIS-9.3, CIS-9.6; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1190","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-12.1, CIS-12.2, CIS-16.8, CIS-18.1, CIS-18.2, CIS-18.3, CIS-3.12, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.5, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.6, CIS-7.7; live rules: 79","enabled":true,"showSubtechniques":false},{"techniqueID":"T1195","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.1, CIS-16.11, CIS-16.2, CIS-16.3, CIS-16.4, CIS-16.5, CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1195.001","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.1, CIS-16.11, CIS-16.2, CIS-16.3, CIS-16.4, CIS-16.5, CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1195.002","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.1, CIS-16.11, CIS-16.2, CIS-16.3, CIS-16.4, CIS-16.5, CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1195.003","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1197","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1197","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1197","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1199","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-3.12, CIS-4.1, CIS-4.4; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1200","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-1.1, CIS-1.2, CIS-1.4, CIS-12.2, CIS-12.6, CIS-4.1, CIS-4.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1201","tactic":"discovery","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1202","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1203","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.3, CIS-2.5, CIS-9.3, CIS-9.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.001","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.3, CIS-2.5, CIS-9.3, CIS-9.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.002","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.003","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.004","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1204.005","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205.001","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-4.2, CIS-4.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205.002","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1205.002","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1207","tactic":"defense-impairment","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1210","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-12.2, CIS-16.10, CIS-16.8, CIS-18.1, CIS-18.2, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.4, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.5, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5, CIS-7.6; live rules: 6","enabled":true,"showSubtechniques":false},{"techniqueID":"T1211","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1212","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-18.3, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.4, CIS-14.5, CIS-16.1, CIS-16.9, CIS-18.3, CIS-3.1, CIS-3.2, CIS-3.3, CIS-4.7, CIS-5.3, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213.001","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.4, CIS-14.5, CIS-16.1, CIS-16.9, CIS-18.3, CIS-3.1, CIS-3.2, CIS-3.3, CIS-4.7, CIS-5.3, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213.002","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.4, CIS-14.5, CIS-16.1, CIS-16.9, CIS-18.3, CIS-3.1, CIS-3.2, CIS-3.3, CIS-4.7, CIS-5.3, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213.003","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213.004","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213.005","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1213.006","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1216","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1216.001","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1216.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1217","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-10.5, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.3, CIS-2.5, CIS-9.3, CIS-9.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.002","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.004","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.005","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.007","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.008","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.009","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.010","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.011","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.012","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-18.2, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.013","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.014","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1218.015","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1219","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-2.5, CIS-4.2, CIS-4.4, CIS-7.6, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1219.001","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1219.002","tactic":"command-and-control","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1219.003","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1220","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1221","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-14.1, CIS-14.2, CIS-14.6, CIS-18.3, CIS-2.3, CIS-4.1, CIS-4.8; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1222","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1222.001","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1222.002","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1480","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1480.001","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1480.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1482","tactic":"discovery","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1484","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1484","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1484.001","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1484.001","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1484.002","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1484.002","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1485","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 9","enabled":true,"showSubtechniques":false},{"techniqueID":"T1485.001","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1486","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1489","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-3.12, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 6","enabled":true,"showSubtechniques":false},{"techniqueID":"T1490","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5, CIS-18.3, CIS-4.1; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1491","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1491.001","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1491.002","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1495","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1496","tactic":"impact","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 5","enabled":true,"showSubtechniques":false},{"techniqueID":"T1496.001","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1496.002","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1496.003","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1496.004","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497.001","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497.001","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497.002","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497.003","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1497.003","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1498","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1498.001","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1498.002","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1499","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.2, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1499.001","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.2, CIS-7.6, CIS-7.7; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1499.002","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.2, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1499.003","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.2, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1499.004","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.2, CIS-7.6, CIS-7.7; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505.003","tactic":"persistence","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 9","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505.004","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505.005","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1505.006","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1518","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1518.001","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1518.002","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1525","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1526","tactic":"discovery","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1528","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.2, CIS-14.3, CIS-14.6, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4; live rules: 8","enabled":true,"showSubtechniques":false},{"techniqueID":"T1529","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1530","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-3.11, CIS-3.3, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.3, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1531","tactic":"impact","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1534","tactic":"lateral-movement","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1535","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1537","tactic":"exfiltration","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.4, CIS-3.3, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.3, CIS-6.1, CIS-6.2; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1538","tactic":"discovery","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1539","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.3, CIS-14.6, CIS-18.3, CIS-4.1, CIS-6.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.001","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.002","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.003","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.004","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.005","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-12.5, CIS-13.3, CIS-18.3, CIS-4.1, CIS-4.2, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.2, CIS-8.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1542.005","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-12.5, CIS-13.3, CIS-18.3, CIS-4.1, CIS-4.2, CIS-4.7, CIS-4.8, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.2, CIS-8.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.001","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.003","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 20","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.003","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 20","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.005","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1543.005","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546","tactic":"persistence","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546","tactic":"privilege-escalation","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.001","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.001","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.003","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.003","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.005","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.005","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.006","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.006","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.007","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.007","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.008","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-12.7, CIS-13.5, CIS-18.3, CIS-2.5, CIS-4.1, CIS-4.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.008","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-12.7, CIS-13.5, CIS-18.3, CIS-2.5, CIS-4.1, CIS-4.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.009","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.009","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.010","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.6, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.010","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.6, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.011","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.011","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.012","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.012","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.013","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.013","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.014","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.014","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.015","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.015","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.016","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.016","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.017","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.017","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.018","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1546.018","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547","tactic":"persistence","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547","tactic":"privilege-escalation","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.001","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.001","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.003","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.003","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.005","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.005","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.006","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.006","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-10.1, CIS-10.2, CIS-10.7, CIS-13.2, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.007","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.3, CIS-14.4, CIS-18.3, CIS-2.3, CIS-4.1, CIS-4.8, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.007","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.3, CIS-14.4, CIS-18.3, CIS-2.3, CIS-4.1, CIS-4.8, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.008","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.008","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.009","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.009","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.010","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.010","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.012","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.012","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.013","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.013","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.014","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.014","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.015","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1547.015","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548","tactic":"privilege-escalation","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-2.5, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 9","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548.001","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548.002","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548.003","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548.004","tactic":"privilege-escalation","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548.005","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1548.006","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1550","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1550.001","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.11, CIS-4.1; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1550.002","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 4","enabled":true,"showSubtechniques":false},{"techniqueID":"T1550.003","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1550.004","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.3, CIS-14.3, CIS-14.4, CIS-14.9, CIS-16.1, CIS-16.9, CIS-18.3, CIS-3.1, CIS-3.11, CIS-3.12, CIS-3.2, CIS-3.3, CIS-4.1, CIS-4.2, CIS-4.5, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 7","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.001","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.3, CIS-14.4, CIS-14.9, CIS-16.1, CIS-16.9, CIS-18.3, CIS-3.1, CIS-3.2, CIS-3.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.002","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.1, CIS-3.2, CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.003","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.004","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.3, CIS-18.3, CIS-3.1, CIS-3.11, CIS-3.12, CIS-3.2, CIS-3.3, CIS-5.2, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.005","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.4, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.2, CIS-4.5, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.006","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-3.1, CIS-3.2, CIS-4.1, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.007","tactic":"credential-access","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1552.008","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553.001","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553.002","tactic":"defense-impairment","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553.003","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553.004","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553.005","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1553.006","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1554","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.001","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.002","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.003","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.004","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.005","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1555.006","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556","tactic":"persistence","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-18.3, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 10","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-18.3, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 10","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-18.3, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 10","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.001","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.001","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.001","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.1, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.002","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.002","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.002","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.003","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.003","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.003","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.004","tactic":"persistence","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.004","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.004","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.005","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.005","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.005","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.006","tactic":"persistence","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.006","tactic":"defense-impairment","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.006","tactic":"credential-access","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.007","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.007","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.007","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.008","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.008","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.008","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.009","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.009","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1556.009","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-14.2, CIS-14.6, CIS-16.10, CIS-16.8, CIS-18.2, CIS-18.3, CIS-3.10, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.6, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-13.4, CIS-14.2, CIS-14.6, CIS-16.10, CIS-16.8, CIS-18.2, CIS-18.3, CIS-3.10, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.6, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.001","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-13.3, CIS-16.8, CIS-18.2, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.001","tactic":"collection","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-12.2, CIS-13.3, CIS-16.8, CIS-18.2, CIS-18.3, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.5, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.002","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-14.2, CIS-14.6, CIS-18.2, CIS-18.3, CIS-3.10, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.002","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-14.2, CIS-14.6, CIS-18.2, CIS-18.3, CIS-3.10, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.8, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.003","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.003","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.004","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1557.004","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1558","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.10, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1558.001","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1558.002","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.10, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1558.003","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.10, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-5.5; live rules: 7","enabled":true,"showSubtechniques":false},{"techniqueID":"T1558.004","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-3.10, CIS-4.1, CIS-4.7, CIS-5.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1558.005","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1559","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1559.001","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1559.002","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1559.003","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1560","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.1, CIS-2.2, CIS-2.3, CIS-2.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1560.001","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.1, CIS-2.2, CIS-2.3, CIS-2.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1560.002","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1560.003","tactic":"collection","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1561","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1561.001","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1561.002","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1563","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-4.8, CIS-5.3, CIS-6.1, CIS-6.2, CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1563.001","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.7, CIS-4.8, CIS-5.2, CIS-5.3, CIS-6.1, CIS-6.2, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1563.002","tactic":"lateral-movement","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-12.7, CIS-13.5, CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-4.8, CIS-5.1, CIS-5.3, CIS-5.5, CIS-6.1, CIS-6.2, CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.001","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.002","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.003","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.004","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.005","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.006","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.007","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-16.10, CIS-18.3, CIS-2.3, CIS-2.5, CIS-4.1, CIS-4.8; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.008","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.009","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.010","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.011","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.012","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.013","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1564.014","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1565","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5, CIS-12.2, CIS-16.8, CIS-3.10, CIS-3.11, CIS-3.12, CIS-3.3, CIS-4.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1565.001","tactic":"impact","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-11.1, CIS-11.2, CIS-11.3, CIS-11.4, CIS-11.5, CIS-3.11, CIS-3.12, CIS-3.3, CIS-6.1, CIS-6.2, CIS-8.9; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1565.002","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.3, CIS-3.10; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1565.003","tactic":"impact","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-11.3, CIS-11.4, CIS-12.2, CIS-16.8, CIS-3.12, CIS-3.3, CIS-4.4, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.3, CIS-9.3, CIS-9.6; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.001","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.3, CIS-9.3, CIS-9.6; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.002","tactic":"initial-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.3, CIS-9.3; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.003","tactic":"initial-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6, CIS-2.3, CIS-2.5, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1566.004","tactic":"initial-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1567","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.3, CIS-2.5, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1567.001","tactic":"exfiltration","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.3, CIS-2.5, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1567.002","tactic":"exfiltration","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-2.3, CIS-2.5, CIS-9.3; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1567.003","tactic":"exfiltration","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1567.004","tactic":"exfiltration","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1568","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-9.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1568.001","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1568.002","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-9.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1568.003","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1569","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1569.001","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1569.002","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 19","enabled":true,"showSubtechniques":false},{"techniqueID":"T1569.003","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1570","tactic":"lateral-movement","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-4.2, CIS-4.4, CIS-4.5, CIS-7.6, CIS-7.7; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1571","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.3, CIS-4.2, CIS-4.4; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1572","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3, CIS-13.4, CIS-4.2, CIS-4.4, CIS-7.7, CIS-9.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1573","tactic":"command-and-control","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-13.3; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1573.001","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1573.002","tactic":"command-and-control","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-13.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.001","tactic":"execution","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.001","tactic":"stealth","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2, CIS-7.1, CIS-7.2, CIS-7.3, CIS-7.4, CIS-7.5; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.004","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.004","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.005","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.005","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.006","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.006","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.007","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.007","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.008","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.008","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.009","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.009","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-2.5, CIS-2.6, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.010","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.010","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.011","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.011","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.012","tactic":"execution","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.012","tactic":"stealth","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-2.5, CIS-2.6, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.013","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.013","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.014","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1574.014","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1578","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1578.001","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1578.002","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1578.003","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1578.004","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1578.005","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1580","tactic":"discovery","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.003","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.004","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.005","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.006","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.007","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1583.008","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584","tactic":"resource-development","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.003","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.004","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.005","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.006","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.007","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1584.008","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1585","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1585.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1585.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1585.003","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1586","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1586.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1586.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1586.003","tactic":"resource-development","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1587","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1587.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1587.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1587.003","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1587.004","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588","tactic":"resource-development","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.003","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.004","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.005","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.006","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1588.007","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1589","tactic":"reconnaissance","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1589.001","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1589.002","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1589.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590","tactic":"reconnaissance","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.2, CIS-18.3; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590.001","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590.002","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590.004","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590.005","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1590.006","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1591","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1591.001","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1591.002","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1591.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1591.004","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1592","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1592.001","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1592.002","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1592.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1592.004","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1593","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1593.001","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1593.002","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1593.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1594","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1595","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1595.001","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1595.002","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.2, CIS-18.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1595.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596.001","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596.002","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596.003","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596.004","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1596.005","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1597","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1597.001","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1597.002","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1598","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1598.001","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1598.002","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1598.003","tactic":"reconnaissance","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.1, CIS-14.2, CIS-14.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1598.004","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1599","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.4, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1599.001","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-13.4, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1600","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1600.001","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1600.002","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1601","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1601.001","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1601.002","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.2, CIS-3.6, CIS-4.1, CIS-4.7, CIS-5.2, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-6.4, CIS-6.5; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1602","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.1, CIS-12.2, CIS-13.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-3.10, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.6, CIS-7.6; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1602.001","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.1, CIS-12.2, CIS-13.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-3.10, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.6, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1602.002","tactic":"collection","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-12.1, CIS-12.2, CIS-13.3, CIS-13.4, CIS-18.2, CIS-18.3, CIS-3.10, CIS-3.12, CIS-4.1, CIS-4.2, CIS-4.4, CIS-4.6, CIS-7.6, CIS-7.7; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1606","tactic":"credential-access","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1606.001","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1606.002","tactic":"credential-access","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608.003","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608.004","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608.005","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1608.006","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1609","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1610","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1611","tactic":"privilege-escalation","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1612","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1613","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1614","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1614.001","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1615","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1619","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1620","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1621","tactic":"credential-access","score":2,"color":"#1565c0","comment":"detected_only; controls: -; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1622","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1622","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1647","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-14.3, CIS-14.4, CIS-3.3, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1648","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1649","tactic":"credential-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1650","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1651","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1652","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1653","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1654","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1657","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1659","tactic":"initial-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1659","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1665","tactic":"command-and-control","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1666","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1667","tactic":"impact","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1668","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1669","tactic":"initial-access","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1671","tactic":"persistence","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1673","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1674","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1675","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1677","tactic":"execution","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1678","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1679","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1680","tactic":"discovery","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1681","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1682","tactic":"reconnaissance","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1683","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1683.001","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1683.002","tactic":"resource-development","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1684","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1684.001","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1684.002","tactic":"stealth","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.3, CIS-4.1, CIS-4.2, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 26","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685.001","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 1","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685.002","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.3, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.2, CIS-8.3; live rules: 2","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685.003","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685.004","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685.005","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-3.1, CIS-3.10, CIS-3.11, CIS-3.12, CIS-3.3, CIS-3.4, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.2, CIS-8.3, CIS-8.9; live rules: 3","enabled":true,"showSubtechniques":false},{"techniqueID":"T1685.006","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.1, CIS-3.10, CIS-3.11, CIS-3.12, CIS-3.3, CIS-3.4, CIS-4.1, CIS-5.4, CIS-6.1, CIS-6.2, CIS-8.1, CIS-8.10, CIS-8.2, CIS-8.3; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1686","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1686.001","tactic":"defense-impairment","score":3,"color":"#2e7d32","comment":"defended; controls: CIS-18.3, CIS-3.3, CIS-4.1, CIS-4.7, CIS-5.3, CIS-5.4, CIS-6.1, CIS-6.2; live rules: 4","enabled":true,"showSubtechniques":false},{"techniqueID":"T1686.002","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1686.003","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1687","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1688","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1689","tactic":"defense-impairment","score":0,"color":"#b0b0b0","comment":"blind; controls: -; live rules: 0","enabled":true,"showSubtechniques":false},{"techniqueID":"T1690","tactic":"defense-impairment","score":1,"color":"#e65100","comment":"paper_only; controls: CIS-18.3, CIS-4.1; live rules: 0","enabled":true,"showSubtechniques":false}],"legendItems":[{"label":"defended","color":"#2e7d32"},{"label":"paper_only","color":"#e65100"},{"label":"detected_only","color":"#1565c0"},{"label":"blind","color":"#b0b0b0"}],"gradient":{"colors":["#b0b0b0","#2e7d32"],"minValue":0,"maxValue":3}}