Primary Categories: [[Fog]] Links: [[Fog Articles]] / [[Fog CVE's]] / [[Fog Ransom Note]] / [[Fog Tools]] # [[Fog TTP's]] ## Initial Access | TTP Name | TTP ID | | --------------------------------- | ------ | | Valid Accounts | T1078 | | External Remote Services | T1133 | ## Execution | TTP Name | TTP ID | | -------------------------------------------------------- | --------- | | Command and Scripting Interpreter: Windows Command Shell | T1059.003 | | System Services: Service Execution | T1569.002 | ## Persistence | TTP Name | TTP ID | | ---------------------------------- | --------- | | Create Account: Local Account | T1136.001 | ## Defense Evasion | TTP Name | TTP ID | | ---------------------------------------------------- | --------- | | Impair Defenses: Disable or Modify Tools | T1562.001 | | Use Alternate Authentication Material: Pass the Hash | T1550.002 | | Valid Accounts | T1078 | | Deobfuscate/Decode Files or Information | T1140 | | Indicator Removal: File Deletion | T1070.004 | ## Credential Access | TTP Name | TTP ID | | -------------------------------- | --------- | | OS Credential Dumping: NTDS | T1003.003 | | Credentials from Password Stores | T1555 | | Brute Force: Credential Stuffing | T1110 | ## Discovery | TTP Name | TTP ID | | ----------------------------- | ------ | | Network Service Discovery<br> | T1046 | | Network Share Discovery<br> | T1135 | ## Lateral Movement | TTP Name | TTP ID | | ----------------------------------------- | --------- | | Lateral Tool Transfer<br> | T1570 | | Remote Services: RDP<br> | T1021.001 | | Remote Services: SMB/Windows Admin Shares | T1021.002 | ## Execution | TTP Name | TTP ID | | ------------------------------------------------------------ | --------- | | Command and Scripting Interpreter: Windows Command Shell<br> | T1059.003 | | System Services: Service Execution (PsExec) | T1569.002 | ## Impact | TTP Name | TTP ID | | --------------------------- | ------ | | Data Encrypted for Impact | T1486 | | Inhibit System Recovery<br> | T1490 | | Service Stop | T1489 |