AWS Create Policy Version to allow all resources
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Windows Service
Valid Accounts
Scheduled Task , Impair Defenses
Web Shell , Server Software Component , Exploit Public-Facing Application
Web Shell , Server Software Component , Exploit Public-Facing Application
Web Shell , Server Software Component , Exploit Public-Facing Application
Web Shell , Server Software Component , Exploit Public-Facing Application
Registry Run Keys / Startup Folder , Boot or Logon Autostart Execution
Registry Run Keys / Startup Folder , Boot or Logon Autostart Execution
Plist Modification
Component Object Model Hijacking , Event Triggered Execution
Component Object Model Hijacking , Event Triggered Execution
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Account , Create Account
Services Registry Permissions Weakness
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
BITS Jobs, Ingress Tool Transfer
BITS Jobs, Ingress Tool Transfer
BITS Jobs
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Modify Authentication Process
Cloud Account , Create Account
Cloud Account , Create Account
Time Providers , Boot or Logon Autostart Execution
Time Providers , Boot or Logon Autostart Execution
Registry Run Keys / Startup Folder , Boot or Logon Autostart Execution
Registry Run Keys / Startup Folder , Boot or Logon Autostart Execution
Image File Execution Options Injection , Event Triggered Execution
Image File Execution Options Injection , Event Triggered Execution
Registry Run Keys / Startup Folder , Boot or Logon Autostart Execution
Registry Run Keys / Startup Folder , Boot or Logon Autostart Execution
Active Setup , Boot or Logon Autostart Execution
Active Setup , Boot or Logon Autostart Execution
Remote Services , SMB/Windows Admin Shares , Distributed Component Object Model , Windows Management Instrumentation , Windows Service
SSH Authorized Keys , Account Manipulation
SSH Authorized Keys , Account Manipulation
SSH Authorized Keys , Account Manipulation
SSH Authorized Keys , Account Manipulation
Dynamic Linker Hijacking , Hijack Execution Flow
Dynamic Linker Hijacking , Hijack Execution Flow
Kernel Modules and Extensions , Boot or Logon Autostart Execution
Kernel Modules and Extensions , Boot or Logon Autostart Execution
Kernel Modules and Extensions , Boot or Logon Autostart Execution
Kernel Modules and Extensions , Boot or Logon Autostart Execution
Kernel Modules and Extensions , Boot or Logon Autostart Execution
Kernel Modules and Extensions , Boot or Logon Autostart Execution
Valid Accounts , Domain Accounts
Valid Accounts , Domain Accounts
Local Account , Create Account
Local Account , Create Account
Valid Accounts , Domain Accounts
Valid Accounts , Domain Accounts
Valid Accounts , Domain Accounts
Valid Accounts , Domain Accounts
Systemd Timers , Scheduled Task/Job
Systemd Timers , Scheduled Task/Job
Systemd Timers , Scheduled Task/Job
Systemd Timers , Scheduled Task/Job
Systemd Timers , Scheduled Task/Job
Systemd Timers , Scheduled Task/Job
Unix Shell Configuration Modification , Event Triggered Execution
Unix Shell Configuration Modification , Event Triggered Execution
Unix Shell Configuration Modification , Event Triggered Execution
Unix Shell Configuration Modification , Event Triggered Execution
RC Scripts , Boot or Logon Initialization Scripts
RC Scripts , Boot or Logon Initialization Scripts
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
At (Linux) , Scheduled Task/Job
At (Linux) , Scheduled Task/Job
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
At (Linux) , Scheduled Task/Job
At (Linux) , Scheduled Task/Job
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
Cron , Scheduled Task/Job
DLL Side-Loading , Hijack Execution Flow
DLL Side-Loading , Hijack Execution Flow
Server Software Component , Web Shell , Exploit Public-Facing Application
Server Software Component , Web Shell , Exploit Public-Facing Application
Server Software Component , Web Shell , Exploit Public-Facing Application
Server Software Component , Web Shell , Exploit Public-Facing Application
Domain Accounts
Scheduled Task
Valid Accounts
Valid Accounts
Exploitation for Client Execution, Command and Scripting Interpreter, Scheduled Task/Job, Software Deployment Tools
Service Stop, Valid Accounts
Create or Modify System Process , Windows Service
Create or Modify System Process , Windows Service
Scheduled Task/Job , Scheduled Task
Scheduled Task/Job , Scheduled Task
Remote Services , Distributed Component Object Model , Windows Remote Management , Windows Management Instrumentation , Scheduled Task , Windows Service , Po...
Remote Services , Distributed Component Object Model , Windows Remote Management , Windows Management Instrumentation , Scheduled Task , Windows Service , Po...
Service Stop, Create or Modify System Process, Windows Service
Service Stop, Create or Modify System Process, Windows Service
Create or Modify System Process , Windows Service
Create or Modify System Process , Windows Service
Scheduled Task/Job , Scheduled Task
Scheduled Task/Job , Scheduled Task
Create or Modify System Process , Windows Service
Create or Modify System Process , Windows Service
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Scheduled Task/Job , Scheduled Task
Scheduled Task/Job , Scheduled Task
Scheduled Task/Job , At (Windows)
Scheduled Task/Job , At (Windows)
Create or Modify System Process , Windows Service
Create or Modify System Process , Windows Service
Create or Modify System Process , Windows Service
Create or Modify System Process , Windows Service
Scheduled Task
Process Injection , Create or Modify System Process , Parent PID Spoofing , Access Token Manipulation
Server Software Component , Web Shell , Exploit Public-Facing Application
Server Software Component , Web Shell , Exploit Public-Facing Application
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Event Triggered Execution , Screensaver
Event Triggered Execution , Screensaver
Boot or Logon Initialization Scripts , Logon Script (Windows)
Boot or Logon Initialization Scripts , Logon Script (Windows)
Change Default File Association , Event Triggered Execution
Change Default File Association , Event Triggered Execution
BITS Jobs , Ingress Tool Transfer
BITS Jobs
Local Account , Create Account
Local Account , Create Account
Compromise Client Software Binary
Compromise Client Software Binary
Component Object Model Hijacking , Event Triggered Execution
Component Object Model Hijacking , Event Triggered Execution
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Account , Create Account
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
DLL Side-Loading , Hijack Execution Flow
DLL Side-Loading , Hijack Execution Flow
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Print Processors , Boot or Logon Autostart Execution
Windows Management Instrumentation Event Subscription , Event Triggered Execution
Windows Management Instrumentation Event Subscription , Event Triggered Execution
Command and Scripting Interpreter , Windows Command Shell , Windows Service , Create or Modify System Process
Command and Scripting Interpreter , Windows Command Shell , Windows Service , Create or Modify System Process
Scheduled Task/Job
Create or Modify System Process
Windows Service , Create or Modify System Process
Windows Service , Create or Modify System Process
Windows Service , Create or Modify System Process
Windows Service , Create or Modify System Process
Scheduled Task/Job
Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Account Manipulation
Account Manipulation
Cloud Groups , Account Manipulation , Permission Groups Discovery
BITS Jobs
Create or Modify System Process
Server Software Component , Web Shell
Server Software Component , Web Shell
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Launch Agent , Create or Modify System Process
Launch Agent , Create or Modify System Process
Launch Agent , Create or Modify System Process
Launch Agent , Create or Modify System Process
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Account , Create Account
Cloud Account , Create Account
Modify Authentication Process
Cloud Account , Create Account
Cloud Account , Create Account
Valid Accounts
Valid Accounts
Web Shell
Windows Management Instrumentation Event Subscription , Event Triggered Execution
Windows Management Instrumentation Event Subscription , Event Triggered Execution
Application Shimming , Event Triggered Execution
Application Shimming , Event Triggered Execution
Scheduled Task , Scheduled Task/Job
Scheduled Task , Scheduled Task/Job
Services Registry Permissions Weakness , Hijack Execution Flow
Services Registry Permissions Weakness , Hijack Execution Flow
Application Shimming , Event Triggered Execution
Application Shimming , Event Triggered Execution
Valid Accounts , Domain Accounts
Valid Accounts , Domain Accounts
TFTP Boot , Pre-OS Boot
TFTP Boot , Pre-OS Boot
Valid Accounts
Valid Accounts
Valid Accounts
Valid Accounts
Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Valid Accounts
Valid Accounts
Command and Scripting Interpreter, Scheduled Task/Job
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Valid Accounts
Cloud Accounts , Valid Accounts
Cloud Accounts , Valid Accounts
Valid Accounts
Valid Accounts
Valid Accounts
Valid Accounts
Change Default File Association
Scheduled Task
Windows Service , Create or Modify System Process
Windows Service , Create or Modify System Process
Event Triggered Execution , Accessibility Features
Event Triggered Execution , Accessibility Features
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Valid Accounts , Default Accounts
Cloud Accounts
Cloud Accounts
Cloud Accounts
Cloud Accounts
Valid Accounts , Local Accounts
Valid Accounts , Local Accounts
Cloud Accounts
Cloud Accounts
Cloud Accounts
Cloud Accounts
Cloud Accounts
Local Account , Create Account
Local Account , Create Account
Local Account , Create Account
Local Account , Create Account
Path Interception by Unquoted Path , Hijack Execution Flow
Path Interception by Unquoted Path , Hijack Execution Flow
Implant Internal Image
Implant Internal Image
Application Shimming , Event Triggered Execution
Application Shimming , Event Triggered Execution
Port Monitors , Boot or Logon Autostart Execution
Port Monitors , Boot or Logon Autostart Execution
Valid Accounts
Create Account
Cloud Accounts
Cloud Accounts
Domain Accounts