🎯 Security: techniques

Attack and defence techniques and machine learning methods that a second item could name too, with an ATT&CK, ATLAS or CWE id when one is stated. A procedure only one article describes is item text. Each one opens the items that name it, and the list is ranked by how many do.

This workspace's kept items name 765 of them. This is page 3 of 8, the most named first.

• Browser Extensions3 items
• Brute Force3 items
• Bulletproof hosting3 items
• Business Email Compromise3 items
• C2 beaconing3 items
• Clipboard hijacking3 items
• Cloud Service Discovery3 items
• Confused deputy pattern3 items
• Credential and data theft3 items
• Credential and secret theft3 items
• Credential validation3 items
• Cryptographic Context Injection3 items
• CSRF3 items
• Data leakage3 items
• Data poisoning3 items
• Detached process execution3 items
• Device Code Authentication Phishing3 items
• Differential analysis3 items
• Dirty Frag3 items
• Domain Generation Algorithm3 items
• Double Free3 items
• Encoded PowerShell command execution3 items
• Error suppression3 items
• Evasion3 items
• Evidence preservation3 items
• Evidence-Backed Remediation3 items
• Exploit development3 items
• Exploitation3 items
• Exploitation of public-facing application3 items
• Extortion3 items
• Falsification Engine3 items
• Fuzz testing3 items
• Gatekeeper bypass3 items
• Hardcoded credentials3 items
• Hardware supply chain tampering3 items
• Host reconnaissance3 items
• Improper access control3 items
• Information leak3 items
• Initial Access3 items
• Injection3 items
• Insufficient gas griefing3 items
• Jailbreaks3 items
• Kubernetes service account token theft3 items
• LaunchAgent persistence3 items
• LOLBIN abuse3 items
• LSASS credential dumping3 items
• LSASS memory dumping3 items
• Maintainer account takeover3 items
• Malicious npm preinstall hook3 items
• Malicious npm preinstall lifecycle hook3 items
• Malware analysis3 items
• Memory corruption3 items
• Missing Authentication for Critical Function3 items
• Missing authorization check3 items
• Missing input validation3 items
• MITRE ATT&CK3 items
• Modify Registry3 items
• NullReceiver3 items
• Out-of-bounds read3 items
• Package hallucination3 items
• Parameter-to-prompt injection3 items
• Parameterized queries3 items
• Payload obfuscation3 items
• Payload splitting3 items
• Persistence establishment3 items
• Persistence via malicious Windows service3 items
• Persistence via scheduled task3 items
• Poisoned Pipeline Execution3 items
• Preinstall script execution3 items
• Process Discovery3 items
• Process masquerading3 items
• Prompt injection attack3 items
• Protocol Tunneling3 items
• Quantum attack3 items
• Reflective .NET assembly loading3 items
• Reflective DLL loading3 items
• Remote access trojan deployment3 items
• Response Forking3 items
• Role-Based Access Control3 items
• Secrets detection3 items
• Server-Side Template Injection3 items
• Side-Channel Analysis3 items
• Sink-first analysis3 items
• Smart contract exploitation3 items
• SSH Authorized Keys3 items
• SSH authorized_keys persistence3 items
• Static pod persistence3 items
• Steal Web Session Cookie3 items
• Stored XSS3 items
• STRIDE3 items
• String obfuscation3 items
• Supply-chain tampering3 items
• SymJack3 items
• T1078.004 Valid Accounts3 items
• T1105 Ingress Tool Transfer3 items
• T1140 Deobfuscate/Decode Files or Information3 items
• Taint tracking3 items
• Tool shadowing3 items
• Training Data Poisoning3 items
• Version sandwiching3 items