1200KM / tag
cloud — environment tag
302 related reference pages for environment: cloud.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- AADInternals · tool
- AsyncRAT · tool
- Brute Ratel C4 · tool
- cmd · tool
- Cobalt Strike · tool
- Covenant · tool
- CrackMapExec · tool
- Crowbar · tool
- DCRAT · tool
- Diskpart · tool
- Donut · tool
- dsquery · tool
- Empire · tool
- evilginx2 · tool
- FRP · tool
- Havij · tool
- HexStrike AI · tool
- Hydra · tool
- Imminent Monitor · tool
- Impacket · tool
- Koadic · tool
- LaZagne · tool
- MailSniper · tool
- Metasploit Framework · tool
- Mimikatz · tool
- Mythic · tool
- NBTscan · tool
- nbtstat · tool
- Net · tool
- netsh · tool
- netstat · tool
- ngrok · tool
- Nmap · tool
- NPPSPY · tool
- Pacu · tool
- Peirates · tool
- PoshC2 · tool
- Pupy · tool
- QuasarRAT · tool
- RawDisk · tool
- Remcos · tool
- Responder · tool
- ROADTools · tool
- RTSP Brute Force Tool · tool
- SDelete · tool
- ShimRatReporter · tool
- SILENTTRINITY · tool
- Sliver · tool
- sqlmap · tool
- Systeminfo · tool
- T1020.001 Traffic Duplication · simulation
- T1020.001 Traffic Duplication detections · detection
- T1021 Remote Services · simulation
- T1021 Remote Services detections · detection
- T1021.007 Cloud Services · simulation
- T1021.007 Cloud Services detections · detection
- T1021.008 Direct Cloud VM Connections · simulation
- T1021.008 Direct Cloud VM Connections detections · detection
- T1036.010 Masquerade Account Name · simulation
- T1036.010 Masquerade Account Name detections · detection
- T1040 Network Sniffing · simulation
- T1040 Network Sniffing detections · detection
- T1046 Network Service Discovery · simulation
- T1046 Network Service Discovery detections · detection
- T1048 Exfiltration Over Alternative Protocol · simulation
- T1048 Exfiltration Over Alternative Protocol detections · detection
- T1049 System Network Connections Discovery · simulation
- T1049 System Network Connections Discovery detections · detection
- T1059 Command and Scripting Interpreter · simulation
- T1059 Command and Scripting Interpreter detections · detection
- T1059.009 Cloud API · simulation
- T1059.009 Cloud API detections · detection
- T1069 Permission Groups Discovery · simulation
- T1069 Permission Groups Discovery detections · detection
- T1069.003 Cloud Groups · simulation
- T1069.003 Cloud Groups detections · detection
- T1072 Software Deployment Tools · simulation
- T1072 Software Deployment Tools detections · detection
- T1074 Data Staged · simulation
- T1074 Data Staged detections · detection
- T1074.002 Remote Data Staging · simulation
- T1074.002 Remote Data Staging detections · detection
- T1078 Valid Accounts · simulation
- T1078 Valid Accounts detections · detection
- T1078.001 Default Accounts · simulation
- T1078.001 Default Accounts detections · detection
- T1078.004 Cloud Accounts · simulation
- T1078.004 Cloud Accounts detections · detection
- T1080 Taint Shared Content · simulation
- T1080 Taint Shared Content detections · detection
- T1082 System Information Discovery · simulation
- T1082 System Information Discovery detections · detection
- T1087 Account Discovery · simulation
- T1087 Account Discovery detections · detection
- T1087.004 Cloud Account · simulation
- T1087.004 Cloud Account detections · detection
- T1098 Account Manipulation · simulation
- T1098 Account Manipulation detections · detection
- T1098.001 Additional Cloud Credentials · simulation
- T1098.001 Additional Cloud Credentials detections · detection
- T1098.003 Additional Cloud Roles · simulation
- T1098.003 Additional Cloud Roles detections · detection
- T1098.004 SSH Authorized Keys · simulation
- T1098.004 SSH Authorized Keys detections · detection
- T1110 Brute Force · simulation
- T1110 Brute Force detections · detection
- T1110.001 Password Guessing · simulation
- T1110.001 Password Guessing detections · detection
- T1110.003 Password Spraying · simulation
- T1110.003 Password Spraying detections · detection
- T1110.004 Credential Stuffing · simulation
- T1110.004 Credential Stuffing detections · detection
- T1119 Automated Collection · simulation
- T1119 Automated Collection detections · detection
- T1136 Create Account · simulation
- T1136 Create Account detections · detection
- T1136.003 Cloud Account · simulation
- T1136.003 Cloud Account detections · detection
- T1190 Exploit Public-Facing Application · simulation
- T1190 Exploit Public-Facing Application detections · detection
- T1195 Supply Chain Compromise · simulation
- T1195 Supply Chain Compromise detections · detection
- T1199 Trusted Relationship · simulation
- T1199 Trusted Relationship detections · detection
- T1201 Password Policy Discovery · simulation
- T1201 Password Policy Discovery detections · detection
- T1204 User Execution · simulation
- T1204 User Execution detections · detection
- T1204.003 Malicious Image · simulation
- T1204.003 Malicious Image detections · detection
- T1211 Exploitation for Stealth · simulation
- T1211 Exploitation for Stealth detections · detection
- T1213 Data from Information Repositories · simulation
- T1213 Data from Information Repositories detections · detection
- T1213.001 Confluence · simulation
- T1213.001 Confluence detections · detection
- T1213.003 Code Repositories · simulation
- T1213.003 Code Repositories detections · detection
- T1213.004 Customer Relationship Management Software · simulation
- T1213.004 Customer Relationship Management Software detections · detection
- T1213.005 Messaging Applications · simulation
- T1213.005 Messaging Applications detections · detection
- T1213.006 Databases · simulation
- T1213.006 Databases detections · detection
- T1485 Data Destruction · simulation
- T1485 Data Destruction detections · detection
- T1485.001 Lifecycle-Triggered Deletion · simulation
- T1485.001 Lifecycle-Triggered Deletion detections · detection
- T1486 Data Encrypted for Impact · simulation
- T1486 Data Encrypted for Impact detections · detection
- T1489 Service Stop · simulation
- T1489 Service Stop detections · detection
- T1490 Inhibit System Recovery · simulation
- T1490 Inhibit System Recovery detections · detection
- T1491 Defacement · simulation
- T1491 Defacement detections · detection
- T1491.002 External Defacement · simulation
- T1491.002 External Defacement detections · detection
- T1496 Resource Hijacking · simulation
- T1496 Resource Hijacking detections · detection
- T1496.001 Compute Hijacking · simulation
- T1496.001 Compute Hijacking detections · detection
- T1496.002 Bandwidth Hijacking · simulation
- T1496.002 Bandwidth Hijacking detections · detection
- T1496.003 SMS Pumping · simulation
- T1496.003 SMS Pumping detections · detection
- T1496.004 Cloud Service Hijacking · simulation
- T1496.004 Cloud Service Hijacking detections · detection
- T1498 Network Denial of Service · simulation
- T1498 Network Denial of Service detections · detection
- T1498.001 Direct Network Flood · simulation
- T1498.001 Direct Network Flood detections · detection
- T1498.002 Reflection Amplification · simulation
- T1498.002 Reflection Amplification detections · detection
- T1499 Endpoint Denial of Service · simulation
- T1499 Endpoint Denial of Service detections · detection
- T1499.002 Service Exhaustion Flood · simulation
- T1499.002 Service Exhaustion Flood detections · detection
- T1499.003 Application Exhaustion Flood · simulation
- T1499.003 Application Exhaustion Flood detections · detection
- T1499.004 Application or System Exploitation · simulation
- T1499.004 Application or System Exploitation detections · detection
- T1518 Software Discovery · simulation
- T1518 Software Discovery detections · detection
- T1518.001 Security Software Discovery · simulation
- T1518.001 Security Software Discovery detections · detection
- T1525 Implant Internal Image · simulation
- T1525 Implant Internal Image detections · detection
- T1526 Cloud Service Discovery · simulation
- T1526 Cloud Service Discovery detections · detection
- T1528 Steal Application Access Token · simulation
- T1528 Steal Application Access Token detections · detection
- T1530 Data from Cloud Storage · simulation
- T1530 Data from Cloud Storage detections · detection
- T1531 Account Access Removal · simulation
- T1531 Account Access Removal detections · detection
- T1534 Internal Spearphishing · simulation
- T1534 Internal Spearphishing detections · detection
- T1535 Unused/Unsupported Cloud Regions · simulation
- T1535 Unused/Unsupported Cloud Regions detections · detection
- T1537 Transfer Data to Cloud Account · simulation
- T1537 Transfer Data to Cloud Account detections · detection
- T1538 Cloud Service Dashboard · simulation
- T1538 Cloud Service Dashboard detections · detection
- T1539 Steal Web Session Cookie · simulation
- T1539 Steal Web Session Cookie detections · detection
- T1546 Event Triggered Execution · simulation
- T1546 Event Triggered Execution detections · detection
- T1548 Abuse Elevation Control Mechanism · simulation
- T1548 Abuse Elevation Control Mechanism detections · detection
- T1548.005 Temporary Elevated Cloud Access · simulation
- T1548.005 Temporary Elevated Cloud Access detections · detection
- T1550 Use Alternate Authentication Material · simulation
- T1550 Use Alternate Authentication Material detections · detection
- T1550.001 Application Access Token · simulation
- T1550.001 Application Access Token detections · detection
- T1550.004 Web Session Cookie · simulation
- T1550.004 Web Session Cookie detections · detection
- T1552 Unsecured Credentials · simulation
- T1552 Unsecured Credentials detections · detection
- T1552.001 Credentials In Files · simulation
- T1552.001 Credentials In Files detections · detection
- T1552.005 Cloud Instance Metadata API · simulation
- T1552.005 Cloud Instance Metadata API detections · detection
- T1552.008 Chat Messages · simulation
- T1552.008 Chat Messages detections · detection
- T1555 Credentials from Password Stores · simulation
- T1555 Credentials from Password Stores detections · detection
- T1555.006 Cloud Secrets Management Stores · simulation
- T1555.006 Cloud Secrets Management Stores detections · detection
- T1556 Modify Authentication Process · simulation
- T1556 Modify Authentication Process detections · detection
- T1556.006 Multi-Factor Authentication · simulation
- T1556.006 Multi-Factor Authentication detections · detection
- T1556.007 Hybrid Identity · simulation
- T1556.007 Hybrid Identity detections · detection
- T1556.009 Conditional Access Policies · simulation
- T1556.009 Conditional Access Policies detections · detection
- T1566 Phishing · simulation
- T1566 Phishing detections · detection
- T1566.002 Spearphishing Link · simulation
- T1566.002 Spearphishing Link detections · detection
- T1567 Exfiltration Over Web Service · simulation
- T1567 Exfiltration Over Web Service detections · detection
- T1567.004 Exfiltration Over Webhook · simulation
- T1567.004 Exfiltration Over Webhook detections · detection
- T1578 Modify Cloud Compute Infrastructure · simulation
- T1578 Modify Cloud Compute Infrastructure detections · detection
- T1578.001 Create Snapshot · simulation
- T1578.001 Create Snapshot detections · detection
- T1578.002 Create Cloud Instance · simulation
- T1578.002 Create Cloud Instance detections · detection
- T1578.003 Delete Cloud Instance · simulation
- T1578.003 Delete Cloud Instance detections · detection
- T1578.004 Revert Cloud Instance · simulation
- T1578.004 Revert Cloud Instance detections · detection
- T1578.005 Modify Cloud Compute Configurations · simulation
- T1578.005 Modify Cloud Compute Configurations detections · detection
- T1580 Cloud Infrastructure Discovery · simulation
- T1580 Cloud Infrastructure Discovery detections · detection
- T1606 Forge Web Credentials · simulation
- T1606 Forge Web Credentials detections · detection
- T1606.001 Web Cookies · simulation
- T1606.001 Web Cookies detections · detection
- T1606.002 SAML Tokens · simulation
- T1606.002 SAML Tokens detections · detection
- T1614 System Location Discovery · simulation
- T1614 System Location Discovery detections · detection
- T1619 Cloud Storage Object Discovery · simulation
- T1619 Cloud Storage Object Discovery detections · detection
- T1621 Multi-Factor Authentication Request Generation · simulation
- T1621 Multi-Factor Authentication Request Generation detections · detection
- T1648 Serverless Execution · simulation
- T1648 Serverless Execution detections · detection
- T1651 Cloud Administration Command · simulation
- T1651 Cloud Administration Command detections · detection
- T1654 Log Enumeration · simulation
- T1654 Log Enumeration detections · detection
- T1657 Financial Theft · simulation
- T1657 Financial Theft detections · detection
- T1666 Modify Cloud Resource Hierarchy · simulation
- T1666 Modify Cloud Resource Hierarchy detections · detection
- T1671 Cloud Application Integration · simulation
- T1671 Cloud Application Integration detections · detection
- T1677 Poisoned Pipeline Execution · simulation
- T1677 Poisoned Pipeline Execution detections · detection
- T1680 Local Storage Discovery · simulation
- T1680 Local Storage Discovery detections · detection
- T1684 Social Engineering · simulation
- T1684 Social Engineering detections · detection
- T1684.001 Impersonation · simulation
- T1684.001 Impersonation detections · detection
- T1685 Disable or Modify Tools · simulation
- T1685 Disable or Modify Tools detections · detection
- T1685.002 Disable or Modify Cloud Log · simulation
- T1685.002 Disable or Modify Cloud Log detections · detection
- T1686.001 Cloud Firewall · simulation
- T1686.001 Cloud Firewall detections · detection
- T1687 Exploitation for Defense Impairment · simulation
- T1687 Exploitation for Defense Impairment detections · detection
- Tasklist · tool
- TruffleHog · tool
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.