1200KM / tag
bash — executor tag
62 related reference pages for executor: bash.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- T1003.007 Proc Filesystem · simulation
- T1003.008 /etc/passwd and /etc/shadow · simulation
- T1005 Data from Local System · simulation
- T1007 System Service Discovery · simulation
- T1016 System Network Configuration Discovery · simulation
- T1016.001 Internet Connection Discovery · simulation
- T1018 Remote System Discovery · simulation
- T1027.013 Encrypted/Encoded File · simulation
- T1037.004 RC Scripts · simulation
- T1037.005 Startup Items · simulation
- T1040 Network Sniffing · simulation
- T1046 Network Service Discovery · simulation
- T1048 Exfiltration Over Alternative Protocol · simulation
- T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol · simulation
- T1049 System Network Connections Discovery · simulation
- T1053.003 Cron · simulation
- T1053.006 Systemd Timers · simulation
- T1053.007 Container Orchestration Job · simulation
- T1056.001 Keylogging · simulation
- T1056.002 GUI Input Capture · simulation
- T1059.004 Unix Shell · simulation
- T1070.003 Clear Command History · simulation
- T1070.008 Clear Mailbox Data · simulation
- T1078.003 Local Accounts · simulation
- T1082 System Information Discovery · simulation
- T1105 Ingress Tool Transfer · simulation
- T1110.001 Password Guessing · simulation
- T1110.004 Credential Stuffing · simulation
- T1113 Screen Capture · simulation
- T1115 Clipboard Data · simulation
- T1135 Network Share Discovery · simulation
- T1136.001 Local Account · simulation
- T1140 Deobfuscate/Decode Files or Information · simulation
- T1195.002 Compromise Software Supply Chain · simulation
- T1201 Password Policy Discovery · simulation
- T1222.002 Linux and Mac Permissions · simulation
- T1489 Service Stop · simulation
- T1529 System Shutdown/Reboot · simulation
- T1539 Steal Web Session Cookie · simulation
- T1543.001 Launch Agent · simulation
- T1543.002 Systemd Service · simulation
- T1543.004 Launch Daemon · simulation
- T1546.004 Unix Shell Configuration Modification · simulation
- T1546.005 Trap · simulation
- T1547.006 Kernel Modules and Extensions · simulation
- T1547.015 Login Items · simulation
- T1552.001 Credentials In Files · simulation
- T1552.007 Container API · simulation
- T1560.001 Archive via Utility · simulation
- T1567.004 Exfiltration Over Webhook · simulation
- T1568.002 Domain Generation Algorithms · simulation
- T1569.001 Launchctl · simulation
- T1572 Protocol Tunneling · simulation
- T1574.006 Dynamic Linker Hijacking · simulation
- T1609 Container Administration Command · simulation
- T1610 Deploy Container · simulation
- T1614 System Location Discovery · simulation
- T1652 Device Driver Discovery · simulation
- T1659 Content Injection · simulation
- T1685 Disable or Modify Tools · simulation
- T1685.006 Clear Linux or Mac System Logs · simulation
- T1690 Prevent Command History Logging · simulation
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.