1200KM / tag
defense-impairment — tactic tag
56 related reference pages for tactic: defense-impairment.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- T1112 Modify Registry · simulation
- T1207 Rogue Domain Controller · simulation
- T1222 File and Directory Permissions Modification · simulation
- T1222.001 Windows Permissions · simulation
- T1222.002 Linux and Mac Permissions · simulation
- T1484 Domain or Tenant Policy Modification · simulation
- T1484.001 Group Policy Modification · simulation
- T1484.002 Trust Modification · simulation
- T1553 Subvert Trust Controls · simulation
- T1553.001 Gatekeeper Bypass · simulation
- T1553.002 Code Signing · simulation
- T1553.003 SIP and Trust Provider Hijacking · simulation
- T1553.004 Install Root Certificate · simulation
- T1553.005 Mark-of-the-Web Bypass · simulation
- T1553.006 Code Signing Policy Modification · simulation
- T1556 Modify Authentication Process · simulation
- T1556.001 Domain Controller Authentication · simulation
- T1556.002 Password Filter DLL · simulation
- T1556.003 Pluggable Authentication Modules · simulation
- T1556.004 Network Device Authentication · simulation
- T1556.005 Reversible Encryption · simulation
- T1556.006 Multi-Factor Authentication · simulation
- T1556.007 Hybrid Identity · simulation
- T1556.008 Network Provider DLL · simulation
- T1556.009 Conditional Access Policies · simulation
- T1578 Modify Cloud Compute Infrastructure · simulation
- T1578.001 Create Snapshot · simulation
- T1578.002 Create Cloud Instance · simulation
- T1578.003 Delete Cloud Instance · simulation
- T1578.004 Revert Cloud Instance · simulation
- T1578.005 Modify Cloud Compute Configurations · simulation
- T1599 Network Boundary Bridging · simulation
- T1599.001 Network Address Translation Traversal · simulation
- T1600 Weaken Encryption · simulation
- T1600.001 Reduce Key Space · simulation
- T1600.002 Disable Crypto Hardware · simulation
- T1601 Modify System Image · simulation
- T1601.001 Patch System Image · simulation
- T1601.002 Downgrade System Image · simulation
- T1647 Plist File Modification · simulation
- T1666 Modify Cloud Resource Hierarchy · simulation
- T1685 Disable or Modify Tools · simulation
- T1685.001 Disable or Modify Windows Event Log · simulation
- T1685.002 Disable or Modify Cloud Log · simulation
- T1685.003 Modify or Spoof Tool UI · simulation
- T1685.004 Disable or Modify Linux Audit System Log · simulation
- T1685.005 Clear Windows Event Logs · simulation
- T1685.006 Clear Linux or Mac System Logs · simulation
- T1686 Disable or Modify System Firewall · simulation
- T1686.001 Cloud Firewall · simulation
- T1686.002 Network Device Firewall · simulation
- T1686.003 Windows Host Firewall · simulation
- T1687 Exploitation for Defense Impairment · simulation
- T1688 Safe Mode Boot · simulation
- T1689 Downgrade Attack · simulation
- T1690 Prevent Command History Logging · simulation
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.