Threats Library

Reusable threat definitions (causes on the left side of bow-tie diagrams).

Add Threat

Tags: clear tags
Clear all
14 threats — page 1 of 1
Name Category Tags Description
Command and Scripting Interpreter Execution Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. The… Edit
Command and Scripting Interpreter: AppleScript Execution Adversaries may abuse AppleScript for execution. AppleScript is a macOS scripting language designed … Edit
Command and Scripting Interpreter: AutoHotKey & AutoIT Execution Adversaries may execute commands and perform malicious tasks using AutoIT and AutoHotKey automation … Edit
Command and Scripting Interpreter: Cloud API Execution Adversaries may abuse cloud APIs to execute malicious commands. APIs available in cloud environments… Edit
Command and Scripting Interpreter: Container CLI/API Execution Adversaries may abuse built-in CLI tools or API calls to execute malicious commands in containerized… Edit
Command and Scripting Interpreter: Hypervisor CLI Execution Adversaries may abuse hypervisor command line interpreters (CLIs) to execute malicious commands. Hyp… Edit
Command and Scripting Interpreter: JavaScript Execution Adversaries may abuse various implementations of JavaScript for execution. JavaScript (JS) is a plat… Edit
Command and Scripting Interpreter: Lua Execution Adversaries may abuse Lua commands and scripts for execution. Lua is a cross-platform scripting and … Edit
Command and Scripting Interpreter: Network Device CLI Execution Adversaries may abuse scripting or built-in command line interpreters (CLI) on network devices to ex… Edit
Command and Scripting Interpreter: PowerShell Execution Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful intera… Edit
Command and Scripting Interpreter: Python Execution Adversaries may abuse Python commands and scripts for execution. Python is a very popular scripting/… Edit
Command and Scripting Interpreter: Unix Shell Execution Adversaries may abuse Unix shell commands and scripts for execution. Unix shells are the primary com… Edit
Command and Scripting Interpreter: Visual Basic Execution Adversaries may abuse Visual Basic (VB) for execution. VB is a programming language created by Micro… Edit
Command and Scripting Interpreter: Windows Command Shell Execution Adversaries may abuse the Windows command shell for execution. The Windows command shell (cmd) is th… Edit