Select a tactic to explore all mapped mainframe TTPs within that adversarial goal.
Techniques used by adversaries to gain an initial foothold within the mainframe environment.
Techniques resulting in adversary-controlled code running on a mainframe system.
Techniques that allow adversaries to maintain their foothold across system restarts and changes.
Techniques used to gain higher-level permissions on the mainframe.
Techniques adversaries use to avoid detection throughout their attack.
Techniques for stealing credentials like account names and passwords on z/OS.
Techniques used to gain knowledge about the mainframe system and internal network.
Techniques that allow adversaries to move through the mainframe environment.
Techniques used to gather data of interest from the mainframe.
Techniques used to communicate with compromised mainframe systems.
Techniques that adversaries use to steal data from the mainframe.
Techniques adversaries use to disrupt availability or compromise integrity of mainframe systems.
