RTT· red team
RTT · red team
Advanced Search Keywords:
  • opsec:low - Show techniques with low noise level (stealthy)
  • phase:"initial access" - Filter by phase (use quotes for spaces)
  • category:lateral - Filter by category
  • platform:windows - Filter by platform
  • tag:credential - Find items with specific tag in results
  • external:true - Show only external techniques
Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase
TechniquesToolsCommandsAPTs
Search techniques, tools, commands…⌘K
No scenario
No scenario · all techniques in scope
IdleStatus
0Scenarios
Advanced Search Keywords:
  • opsec:low - Show techniques with low noise level (stealthy)
  • phase:"initial access" - Filter by phase (use quotes for spaces)
  • category:lateral - Filter by category
  • platform:windows - Filter by platform
  • tag:credential - Find items with specific tag in results
  • external:true - Show only external techniques
Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Active filters:

phase: Collection

Resource Development

0 items

Initial Access

0 items

Reconnaissance

0 items

Host Enumeration

0 items

Persistence

0 items

Privilege Escalation

0 items

Domain Enumeration

0 items

Lateral Movement

0 items

Credentials & User Impersonation

0 items

AD Misconfigurations

0 items

Defense Evasion

0 items

Collection

30 items

Cloud Data Collection

9

Access S3 Buckets

AWS S3 Data Discovery and Collection

Code Repository Collection

Email Harvesting

GCP Cloud Storage Canary Collection

Search internal repositories

Search mailboxes, home folders and cloud storage

Search Repositories for Sensitive Information

Tampering with cloud storage policies to allow public access

Credential Harvesting

1

Sensitive File Collection

Data Staging

4

Archive Collected Data

Data Staging & Preparation

File Share Data Staging

Local Data Staging

Database Client Abuse

1

Use of Database Client to Access Database

File Share Enumeration

2

Data from Information Repositories

Data from Network Shared Drive

Local Host Enumeration

7

Access SQL Server with local tools

Automated Collection

Clipboard Data

Database Access via Deployed Application

Screen Capture

Search SharePoint and download files

Video Capture

Network Scanning

2

Data from Local System

SNMP

Obfuscation

1

Isolated Remote Debugging Validation

SCCM/WSUS Abuse

1

Unauthenticated SCCM Package Access

UAC Bypass

1

WinRE BitLocker Security Feature Bypass

Web Exploitation

1

Unauthenticated Internal Documentation Access

Exfiltration

0 items