From a31fffa3488165d21021036a266500d27b2d4424 Mon Sep 17 00:00:00 2001 From: Shreya Date: Thu, 26 Mar 2020 11:13:50 +0530 Subject: [PATCH] Add attack technique description T1136: Create account --- .../cc/services/attack/attack_schema.py | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/monkey/monkey_island/cc/services/attack/attack_schema.py b/monkey/monkey_island/cc/services/attack/attack_schema.py index 704ae5994..a49079fa4 100644 --- a/monkey/monkey_island/cc/services/attack/attack_schema.py +++ b/monkey/monkey_island/cc/services/attack/attack_schema.py @@ -289,6 +289,22 @@ SCHEMA = { "description": "Data exfiltration is performed over the Command and Control channel." } } + }, + "persistence": { + "title": "Persistence", + "type": "object", + "link": "https://attack.mitre.org/tactics/TA0003/", + "properties": { + "T1136": { + "title": "Create account", + "type": "bool", + "value": True, + "necessary": False, + "link": "https://attack.mitre.org/techniques/T1136", + "description": "Adversaries with a sufficient level of access " + "may create a local system, domain, or cloud tenant account." + } + } } } }