Skip to content

Execution

The execution tactic consists of techniques that are used by attackers to run their code inside a cluster.

ID Name
MS-TA9006 Exec into container
MS-TA9007 bash/cmd inside container
MS-TA9008 New container
MS-TA9009 Application exploit (RCE)
MS-TA9010 SSH server running inside container
MS-TA9011 Sidecar injection