sigma-art-navigator-layer-linux.json

{
	"name": "Sigma - ART - GNU\\Linux coverage",
	"version": "4.2",
	"domain": "mitre-enterprise",
	"description": "RED (score 100) - only ART test exists.\nBLUE (score 200) - only Sigma rule exists.\nGEEN (score 300) - both ART test and Sigma rule exist.",
	"filters": {
		"stages": [
			"act"
		],
		"platforms": [
			"Windows",
			"Linux",
			"macOS"
		]
	},
	"sorting": 0,
	"layout": {
		"layout": "side",
		"showID": false,
		"showName": true
	},
	"hideDisabled": false,
	"techniques": [
		{
			"techniqueID": "T1548.001",
			"tactic": "privilege-escalation",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1548.001",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1548.003",
			"tactic": "privilege-escalation",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1548.003",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1087.001",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1071.001",
			"tactic": "command-and-control",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1560.001",
			"tactic": "collection",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1547.006",
			"tactic": "persistence",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1547.006",
			"tactic": "privilege-escalation",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1217",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1176",
			"tactic": "persistence",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1059.004",
			"tactic": "execution",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1136.001",
			"tactic": "persistence",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1543.002",
			"tactic": "persistence",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1543.002",
			"tactic": "privilege-escalation",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1485",
			"tactic": "impact",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1132.001",
			"tactic": "command-and-control",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1074.001",
			"tactic": "collection",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1030",
			"tactic": "exfiltration",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1546.004",
			"tactic": "privilege-escalation",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1546.004",
			"tactic": "persistence",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1546.005",
			"tactic": "privilege-escalation",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1546.005",
			"tactic": "persistence",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1048",
			"tactic": "exfiltration",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1048.003",
			"tactic": "exfiltration",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1190",
			"tactic": "initial-access",
			"score": 200,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1068",
			"tactic": "privilege-escalation",
			"score": 200,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1083",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1222.002",
			"tactic": "defense-evasion",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1564.001",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1574.006",
			"tactic": "persistence",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1574.006",
			"tactic": "privilege-escalation",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1574.006",
			"tactic": "defense-evasion",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1562.001",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1562.003",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1562.004",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1562.006",
			"tactic": "defense-evasion",
			"score": 200,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1070.002",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1070.003",
			"tactic": "defense-evasion",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1070.004",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1070.006",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1105",
			"tactic": "command-and-control",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1036.003",
			"tactic": "defense-evasion",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1046",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1135",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1040",
			"tactic": "credential-access",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1040",
			"tactic": "discovery",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1571",
			"tactic": "command-and-control",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1027",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1027.001",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1027.002",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1201",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1069.001",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1057",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1090.001",
			"tactic": "command-and-control",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1018",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1496",
			"tactic": "impact",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1014",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1053.001",
			"tactic": "execution",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1053.001",
			"tactic": "persistence",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1053.001",
			"tactic": "privilege-escalation",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1053.003",
			"tactic": "execution",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1053.003",
			"tactic": "persistence",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1053.003",
			"tactic": "privilege-escalation",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1113",
			"tactic": "collection",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1505.003",
			"tactic": "persistence",
			"score": 200,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1518.001",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1553.004",
			"tactic": "defense-evasion",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1082",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1016",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1049",
			"tactic": "discovery",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1033",
			"tactic": "discovery",
			"score": 300,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1529",
			"tactic": "impact",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1552.001",
			"tactic": "credential-access",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1552.003",
			"tactic": "credential-access",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		},
		{
			"techniqueID": "T1552.004",
			"tactic": "credential-access",
			"score": 100,
			"color": "",
			"comment": "",
			"enabled": true,
			"metadata": [],
			"showSubtechniques": false
		}
	],
	"gradient": {
		"colors": [
			"#ff6666",
			"#66b8ff",
			"#aa43c8"
		],
		"minValue": 100,
		"maxValue": 300
	},
	"legendItems": [],
	"metadata": [],
	"showTacticRowBackground": false,
	"tacticRowBackground": "#dddddd",
	"selectTechniquesAcrossTactics": true,
	"selectSubtechniquesWithParent": false
}