Home/ MITRE Matrix/ Defense Evasion/ T1006

T1006Direct Volume Access

T1006 — Direct Volume Access is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 2 detection use cases covering it and 2 threat-intel articles citing it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

2Use cases

2Articles

0Sub-techniques

1Tactic

Use cases covering this technique (2)

[LLM] Path-traversal exploit hitting Vitest /__vitest_attachment__ endpoint (CVE-2026-47429 PoC) Bespoke exploit · alerting DSΣPDDCS [LLM] SAM/SECURITY registry hives copied from VSS shadow to Public\Documents as .pdf Bespoke actions · alerting DSΣPDDCS

Articles citing this technique (2)

crit [GHSA / CRITICAL] CVE-2026-47429: When Vitest UI server is listening, arbitrary file can be read and executed art-157

crit Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload art-219