Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Initial Access/ T1195

T1195Supply Chain Compromise

T1195 — Supply Chain Compromise is a MITRE ATT&CK technique in the Initial Access tactic. Clankerusecase tracks 21 detection use cases covering it and 2 threat-intel articles citing it.

Initial Access
View on the matrix → Filter Detection Library MITRE official spec ↗
21Use cases
2Articles
3Sub-techniques
1Tactic

Sub-techniques (3)

T1195.003 · Compromise Hardware Supply ChainT1195.001 · Compromise Software Dependencies and Development ToolsT1195.002 · Compromise Software Supply Chain

Use cases covering this technique (21)

GitHub Enterprise Delete Branch Ruleset ESCU actions · hunting P GitHub Enterprise Disable 2FA Requirement ESCU actions · hunting P GitHub Enterprise Disable Audit Log Event Stream ESCU actions · hunting P GitHub Enterprise Disable Classic Branch Protection Rule ESCU actions · hunting P GitHub Enterprise Disable Dependabot ESCU actions · hunting P GitHub Enterprise Disable IP Allow List ESCU actions · hunting P GitHub Enterprise Modify Audit Log Event Stream ESCU actions · hunting P GitHub Enterprise Pause Audit Log Event Stream ESCU actions · hunting P GitHub Enterprise Register Self Hosted Runner ESCU actions · hunting P GitHub Enterprise Remove Organization ESCU actions · hunting P GitHub Enterprise Repository Archived ESCU actions · hunting P GitHub Enterprise Repository Deleted ESCU actions · hunting P GitHub Organizations Delete Branch Ruleset ESCU actions · hunting P GitHub Organizations Disable 2FA Requirement ESCU actions · hunting P GitHub Organizations Disable Classic Branch Protection Rule ESCU actions · hunting P GitHub Organizations Disable Dependabot ESCU actions · hunting P GitHub Organizations Repository Archived ESCU actions · hunting P GitHub Organizations Repository Deleted ESCU actions · hunting P GitHub Workflow File Creation or Modification ESCU actions · hunting P Shai-Hulud Workflow File Creation or Modification ESCU actions · alerting P [LLM] Non-SiYuan process writing synced snippet store data\snippets\conf.json Bespoke delivery · hunting DSΣPDDCS

Articles citing this technique (2)

crit [GHSA / CRITICAL] CVE-2026-54067: SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet() art-207
crit ESET takes part in Operation Endgame to disrupt Amadey and Stealc art-301