Home/ MITRE Matrix/ Resource Development/ T1608

T1608Stage Capabilities

T1608 — Stage Capabilities is a MITRE ATT&CK technique in the Resource Development tactic. Clankerusecase tracks 4 detection use cases covering it and 2 threat-intel articles citing it.

Resource Development

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

2Articles

6Sub-techniques

1Tactic

Sub-techniques (6)

T1608.004 · Drive-by Target T1608.003 · Install Digital Certificate T1608.005 · Link Target T1608.006 · SEO Poisoning T1608.001 · Upload Malware T1608.002 · Upload Tool

Use cases covering this technique (4)

Windows Cobalt Strike PowerShell Loader ESCU actions · alerting P Windows Metasploit Confluence Plugin Execution ESCU actions · alerting P Windows NorthStar C2 Agent Execution ESCU actions · alerting P [LLM] Level RMM enrollment with BlueDash attacker API key (GxSCHE8EZwfyYN3iPQHPai8D) Bespoke install · alerting DSΣPDDCS

Articles citing this technique (2)

high Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update art-64

crit FrostyNeighbor: Fresh mischief and digital shenanigans art-435