- T1008 Fallback Channels
- T1071.001 Web Protocols
- T1071.004 DNS
- T1105 Ingress Tool Transfer
- T1568.002 Domain Generation Algorithms
- T1571 Non-Standard Port
- T1572 Protocol Tunneling
- T1001 Data Obfuscation (index only)
- T1001.001 Junk Data (index only)
- T1001.002 Steganography (index only)
- T1001.003 Protocol or Service Impersonation (index only)
- T1071 Application Layer Protocol (index only)
- T1071.002 File Transfer Protocols (index only)
- T1071.003 Mail Protocols (index only)
- T1071.005 Publish/Subscribe Protocols (index only)
- T1090 Proxy (index only)
- T1090.001 Internal Proxy (index only)
- T1090.002 External Proxy (index only)
- T1090.003 Multi-hop Proxy (index only)
- T1090.004 Domain Fronting (index only)
- T1092 Communication Through Removable Media (index only)
- T1095 Non-Application Layer Protocol (index only)
- T1102 Web Service (index only)
- T1102.001 Dead Drop Resolver (index only)
- T1102.002 Bidirectional Communication (index only)
- T1102.003 One-Way Communication (index only)
- T1104 Multi-Stage Channels (index only)
- T1132 Data Encoding (index only)
- T1132.001 Standard Encoding (index only)
- T1132.002 Non-Standard Encoding (index only)
- T1205 Traffic Signaling (index only)
- T1205.001 Port Knocking (index only)
- T1205.002 Socket Filters (index only)
- T1219 Remote Access Tools (index only)
- T1219.001 IDE Tunneling (index only)
- T1219.002 Remote Desktop Software (index only)
- T1219.003 Remote Access Hardware (index only)
- T1568 Dynamic Resolution (index only)
- T1568.001 Fast Flux DNS (index only)
- T1568.003 DNS Calculation (index only)
- T1573 Encrypted Channel (index only)
- T1573.001 Symmetric Cryptography (index only)
- T1573.002 Asymmetric Cryptography (index only)
- T1659 Content Injection (index only)
- T1665 Hide Infrastructure (index only)