- T1021.001 Remote Desktop Protocol
- T1021.002 SMB/Windows Admin Shares
- T1021.004 SSH
- T1021.006 Windows Remote Management
- T1550.002 Use Alternate Authentication Material: Pass the Hash
- T1021 Remote Services (index only)
- T1021.003 Distributed Component Object Model (index only)
- T1021.005 VNC (index only)
- T1021.007 Cloud Services (index only)
- T1021.008 Direct Cloud VM Connections (index only)
- T1072 Software Deployment Tools (index only)
- T1080 Taint Shared Content (index only)
- T1091 Replication Through Removable Media (index only)
- T1210 Exploitation of Remote Services (index only)
- T1534 Internal Spearphishing (index only)
- T1550 Use Alternate Authentication Material (index only)
- T1550.001 Application Access Token (index only)
- T1550.003 Pass the Ticket (index only)
- T1550.004 Web Session Cookie (index only)
- T1563 Remote Service Session Hijacking (index only)
- T1563.001 SSH Hijacking (index only)
- T1563.002 RDP Hijacking (index only)
- T1570 Lateral Tool Transfer (index only)