MITRE ATT&CKtechnique

T0871 Execution through API

Published 2020-05-21 Modified 2026-10-13 Official page ↗
Domain
ics
Tactics
Execution
Platforms
Embedded, Windows, Linux, Network Devices
Version
1.1
Created
2020-05-21

Description

Adversaries may attempt to leverage Application Program Interfaces (APIs) used for communication between control software and the hardware. Specific functionality is often coded into APIs which can be called by software to engage specific functions on a device or other software.

Related

Tactic · MITRE ATT&CK (1)

Referenced by MITRE ATT&CK · mitigates (4)

  • M0800 Authorization Enforcement mitigation
  • M0801 Access Management mitigation
  • M0804 Human User Authentication mitigation
  • M0938 Execution Prevention mitigation

Referenced by MITRE ATT&CK · uses (2)

  • G1027 CyberAv3ngers group
  • S1009 Triton software (malware)