Attack scenario
Public application or API abuse
An adversary exploits a vulnerable web application, API, client-side code, or software component for initial access and execution.
Why this scenario matters
This view connects the attack path with preventive, detective, response, and recovery controls and helps identify gaps between technologies.
The scenario uses MITRE ATT&CK® as a reference model. It is an expert SecTec interpretation and does not imply endorsement by MITRE.
Relevant ATT&CK tactics
- Command And Control
- Execution
- Initial Access
Relevant ATT&CK techniques
SecTec technologies and vendors
The following hierarchy is derived from the approved ATT&CK-to-technology and technology-to-vendor mappings.