Skip to main content
Cyber Defense TacticsCyber Defense Tactics
HomeLearnResourcesBlogCommunity
Cyber Defense TacticsCyber Defense Tactics

Learn defensive security, leverage AI for cyber defense, and join a community of security professionals.

Learning

  • Blog
  • Resources
  • Newsletter

Community

  • Community
  • YouTube
  • About

Legal

  • Privacy Policy
  • Terms of Service

© 2026 Cyber Defense Tactics. All rights reserved.

A Carbene.AI Project

Back to ATT&CK Hub
T1204

User Execution

Execution

Adversaries may rely upon specific actions by a user in order to gain execution. Users may be tricked into opening malicious files or clicking malicious links.

View on MITRE ATT&CK

Defense Strategies

  • Security awareness training
  • Email and web filtering
  • Disable macros by default
  • Application sandboxing

Detection Methods

  • Monitor process creation from Office apps
  • Track downloads and executed files
  • Correlate email activity with execution

Related Techniques in Execution

T1059

Command and Scripting Interpreter

Ready to explore more techniques and join the community?