Compliance Node Overview
MITRE ATT&CK T1059.004 (Unix Shell) is an Enterprise Execution sub-technique of T1059 (Command and Scripting Interpreter). Adversaries may abuse Unix shell commands and scripts for execution. Unix shells are the primary command prompt on Linux and macOS systems, though many variations of the Unix shell exist (e.g. sh, bash, zsh, etc.) depending on the specific OS or distribution. Unix shells can control every aspect of a system, with certain commands requiring elevated privileges. Affected platforms: macOS, Linux, Network. MITRE-documented mitigations include M1038 Execution Prevention. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-05, AC-06, AC-17, CA-07, CM-02, CM-05.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1059/004/
SHA-256 integrity: 80df4be9744e006672cff1ebbb938e28ec9a01cdb5acd42e88d072b31a3aa30c
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1059.004: Unix Shell (https://attack.mitre.org/techniques/T1059/004/)
- MITRE ATT&CK Tactic TA0002: Execution (https://attack.mitre.org/tactics/TA0002/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access