T1565 Data Manipulation
EnterpriseAdversaries may insert, delete, or manipulate data in order to influence external outcomes or hide activity, thus threatening the integrity of the data. By manipulating data, adversaries may attempt to affect a business process, organizational understanding, or decision making. The type of modification and the impact it will have depends on the target application and process as well as the goals and objectives of the adversary. For complex systems, an adversary would likely need special expertise and possibly access to specialized software related to the system that would typically be gained through a prolonged information gathering campaign in order to have the desired impact.
platforms
Platforms this applies to.
tactics
ATT&CK tactics this technique serves.
sub-techniques (3)
More specific entries beneath this one.
mitigations
ATT&CK mitigations that reduce this.
detected by (6)
Data components that detect this.
NIST CSF 2.0 — areas of relevance (Protect / Detect)
NIST CSF 2.0 areas this most relates to (evidence-ranked).
- PR.DSData Securitymoderate · backed by 10 of 26 mapped controls
- PR.IRTechnology Infrastructure Resiliencemoderate · backed by 7 of 26 mapped controls
- DE.CMContinuous Monitoringmoderate · backed by 6 of 26 mapped controls
Derived from MITRE CTID (Apache-2.0) and the NIST 800-53 ↔ CSF crosswalk (public domain). Indicative relevance along the Protect/Detect axis — not a compliance assessment or coverage claim.
mitigating controls (26)
Security controls that mitigate this.
known-exploited CVEs (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-24993US | —OT critical | KEV | ||
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | ||||
| CVE-2021-31207US | medium6.5OT critical | KEV | ||
Microsoft Exchange Server Security Feature Bypass Vulnerability | ||||
groups (1)
Threat groups associated with this.
software (1)
Malware and tools associated with this.
Detected by (Sigma) (3)
Sigma detection rules related to this.
source
Where this definition is published.