{
  "technique_id": "T1204",
  "name": "User Execution",
  "tactics": [
    "Execution"
  ],
  "platforms": [
    "Linux",
    "Windows",
    "macOS",
    "IaaS",
    "Containers"
  ],
  "summary": "An adversary may rely upon specific actions by a user in order to gain execution. Users may be subjected to social engineering to get them to execute malicious code by, for example, opening a malicious document file or link. These user actions will typically be observed as follow-on behavior from forms of [Phishing](https://attack.mitre.org/techniques/T1566)...",
  "generated_by": "SOC Response Atlas by Basyrix"
}