{
  "technique_id": "T1686",
  "name": "Disable or Modify System Firewall",
  "tactics": [
    "Defense Impairment"
  ],
  "platforms": [
    "ESXi",
    "Linux",
    "macOS",
    "Network Devices",
    "Windows"
  ],
  "summary": "Adversaries may disable or modify host-based or network firewalls to impair defensive mechanisms and enable further action. Once an adversary has gathered sufficient privileges, they can tamper with firewall services, policies, or rule sets to remove restrictions on inbound or outbound traffic...",
  "generated_by": "SOC Response Atlas by Basyrix"
}