tfMITRE ATT&CK technique
Anti-Automation Evasion T1696
- Tactic
- Stealth
- Platform
- SaaS
- Version
- 1.0
- Created
- 16 September 2026
- Last modified
- 06 October 2026
Sub-techniques 20 rules across the family · 0 mapped directly to T1696 · 0 of 2 carry rules
Adversaries may employ various means to evade or complete automation checks. Automation checks distinguish human users from bot traffic and prevent bots from reaching the web pages protected by automation checks. For example, a user may be required to solve a CAPTCHA challenge before accessing a form or login page. Traditional CAPTCHAs ask the user to decipher a string of characters, type the characters into a box, and submit the form. reCAPTCHA asks the user to identify images, click a checkbox, or evaluate the user’s behavior from mouse movement and device cookies.[1]
ReconResource DevInitial AccessExecutionPersistencePriv EscStealthDef ImpairmentCred AccessDiscoveryLateral MoveCollectionC2ExfiltrationImpact
0
Threat groupsNone recorded
Threat groupsNone recorded · 27% of ATT&CK techniques have none either.0
CampaignsNone recorded
CampaignsNone recorded · 53% of ATT&CK techniques have none either.0
Tools & malwareNone recorded
Tools & malwareNone recorded · 30% of ATT&CK techniques have none either.0
Detection rulesNone recorded
Detection rulesNone recorded · 33% of ATT&CK techniques have none either.