Oct 17, 2018 · Discovery consists of techniques an adversary may use to gain knowledge about the system and internal network. These techniques help adversaries observe the environment …

Enterprise tactics Tactics represent the "why" of an ATT&CK technique or sub-technique. It is the adversary's tactical goal: the reason for performing an action. For example, an adversary may …

MITRE ATT&CK ® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for …

ICS Matrix Below are the tactics and techniques representing the MITRE ATT&CK ® Matrix for ICS.

Discovery consists of techniques an adversary may use to gain knowledge about the system and internal network. These techniques help adversaries observe the environment and orient …

Oct 24, 2018 · Account Discovery Sub-techniques (4) Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised …

Account Discovery: Domain Account Other sub-techniques of Account Discovery (4) Adversaries may attempt to get a listing of domain accounts. This information can help adversaries …

The discovery of these resources may inform an adversary’s next steps in the environment, such as how to perform lateral movement and which methods to utilize for execution.

Permission Groups Discovery: Local Groups Other sub-techniques of Permission Groups Discovery (3) Adversaries may attempt to find local system groups and permission settings. …

Account Discovery: Local Account Other sub-techniques of Account Discovery (4) Adversaries may attempt to get a listing of local system accounts. This information can help adversaries …