ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
Known Exploited Vulnerabilities
Google Cloud Platform (GCP)
Intel vPro
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 16.1 Enterprise and VERIS 1.4.0.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Enumerating the state of the network
VERIS
action.hacking.variety.Scan network
Mappings
Mappings
ATT&CK Version
16.1
ATT&CK Domain
Enterprise
VERIS
1.4.0
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1018
Remote System Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1007
System Service Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1046
Network Service Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1049
System Network Connections Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1119
Automated Collection
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1135
Network Share Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1480
Execution Guardrails
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1480.001
Environmental Keying
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1526
Cloud Service Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1580
Cloud Infrastructure Discovery
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1589
Gather Victim Identity Information
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1589.001
Credentials
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1589.002
Email Addresses
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1589.003
Employee Names
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590
Gather Victim Network Information
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590.001
Domain Properties
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590.002
DNS
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590.003
Network Trust Dependencies
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590.004
Network Topology
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590.005
IP Addresses
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1590.006
Network Security Appliances
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1592
Gather Victim Host Information
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1592.001
Hardware
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1592.002
Software
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1592.003
Firmware
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1592.004
Client Configurations
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1602
Data from Configuration Repository
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1602.001
SNMP (MIB Dump)
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1602.002
Network Device Configuration Dump
action.hacking.variety.Scan network
Enumerating the state of the network
related-to
T1613
Container and Resource Discovery