ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CSA Cloud Controls Matrix (CCM)
CRI Profile
Known Exploited Vulnerabilities
Google Cloud Platform (GCP)
Intel vPro
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and VERIS 1.3.5.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Footprinting and fingerprinting
VERIS
action.hacking.variety.Footprinting
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
VERIS
1.3.5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1007
System Service Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1012
Query Registry
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1057
Process Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069
Permission Groups Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069.001
Permission Groups Discovery: Local Groups
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069.002
Permission Groups Discovery: Domain Groups
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069.003
Permission Groups Discovery: Cloud Groups
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1082
System Information Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087
Account Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.001
Account Discovery: Local Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.002
Account Discovery: Domain Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.003
Account Discovery: Email Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.004
Account Discovery: Cloud Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1119
Automated Collection
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1120
Peripheral Device Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1124
System Time Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1201
Password Policy Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1480
Execution Guardrails
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1480.001
Execution Guardrails: Environmental Keying
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1518
Software Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1518.001
Software Discovery: Security Software Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1526
Cloud Service Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1538
Cloud Service Dashboard
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1580
Cloud Infrastructure Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589
Gather Victim Identity Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589.001
Gather Victim Identity Information: Credentials
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589.002
Gather Victim Identity Information: Email Addresses
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589.003
Gather Victim Identity Information: Employee Names
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590
Gather Victim Network Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.001
Gather Victim Network Information: Domain Properties
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.002
Gather Victim Network Information: DNS
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.003
Gather Victim Network Information: Network Trust Dependencies
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.004
Gather Victim Network Information: Network Topology
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.005
Gather Victim Network Information: IP Addresses
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.006
Gather Victim Network Information: Network Security Appliances
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591
Gather Victim Org Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.001
Gather Victim Org Information: Determine Physical Locations
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.002
Gather Victim Org Information: Business Relationships
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.003
Gather Victim Org Information: Identify Business Tempo
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.004
Gather Victim Org Information: Identify Roles
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592
Gather Victim Host Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.001
Gather Victim Host Information: Hardware
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.002
Gather Victim Host Information: Software
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.003
Gather Victim Host Information: Firmware
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.004
Gather Victim Host Information: Client Configurations
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1593
Search Open Websites/Domains
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1593.001
Search Open Websites/Domains: Social Media
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1593.002
Search Open Websites/Domains: Search Engines
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1594
Search Victim-Owned Websites
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596
Search Open Technical Databases
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.001
Search Open Technical Databases: DNS/Passive DNS
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.002
Search Open Technical Databases: WHOIS
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.003
Search Open Technical Databases: Digital Certificates
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.004
Search Open Technical Databases: CDNs
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.005
Search Open Technical Databases: Scan Databases
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1597
Search Closed Sources
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1597.001
Search Closed Sources: Threat Intel Vendors
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1597.002
Search Closed Sources: Purchase Technical Data
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1602
Data from Configuration Repository
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1602.001
Data from Configuration Repository: SNMP (MIB Dump)
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1602.002
Data from Configuration Repository: Network Device Configuration Dump
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1613
Container and Resource Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1614
System Location Discovery