ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and VERIS 1.3.5.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Footprinting and fingerprinting
VERIS
action.hacking.variety.Footprinting
Mappings
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
VERIS
1.3.5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1007
System Service Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1012
Query Registry
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1057
Process Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069
Permission Groups Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069.001
Permission Groups Discovery: Local Groups
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069.002
Permission Groups Discovery: Domain Groups
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1069.003
Permission Groups Discovery: Cloud Groups
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1082
System Information Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087
Account Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.001
Account Discovery: Local Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.002
Account Discovery: Domain Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.003
Account Discovery: Email Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1087.004
Account Discovery: Cloud Account
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1119
Automated Collection
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1120
Peripheral Device Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1124
System Time Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1201
Password Policy Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1480
Execution Guardrails
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1480.001
Execution Guardrails: Environmental Keying
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1518
Software Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1518.001
Software Discovery: Security Software Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1526
Cloud Service Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1538
Cloud Service Dashboard
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1580
Cloud Infrastructure Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589
Gather Victim Identity Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589.001
Gather Victim Identity Information: Credentials
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589.002
Gather Victim Identity Information: Email Addresses
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1589.003
Gather Victim Identity Information: Employee Names
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590
Gather Victim Network Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.001
Gather Victim Network Information: Domain Properties
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.002
Gather Victim Network Information: DNS
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.003
Gather Victim Network Information: Network Trust Dependencies
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.004
Gather Victim Network Information: Network Topology
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.005
Gather Victim Network Information: IP Addresses
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1590.006
Gather Victim Network Information: Network Security Appliances
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591
Gather Victim Org Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.001
Gather Victim Org Information: Determine Physical Locations
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.002
Gather Victim Org Information: Business Relationships
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.003
Gather Victim Org Information: Identify Business Tempo
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1591.004
Gather Victim Org Information: Identify Roles
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592
Gather Victim Host Information
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.001
Gather Victim Host Information: Hardware
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.002
Gather Victim Host Information: Software
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.003
Gather Victim Host Information: Firmware
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1592.004
Gather Victim Host Information: Client Configurations
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1593
Search Open Websites/Domains
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1593.001
Search Open Websites/Domains: Social Media
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1593.002
Search Open Websites/Domains: Search Engines
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1594
Search Victim-Owned Websites
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596
Search Open Technical Databases
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.001
Search Open Technical Databases: DNS/Passive DNS
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.002
Search Open Technical Databases: WHOIS
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.003
Search Open Technical Databases: Digital Certificates
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.004
Search Open Technical Databases: CDNs
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1596.005
Search Open Technical Databases: Scan Databases
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1597
Search Closed Sources
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1597.001
Search Closed Sources: Threat Intel Vendors
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1597.002
Search Closed Sources: Purchase Technical Data
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1602
Data from Configuration Repository
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1602.001
Data from Configuration Repository: SNMP (MIB Dump)
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1602.002
Data from Configuration Repository: Network Device Configuration Dump
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1613
Container and Resource Discovery
action.hacking.variety.Footprinting
Footprinting and fingerprinting
related-to
T1614
System Location Discovery