value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1595.002 |
Active Scanning: Vulnerability Scanning |
value_chain.targeting.variety.Personal Information |
Information on individuals such as title, interests, physical location, etc, used to pick an organization as a target |
related-to |
T1589 |
Gather Victim Identity Information |
value_chain.targeting.variety.Lost or stolen credentials |
lost or stolen credentials, including credental stuffing, used to pick an organization as a target |
related-to |
T1589.001 |
Gather Victim Identity Information: Credentials |
value_chain.targeting.variety.Personal Information |
Information on individuals such as title, interests, physical location, etc, used to pick an organization as a target |
related-to |
T1589.001 |
Gather Victim Identity Information: Credentials |
value_chain.targeting.variety.Email addresses |
Email addresses |
related-to |
T1589.002 |
Gather Victim Identity Information: Email Addresses |
value_chain.targeting.variety.Personal Information |
Information on individuals such as title, interests, physical location, etc, used to pick an organization as a target |
related-to |
T1589.002 |
Gather Victim Identity Information: Email Addresses |
value_chain.targeting.variety.Personal Information |
Information on individuals such as title, interests, physical location, etc, used to pick an organization as a target |
related-to |
T1589.003 |
Gather Victim Identity Information: Employee Names |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590 |
Gather Victim Network Information |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590.001 |
Gather Victim Network Information: Domain Properties |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590.002 |
Gather Victim Network Information: DNS |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590.003 |
Gather Victim Network Information: Network Trust Dependencies |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590.004 |
Gather Victim Network Information: Network Topology |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590.005 |
Gather Victim Network Information: IP Addresses |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1590.006 |
Gather Victim Network Information: Network Security Appliances |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1591 |
Gather Victim Org Information |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1591.001 |
Gather Victim Org Information: Determine Physical Locations |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1591.002 |
Gather Victim Org Information: Business Relationships |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1591.003 |
Gather Victim Org Information: Identify Business Tempo |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1591.004 |
Gather Victim Org Information: Identify Roles |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1592 |
Gather Victim Host Information |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1592.001 |
Gather Victim Host Information: Hardware |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1592.002 |
Gather Victim Host Information: Software |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1592.003 |
Gather Victim Host Information: Firmware |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1592.004 |
Gather Victim Host Information: Client Configurations |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1593 |
Search Open Websites/Domains |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1593.001 |
Search Open Websites/Domains: Social Media |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1593.002 |
Search Open Websites/Domains: Search Engines |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1594 |
Search Victim-Owned Websites |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1596 |
Search Open Technical Databases |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1596.001 |
Search Open Technical Databases: DNS/Passive DNS |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1596.002 |
Search Open Technical Databases: WHOIS |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1596.003 |
Search Open Technical Databases: Digital Certificates |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1596.004 |
Search Open Technical Databases: CDNs |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1596.005 |
Search Open Technical Databases: Scan Databases |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1597 |
Search Closed Sources |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1597.001 |
Search Closed Sources: Threat Intel Vendors |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1597.002 |
Search Closed Sources: Purchase Technical Data |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1595 |
Active Scanning |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1595.001 |
Active Scanning: Scanning IP Blocks |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1598.002 |
Phishing for Information: Spearphishing Attachment |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1598.003 |
Phishing for Information: Spearphishing Link |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1598 |
Phishing for Information |
value_chain.targeting.variety.Organizational Information |
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target |
related-to |
T1598.001 |
Phishing for Information: Spearphishing Service |