ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and VERIS 1.3.5.
Change versions here.
Home
Mapping Frameworks
VERIS Home
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
VERIS
value_chain.targeting.variety.Organizational Information
Mappings
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
VERIS
1.3.5
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1595.002
Active Scanning: Vulnerability Scanning
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590
Gather Victim Network Information
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590.001
Gather Victim Network Information: Domain Properties
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590.002
Gather Victim Network Information: DNS
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590.003
Gather Victim Network Information: Network Trust Dependencies
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590.004
Gather Victim Network Information: Network Topology
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590.005
Gather Victim Network Information: IP Addresses
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1590.006
Gather Victim Network Information: Network Security Appliances
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1591
Gather Victim Org Information
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1591.001
Gather Victim Org Information: Determine Physical Locations
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1591.002
Gather Victim Org Information: Business Relationships
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1591.003
Gather Victim Org Information: Identify Business Tempo
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1591.004
Gather Victim Org Information: Identify Roles
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1592
Gather Victim Host Information
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1592.001
Gather Victim Host Information: Hardware
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1592.002
Gather Victim Host Information: Software
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1592.003
Gather Victim Host Information: Firmware
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1592.004
Gather Victim Host Information: Client Configurations
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1593
Search Open Websites/Domains
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1593.001
Search Open Websites/Domains: Social Media
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1593.002
Search Open Websites/Domains: Search Engines
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1594
Search Victim-Owned Websites
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1596
Search Open Technical Databases
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1596.001
Search Open Technical Databases: DNS/Passive DNS
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1596.002
Search Open Technical Databases: WHOIS
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1596.003
Search Open Technical Databases: Digital Certificates
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1596.004
Search Open Technical Databases: CDNs
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1596.005
Search Open Technical Databases: Scan Databases
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1597
Search Closed Sources
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1597.001
Search Closed Sources: Threat Intel Vendors
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1597.002
Search Closed Sources: Purchase Technical Data
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1595
Active Scanning
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1595.001
Active Scanning: Scanning IP Blocks
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1598.002
Phishing for Information: Spearphishing Attachment
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1598.003
Phishing for Information: Spearphishing Link
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1598
Phishing for Information
value_chain.targeting.variety.Organizational Information
Information on an organization such as org chart, technologies in use, financial assets, etc, used to pick them as a target
related-to
T1598.001
Phishing for Information: Spearphishing Service
