MITRE 'Discovery' phase explained under 1 minute

preview_player
Показать описание
In the Discovery phase, The threat actor is trying to figure out your environment. Discovery consists of techniques an adversary may use to gain knowledge about the system and internal network.

These techniques help adversaries observe the environment and orient themselves before deciding how to act. They also allow adversaries to explore what they can control and what's around their entry point in order to discover how it could benefit their current objective. Native operating system tools are often used toward this post-compromise information-gathering objective. The MITRE Attack framework short code for "Discovery" is TA0007.

Learn more about MITRE:

Check out my MITRE playlist, here I explain MITRE in very basic language (almost non-technical):

Check out the official MITRE website (We are not affiliated to them in any way):
Рекомендации по теме