CyberStrikeus/CyberStrike - Page 105

t1586-002-email-accounts

Adversaries may compromise email accounts that can be used during targeting.

t1586-003-cloud-accounts

Adversaries may compromise cloud accounts that can be used during targeting.

t1586-compromise-accounts

Adversaries may compromise accounts with services that can be used during targeting.

t1587-001-malware

Adversaries may develop malware and malware components that can be used during targeting.

t1587-002-code-signing-certificates

Adversaries may create self-signed code signing certificates that can be used during targeting.

t1587-003-digital-certificates

Adversaries may create self-signed SSL/TLS certificates that can be used during targeting.

t1587-004-exploits

Adversaries may develop exploits that can be used during targeting.

t1587-develop-capabilities

Adversaries may build capabilities that can be used during targeting.

t1588-001-malware

Adversaries may buy, steal, or download malware that can be used during targeting.

t1588-002-tool

Adversaries may buy, steal, or download software tools that can be used during targeting.

t1588-003-code-signing-certificates

Adversaries may buy and/or steal code signing certificates that can be used during targeting.

t1588-004-digital-certificates

Adversaries may buy and/or steal SSL/TLS certificates that can be used during targeting.

t1588-005-exploits

Adversaries may buy, steal, or download exploits that can be used during targeting.

t1588-006-vulnerabilities

Adversaries may acquire information about vulnerabilities that can be used during targeting.

t1588-007-artificial-intelligence

Adversaries may obtain access to generative artificial intelligence tools, such as large language models (LLMs), to aid various techniques during targeting.

t1588-obtain-capabilities

Adversaries may buy and/or steal capabilities that can be used during targeting.

t1608-001-upload-malware

Adversaries may upload malware to third-party or adversary controlled infrastructure to make it accessible during targeting.

t1608-002-upload-tool

Adversaries may upload tools to third-party or adversary controlled infrastructure to make it accessible during targeting.

t1608-003-install-digital-certificate

Adversaries may install SSL/TLS certificates that can be used during targeting.

t1608-004-drive-by-target

Adversaries may prepare an operational environment to infect systems that visit a website over the normal course of browsing.

t1608-005-link-target

Adversaries may put in place resources that are referenced by a link that can be used during targeting.

t1608-006-seo-poisoning

Adversaries may poison mechanisms that influence search engine optimization (SEO) to further lure staged capabilities towards potential victims.

t1608-stage-capabilities

Adversaries may upload, install, or otherwise set up capabilities that can be used during targeting.

t1650-acquire-access

Adversaries may purchase or otherwise acquire an existing access to a target system or network.

t1589-001-credentials

Adversaries may gather credentials that can be used during targeting.

t1589-002-email-addresses

Adversaries may gather email addresses that can be used during targeting.

t1589-003-employee-names

Adversaries may gather employee names that can be used during targeting.

t1589-gather-victim-identity-information

Adversaries may gather information about the victim's identity that can be used during targeting.

t1590-001-domain-properties

Adversaries may gather information about the victim's network domain(s) that can be used during targeting.

t1590-002-dns

Adversaries may gather information about the victim's DNS that can be used during targeting.

t1590-003-network-trust-dependencies

Adversaries may gather information about the victim's network trust dependencies that can be used during targeting.

t1590-004-network-topology

Adversaries may gather information about the victim's network topology that can be used during targeting.

t1590-005-ip-addresses

Adversaries may gather the victim's IP addresses that can be used during targeting.

t1590-006-network-security-appliances

Adversaries may gather information about the victim's network security appliances that can be used during targeting.

t1590-gather-victim-network-information

Adversaries may gather information about the victim's networks that can be used during targeting.

t1591-001-determine-physical-locations

Adversaries may gather the victim's physical location(s) that can be used during targeting.

t1591-002-business-relationships

Adversaries may gather information about the victim's business relationships that can be used during targeting.

t1591-003-identify-business-tempo

Adversaries may gather information about the victim's business tempo that can be used during targeting.

t1591-004-identify-roles

Adversaries may gather information about identities and roles within the victim organization that can be used during targeting.

t1591-gather-victim-org-information

Adversaries may gather information about the victim's organization that can be used during targeting.