MITRE ATT&CK: Endpoint denial of service
Denial-of-Service (DoS) attacks have been around since the 1970s, and they can be downright paralyzing to an organization. Not only does it shut down the ability...
MITRE ATT&CK™
MITRE ATT&CK: Disk content wipe
Classic moves, no matter what the subject matter is, are timeless. Be it the hook shot in basketball, the uppercut in boxing or the pirouette in ballet, these...
MITRE ATT&CK: Disk structure wipe
Denying the availability of systems and resources of an attack target is a main objective of many real-world attack campaigns. If you were going to disrupt...
MITRE ATT&CK: Supply chain compromise
Attackers are well known to install malicious software, or malware, onto compromised systems during a cyberattack. But what many may not know is that this...
MITRE ATT&CK: Shortcut modification
Most people love shortcuts — they make things faster and easier. This common passion is behind a lot of the conveniences we experience on a daily basis....
MITRE ATT&CK: External remote service
If you would have told the average person fifty years ago that in the future people would be able to view what you are doing on a personal computer screen...
MITRE ATT&CK: Port knocking
Ports are like the doors into or out of a network, where information must pass through them to enter or exit an organization’s network. Now, when you knock...
MITRE ATT&CK vulnerability spotlight: Forced authentication
The ATT&CK framework is a product of MITRE, one of the federally funded research and development centers (FFRDCs) designed to support the U.S. government...
MITRE ATT&CK vulnerability spotlight: Exploitation for credential access
MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As an FFRDC, MITRE performs a variety of different functions for...
MITRE ATT&CK: External remote services
In this article, we will discuss the various ways that attackers are able to abuse external remote services to gain unauthorized access into internal networks....