MITRE ATT&CK: Disk structure wipe
Denying the availability of systems and resources of an attack target is a main objective of many real-world attack campaigns. If you were going to disrupt...
MITRE ATT&CK™
MITRE ATT&CK: Supply chain compromise
Attackers are well known to install malicious software, or malware, onto compromised systems during a cyberattack. But what many may not know is that this...
MITRE ATT&CK: Shortcut modification
Most people love shortcuts — they make things faster and easier. This common passion is behind a lot of the conveniences we experience on a daily basis....
MITRE ATT&CK: External remote service
If you would have told the average person fifty years ago that in the future people would be able to view what you are doing on a personal computer screen...
MITRE ATT&CK: Port knocking
Ports are like the doors into or out of a network, where information must pass through them to enter or exit an organization’s network. Now, when you knock...
MITRE ATT&CK vulnerability spotlight: Forced authentication
The ATT&CK framework is a product of MITRE, one of the federally funded research and development centers (FFRDCs) designed to support the U.S. government...
MITRE ATT&CK vulnerability spotlight: Exploitation for credential access
MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As an FFRDC, MITRE performs a variety of different functions for...
MITRE ATT&CK: External remote services
In this article, we will discuss the various ways that attackers are able to abuse external remote services to gain unauthorized access into internal networks....
MITRE ATT&CK: Exploiting a public-facing application
Public/internet-facing applications are the most common applications present on the internet today. In this article, we’ll take a close look at these applications....
MITRE ATT&CK: Drive-by compromise
In this article, we will discuss drive-by compromise attacks: exactly what they are and the different forms they can take. We will also see examples of how...