Critical Infrastructure Cybersecurity Framework|Secure Environment

CIC-ATT&CKCRITICAL INFRASTRUCTURECYBERSECURITY

Home TacticsInitial Access

ATT&CK Tactics

Tactics represent the "why" of an ATT&CK technique. They are the adversary's tactical goals: the reason for performing an action. There are 14 tactics in the Enterprise ATT&CK Matrix.

Recon

Resource Dev

Initial Access

Execution

Persistence

Priv Esc

Defense Evasion

Cred Access

Discovery

Lateral Move

Collection

C2

Exfiltration

Impact

TA0001

Initial Access

The adversary is trying to get into your network. Initial Access consists of techniques that use various entry vectors to gain their initial foothold within a network.

Associated Techniques(11)

Content Injection

Adversaries may gain access and continuously communicate with victims by injecting malicious content into systems through online network traffic.

Drive-by Compromise

Adversaries may gain access to a system through a user visiting a website over the normal course of browsing.

Exploit Public-Facing Application

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

External Remote Services

Adversaries may leverage external-facing remote services to initially access and/or persist within a network.

Hardware Additions

Adversaries may introduce computer accessories, networking hardware, or other computing devices into a system or network.

Phishing

Adversaries may send phishing messages to gain access to victim systems.

4 sub-techniques

Replication Through Removable Media

Adversaries may move onto systems by copying malware to removable media.

Supply Chain Compromise

Adversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer.

3 sub-techniques

Trusted Relationship

Adversaries may breach or otherwise leverage organizations who have access to intended victims.

Valid Accounts

Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access.

4 sub-techniques

Wi-Fi Networks

Adversaries may gain access to a system through a wireless network.

By using this website, you agree to our legal documents. Please review our Privacy Policy, Terms of Use, and Accessibility Statement in the footer.