Critical Infrastructure Cybersecurity Framework|Secure Environment

CIC-ATT&CKCRITICAL INFRASTRUCTURECYBERSECURITY

Home TacticsResource Dev

ATT&CK Tactics

Tactics represent the "why" of an ATT&CK technique. They are the adversary's tactical goals: the reason for performing an action. There are 14 tactics in the Enterprise ATT&CK Matrix.

Recon

Resource Dev

Initial Access

Execution

Persistence

Priv Esc

Defense Evasion

Cred Access

Discovery

Lateral Move

Collection

C2

Exfiltration

Impact

TA0042

Resource Development

The adversary is trying to establish resources they can use to support operations. Resource Development consists of techniques that involve adversaries creating, purchasing, or compromising/stealing resources.

Associated Techniques(8)

Acquire Access

Adversaries may purchase or otherwise acquire an existing access to a target system or network.

Acquire Infrastructure

Adversaries may buy, lease, or rent infrastructure that can be used during targeting.

8 sub-techniques

Compromise Accounts

Adversaries may compromise accounts with services that can be used during targeting.

3 sub-techniques

Compromise Infrastructure

Adversaries may compromise third-party infrastructure that can be used during targeting.

8 sub-techniques

Develop Capabilities

Adversaries may build capabilities that can be used during targeting.

4 sub-techniques

Establish Accounts

Adversaries may create and cultivate accounts with services that can be used during targeting.

3 sub-techniques

Obtain Capabilities

Adversaries may buy and/or steal capabilities that can be used during targeting.

7 sub-techniques

Stage Capabilities

Adversaries may upload, install, or otherwise set up capabilities that can be used during targeting.

6 sub-techniques

By using this website, you agree to our legal documents. Please review our Privacy Policy, Terms of Use, and Accessibility Statement in the footer.