Critical Infrastructure Cybersecurity Framework|Secure Environment

CIC-ATT&CKCRITICAL INFRASTRUCTURECYBERSECURITY

Home TacticsRecon

ATT&CK Tactics

Tactics represent the "why" of an ATT&CK technique. They are the adversary's tactical goals: the reason for performing an action. There are 14 tactics in the Enterprise ATT&CK Matrix.

Recon

Resource Dev

Initial Access

Execution

Persistence

Priv Esc

Defense Evasion

Cred Access

Discovery

Lateral Move

Collection

C2

Exfiltration

Impact

TA0043

Reconnaissance

The adversary is trying to gather information they can use to plan future operations. Reconnaissance consists of techniques that involve adversaries actively or passively gathering information that can be used to support targeting.

Associated Techniques(10)

Active Scanning

Adversaries may execute active reconnaissance scans to gather information that can be used during targeting.

3 sub-techniques

Gather Victim Host Information

Adversaries may gather information about the victim's hosts that can be used during targeting.

4 sub-techniques

Gather Victim Identity Information

Adversaries may gather information about the victim's identity that can be used during targeting.

3 sub-techniques

Gather Victim Network Information

Adversaries may gather information about the victim's networks that can be used during targeting.

6 sub-techniques

Gather Victim Org Information

Adversaries may gather information about the victim's organization that can be used during targeting.

4 sub-techniques

Phishing for Information

Adversaries may send phishing messages to elicit sensitive information that can be used during targeting.

4 sub-techniques

Search Closed Sources

Adversaries may search and gather information about victims from closed sources that can be used during targeting.

2 sub-techniques

Search Open Technical Databases

Adversaries may search freely available technical databases for information about victims.

5 sub-techniques

Search Open Websites/Domains

Adversaries may search freely available websites and/or domains for information about victims.

3 sub-techniques

Search Victim-Owned Websites

Adversaries may search websites owned by the victim for information that can be used during targeting.

By using this website, you agree to our legal documents. Please review our Privacy Policy, Terms of Use, and Accessibility Statement in the footer.