|
|
|
CAPEC-580: System Footprinting |
Description An adversary engages in active probing and exploration activities to determine security information about a remote target system. Often times adversaries will rely on remote applications that can be probed for system configurations. Likelihood Of Attack Typical Severity Prerequisites
The adversary must have logical access to the target network and system. |
Skills Required
[Level: Low] The adversary needs to know basic linux commands. |
Consequences This table specifies different individual consequences associated with the attack pattern. The Scope identifies the security property that is violated, while the Impact describes the negative technical impact that arises if an adversary succeeds in their attack. The Likelihood provides information about how likely the specific consequence is expected to be seen relative to the other consequences in the list. For example, there may be high likelihood that a pattern will be used to achieve a certain impact, but a low likelihood that it will be exploited to achieve a different impact.Scope | Impact | Likelihood |
---|
Confidentiality | Read Data | |
Mitigations
Keep patches up to date by installing weekly or daily if possible. |
Identify programs that may be used to acquire peripheral information and block them by using a software restriction policy or tools that restrict program execution by using a process allowlist. |
Taxonomy Mappings CAPEC mappings to ATT&CK techniques leverage an inheritance model to streamline and minimize direct CAPEC/ATT&CK mappings. Inheritance of a mapping is indicated by text stating that the parent CAPEC has relevant ATT&CK mappings. Note that the ATT&CK Enterprise Framework does not use an inheritance model as part of the mapping to CAPEC.Relevant to the ATT&CK taxonomy mapping (also see parent) Entry ID | Entry Name |
---|
1082 | System Information Discovery |
Content History Submissions |
---|
Submission Date | Submitter | Organization |
---|
2015-11-09 (Version 2.7) | CAPEC Content Team | The MITRE Corporation | | Modifications |
---|
Modification Date | Modifier | Organization |
---|
2018-07-31 (Version 2.12) | CAPEC Content Team | The MITRE Corporation | Updated Attack_Motivation-Consequences, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, Solutions_and_Mitigations, Typical_Likelihood_of_Exploit, Typical_Severity | 2019-04-04 (Version 3.1) | CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns | 2020-07-30 (Version 3.3) | CAPEC Content Team | The MITRE Corporation | Updated Mitigations, Taxonomy_Mappings | 2020-12-17 (Version 3.4) | CAPEC Content Team | The MITRE Corporation | Updated @Name, Description | 2022-09-29 (Version 3.8) | CAPEC Content Team | The MITRE Corporation | Updated Taxonomy_Mappings | 2023-01-24 (Version 3.9) | CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses | Previous Entry Names |
---|
Change Date | Previous Entry Name |
---|
2020-12-17 (Version 3.4) | Application Footprinting | |
More information is available — Please select a different filter.
|