Use Intrusion Detection Systems (IDS): By monitoring network traffic, an IDS can detect potential scanning and reconnaissance activities.
Implement Least Privilege: Ensure users and applications only have the minimum required access rights, making it harder for adversaries to discover valuable targets.
Regularly Audit and Monitor System Logs: By keeping a keen eye on logs, unusual activity that might be an adversary performing discovery can be detected.
The Discovery tactic is a pivotal phase in many cyber-attacks. By understanding this tactic and its associated techniques, organizations can better prepare their defenses and detect potential threats.