test_scratch
/
cti-ATT-CK-v13.1
/pre-attack
/attack-pattern
/attack-pattern--0440f60f-9056-4791-a740-8eae96eb61fa.json
{ | |
"type": "bundle", | |
"id": "bundle--bfd1e876-c988-40c3-b653-3c82858c17b7", | |
"spec_version": "2.0", | |
"objects": [ | |
{ | |
"id": "attack-pattern--0440f60f-9056-4791-a740-8eae96eb61fa", | |
"created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", | |
"name": "Authorized user performs requested cyber action", | |
"description": "**This technique has been deprecated. Please see ATT&CK's Initial Access and Execution tactics for replacement techniques.**\n\nClicking on links in email, opening attachments, or visiting websites that result in drive by downloads can all result in compromise due to users performing actions of a cyber nature. (Citation: AnonHBGary)", | |
"external_references": [ | |
{ | |
"source_name": "mitre-pre-attack", | |
"external_id": "T1386", | |
"url": "https://attack.mitre.org/techniques/T1386" | |
}, | |
{ | |
"source_name": "AnonHBGary", | |
"description": "Bright, P. (2011, February 15). Anonymous speaks: the inside story of the HBGary hack. Retrieved March 9, 2017.", | |
"url": "https://arstechnica.com/tech-policy/2011/02/anonymous-speaks-the-inside-story-of-the-hbgary-hack/" | |
} | |
], | |
"object_marking_refs": [ | |
"marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" | |
], | |
"type": "attack-pattern", | |
"kill_chain_phases": [ | |
{ | |
"kill_chain_name": "mitre-pre-attack", | |
"phase_name": "compromise" | |
} | |
], | |
"modified": "2020-10-14T01:53:27.989Z", | |
"created": "2017-12-14T16:46:06.044Z", | |
"x_mitre_is_subtechnique": false, | |
"x_mitre_old_attack_id": "PRE-T1163", | |
"x_mitre_version": "1.0", | |
"x_mitre_difficulty_for_adversary_explanation": "Users unwittingly click on spearphishing links frequently, despite training designed to educate about the perils of spearphishing.", | |
"x_mitre_difficulty_for_adversary": "Yes", | |
"x_mitre_detectable_by_common_defenses_explanation": "Some environments have anti-spearphishing mechanisms to detect or block the link before it reaches the user.", | |
"x_mitre_deprecated": true, | |
"x_mitre_detectable_by_common_defenses": "Yes" | |
} | |
] | |
} |