ATT&CK 기법 · Discovery
Network Service Discovery T1046
이 기법을 다룬 REVELARE 한국어 위협 분석 2편 · Discovery
이 기법을 다룬 분석
MITRE 공식 정의
Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation. Common methods to acquire this information include port, vulnerability, and/or wordlist scans using tools that are brought onto a system.(Citation: CISA AR21-126A FIVEHANDS May 2021) Within cloud environments, adversaries may attempt to discover services running on other cloud hosts. …
플랫폼: Containers, IaaS, Linux, macOS, Network Devices, Windows