Questions tagged [mitre]

The tag has no usage guidance.

7 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1 vote
0 answers
85 views

How to find out what Microsoft 365 Defender is monitoring?

I am currently analyzing our security landscape with the help of the MITRE ATT&CK Framework. Most techniques have ways to "Mitigate" and to "Detect" it, and one of the most ...
Unbuckle's user avatar
1 vote
1 answer
123 views

MITRE ATT&CK Design and Philosophy doc: "Process hollowing sub-technique can't be under Priviledge Escalation tactic"

I'm new to the MITRE ATT&CK framework, and am familiarizing myself with it by reading the Design and philosophy document (2020). I'm not sure if the, boldfaced part of the, following passage (p.13)...
Mussé Redi's user avatar
1 vote
0 answers
174 views

MITRE ATT&CK framework concept doubts between tactics

I am studying the MITRE ATT&CK framework and I am confused with the following tactics: Reconnaissance, Discovery, and Resource Development. What are the differences between these 3 tactics? ...
Jask_Skull's user avatar
0 votes
0 answers
60 views

Proof of concept: Services File Permissions Weakness (T1574.010)

I am trying to do a proof of concept where I use technique T1574.010. In this technique, I should rewrite the binpath of some service in Windows 10 so that when the service starts again the payload ...
P00's user avatar
  • 1
0 votes
1 answer
502 views

CVSS v3 and v3.1 Missing temporal metrics (Exploit Code Maturity and Remediation Level) in all CVEs using NVD API

I have been working with the NIST - NVD API v2 and I have noticed that the temporal metrics "remediationLevelType" and "exploitCodeMaturityType" are missing in ALL CVEs that I have ...
Tlopasha's user avatar
0 votes
0 answers
215 views

Why does Mitre T1203 technique includes macros as software vulnerabilities?

I was reading a recent report about an APT and jumped into this Technique: https://attack.mitre.org/techniques/T1203/ This technique is called: Exploitation for Client Execution And that might match ...
borcho's user avatar
  • 590
0 votes
0 answers
2k views

Is there a way to map each CVE to a technique/tactic in the mitre ATT&CK matrix?

The only 'solution' I thought of is linking a CVE to a CWE and then to a CAPEC (Method found in this link: How to find CAPEC items related to a CVE) but I am unable to get from a CAPEC attack pattern ...
Xin's user avatar
  • 1