1. Home
  2. Matrices
  3. Network

Network Matrix

Below are the tactics and techniques representing the MITRE ATT&CK® Matrix for Enterprise covering techniques against network infrastructure devices. The Matrix contains information for the Network platform.

View on the ATT&CK® Navigator
Version Permalink
Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Collection Command and Control Exfiltration Impact
2 techniques 1 techniques 7 techniques 1 techniques 9 techniques 6 techniques 11 techniques 4 techniques 3 techniques 2 techniques 4 techniques
Exploit Public-Facing Application
Valid Accounts
Command and Scripting Interpreter (1)
=
Account Manipulation (1)
=
Create Account (1)
=
Modify Authentication Process (1)
=
Pre-OS Boot (2)
=
Server Software Component (1)
=
Traffic Signaling (1)
=
Valid Accounts
Valid Accounts
Impair Defenses (1)
=
Indicator Removal (2)
=
Modify Authentication Process (1)
=
Modify System Image (2)
=
Network Boundary Bridging (1)
=
Pre-OS Boot (2)
=
Traffic Signaling (1)
=
Valid Accounts
Weaken Encryption (2)
=
Adversary-in-the-Middle
Brute Force (2)
=
Input Capture (1)
=
Modify Authentication Process (1)
=
Network Sniffing
Unsecured Credentials (1)
=
File and Directory Discovery
Network Service Discovery
Network Sniffing
Password Policy Discovery
Process Discovery
Remote System Discovery
System Information Discovery
System Network Configuration Discovery
System Network Connections Discovery
System Owner/User Discovery
System Time Discovery
Adversary-in-the-Middle
Data from Configuration Repository (2)
=
Data from Local System
Input Capture (1)
=
Non-Application Layer Protocol
Proxy (1)
=
Traffic Signaling (1)
=
Automated Exfiltration (1)
=
Exfiltration Over Alternative Protocol (1)
=
Disk Wipe (1)
=
Firmware Corruption
Inhibit System Recovery
System Shutdown/Reboot
Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Collection Command and Control Exfiltration Impact
2 techniques 1 techniques 7 techniques 1 techniques 9 techniques 6 techniques 11 techniques 4 techniques 3 techniques 2 techniques 4 techniques
Exploit Public-Facing Application
Valid Accounts
=
Command and Scripting Interpreter (1)
=
Account Manipulation (1)
=
Create Account (1)
=
Modify Authentication Process (1)
=
Pre-OS Boot (2)
=
Server Software Component (1)
=
Traffic Signaling (1)
Valid Accounts
Valid Accounts
=
Impair Defenses (1)
=
Indicator Removal (2)
=
Modify Authentication Process (1)
=
Modify System Image (2)
=
Network Boundary Bridging (1)
=
Pre-OS Boot (2)
=
Traffic Signaling (1)
Valid Accounts
=
Weaken Encryption (2)
Adversary-in-the-Middle
=
Brute Force (2)
=
Input Capture (1)
=
Modify Authentication Process (1)
Network Sniffing
=
Unsecured Credentials (1)
File and Directory Discovery
Network Service Discovery
Network Sniffing
Password Policy Discovery
Process Discovery
Remote System Discovery
System Information Discovery
System Network Configuration Discovery
System Network Connections Discovery
System Owner/User Discovery
System Time Discovery
Adversary-in-the-Middle
=
Data from Configuration Repository (2)
Data from Local System
=
Input Capture (1)
Non-Application Layer Protocol
=
Proxy (1)
=
Traffic Signaling (1)
=
Automated Exfiltration (1)
=
Exfiltration Over Alternative Protocol (1)
=
Disk Wipe (1)
Firmware Corruption
Inhibit System Recovery
System Shutdown/Reboot