1. Home
  2. Matrices
  3. Network

Network Matrix

Below are the tactics and techniques representing the MITRE ATT&CK® Matrix for Enterprise covering techniques against network infrastructure devices. The Matrix contains information for the Network platform.

View on the ATT&CK® Navigator
Version Permalink
Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Collection Command and Control Exfiltration Impact
2 techniques 1 techniques 5 techniques 1 techniques 9 techniques 5 techniques 8 techniques 4 techniques 3 techniques 1 techniques 2 techniques
Exploit Public-Facing Application
Valid Accounts
Command and Scripting Interpreter (1)
=
Modify Authentication Process (1)
=
Pre-OS Boot (2)
=
Server Software Component (1)
=
Traffic Signaling (1)
=
Valid Accounts
Valid Accounts
Impair Defenses (1)
=
Indicator Removal (2)
=
Modify Authentication Process (1)
=
Modify System Image (2)
=
Network Boundary Bridging (1)
=
Pre-OS Boot (2)
=
Traffic Signaling (1)
=
Valid Accounts
Weaken Encryption (2)
=
Adversary-in-the-Middle
Brute Force (2)
=
Input Capture (1)
=
Modify Authentication Process (1)
=
Network Sniffing
File and Directory Discovery
Network Service Discovery
Network Sniffing
Password Policy Discovery
Remote System Discovery
System Information Discovery
System Network Configuration Discovery
System Network Connections Discovery
Adversary-in-the-Middle
Data from Configuration Repository (2)
=
Data from Local System
Input Capture (1)
=
Non-Application Layer Protocol
Proxy (1)
=
Traffic Signaling (1)
=
Automated Exfiltration (1)
=
Firmware Corruption
System Shutdown/Reboot
Last modified: 01 April 2022
Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Collection Command and Control Exfiltration Impact
2 techniques 1 techniques 5 techniques 1 techniques 9 techniques 5 techniques 8 techniques 4 techniques 3 techniques 1 techniques 2 techniques
Exploit Public-Facing Application
Valid Accounts
=
Command and Scripting Interpreter (1)
=
Modify Authentication Process (1)
=
Pre-OS Boot (2)
=
Server Software Component (1)
=
Traffic Signaling (1)
Valid Accounts
Valid Accounts
=
Impair Defenses (1)
=
Indicator Removal (2)
=
Modify Authentication Process (1)
=
Modify System Image (2)
=
Network Boundary Bridging (1)
=
Pre-OS Boot (2)
=
Traffic Signaling (1)
Valid Accounts
=
Weaken Encryption (2)
Adversary-in-the-Middle
=
Brute Force (2)
=
Input Capture (1)
=
Modify Authentication Process (1)
Network Sniffing
File and Directory Discovery
Network Service Discovery
Network Sniffing
Password Policy Discovery
Remote System Discovery
System Information Discovery
System Network Configuration Discovery
System Network Connections Discovery
Adversary-in-the-Middle
=
Data from Configuration Repository (2)
Data from Local System
=
Input Capture (1)
Non-Application Layer Protocol
=
Proxy (1)
=
Traffic Signaling (1)
=
Automated Exfiltration (1)
Firmware Corruption
System Shutdown/Reboot
Last modified: 01 April 2022