Conduct social engineering

From pre-attack
Jump to: navigation, search


Conduct social engineering
Technique
ID PRE-T1026
Tactic Technical Information Gathering

Definition

Social Engineering is the practice of manipulating people in order to get them to divulge information or take an action.12

Difficulty for the Adversary

Easy for the Adversary (Yes/No): Yes

Explanation: Very effective technique for the adversary that does not require any formal training and relies upon finding just one person who exhibits poor judgement.

Detection

Detectable by Common Defenses (Yes/No/Partial): No

Explanation: No technical means to detect an adversary collecting technical information about a target. Any detection would be based upon strong OPSEC policy implementation.

Similar Techniques for Other Tactics

TacticArticle
Organizational Information GatheringConduct social engineering
People Information GatheringConduct social engineering
Technical Information GatheringConduct social engineering