Mine technical blogs/forums

From pre-attack
Jump to: navigation, search


Mine technical blogs/forums
Technique
ID PRE-T1034
Tactic Technical Information Gathering

Definition

Technical blogs and forums provide a way for technical staff to ask for assistance or troubleshoot problems. In doing so they may reveal information such as operating system (OS), network devices, or applications in use.1

Difficulty for the Adversary

Easy for the Adversary (Yes/No): Yes

Explanation: Success is dependent upon the existence of detailed technical specifications for target network posted in blogs/forums. Poor OPSEC practices result in an adversary gleaning a lot of sensitive information about configurations and/or issues encountered.

Detection

Detectable by Common Defenses (Yes/No/Partial): No

Explanation: Cannot detect access to public sites.