The sub-techniques beta is now live! Read the release blog post for more info.

People Weakness Identification

People weakness identification consists of identifying and analyzing weaknesses and vulnerabilities from the intelligence gathering phases which can be leveraged to gain access to target or intermediate target persons of interest or social trust relationships.

ID: TA0019
Created: 17 October 2018
Last Modified: 17 October 2018

Techniques

Techniques: 3
ID Name Description
T1297 Analyze organizational skillsets and deficiencies

Understanding organizational skillsets and deficiencies could provide insight in to weakness in defenses, or opportunities for exploitation.

T1295 Analyze social and business relationships, interests, and affiliations

Social media provides insight into the target's affiliations with groups and organizations. Certification information can explain their technical associations and professional associations. Personal information can provide data for exploitation or even blackmail.

T1296 Assess targeting options

An adversary may assess a target's operational security (OPSEC) practices in order to identify targeting options. A target may share different information in different settings or be more of less cautious in different environments.