Determine 3rd party infrastructure services
Infrastructure services includes the hardware, software, and network resources required to operate a communications environment. This infrastructure can be managed by a 3rd party rather than being managed by the owning organization. [1] [2]
ID: T1260
Tactic: Technical Information Gathering
Version: 1.0
Similar Techniques by Tactic
| Tactic | Technique |
|---|---|
| Organizational Information Gathering | Determine 3rd party infrastructure services |
Detection
Detectable by Common Defenses (Yes/No/Partial): NoExplanation: The data is passive in nature or not controlled by the defender, so it is hard to identify when an adversary is getting or analyzing the data.
Difficulty for the Adversary
Easy for the Adversary (Yes/No): YesExplanation: Based on what the 3rd party infrastructure is, there are many tell tail signs which indicate it is hosted by a 3rd party, such as ASN data, MX or CNAME pointers or IP addresses
References
- Federal Financial Institutions Examination Council. (2016, October 17). Cybersecurity Awareness. Retrieved March 5, 2017.
- Kim Zetter. (2015, January 4). The Biggest Security Threats We’ll Face in 2015. Retrieved March 5, 2017.