Determine 3rd party infrastructure services
Infrastructure services includes the hardware, software, and network resources required to operate a communications environment. This infrastructure can be managed by a 3rd party rather than being managed by the owning organization.  
Tactic: Technical Information Gathering
Similar Techniques by Tactic
|Organizational Information Gathering||Determine 3rd party infrastructure services|
DetectionDetectable by Common Defenses (Yes/No/Partial): No
Explanation: The data is passive in nature or not controlled by the defender, so it is hard to identify when an adversary is getting or analyzing the data.
Difficulty for the AdversaryEasy for the Adversary (Yes/No): Yes
Explanation: Based on what the 3rd party infrastructure is, there are many tell tail signs which indicate it is hosted by a 3rd party, such as ASN data, MX or CNAME pointers or IP addresses
- Federal Financial Institutions Examination Council. (2016, October 17). Cybersecurity Awareness. Retrieved March 5, 2017.
- Kim Zetter. (2015, January 4). The Biggest Security Threats We’ll Face in 2015. Retrieved March 5, 2017.