Determine 3rd party infrastructure services

Infrastructure services includes the hardware, software, and network resources required to operate a communications environment. This infrastructure can be managed by a 3rd party rather than being managed by the owning organization. [1] [2]

ID: T1260

Tactic: Technical Information Gathering

Version: 1.0

Similar Techniques by Tactic

TacticTechnique
Organizational Information GatheringDetermine 3rd party infrastructure services

Detection

Detectable by Common Defenses (Yes/No/Partial): No

Explanation: The data is passive in nature or not controlled by the defender, so it is hard to identify when an adversary is getting or analyzing the data.

Difficulty for the Adversary

Easy for the Adversary (Yes/No): Yes

Explanation: Based on what the 3rd party infrastructure is, there are many tell tail signs which indicate it is hosted by a 3rd party, such as ASN data, MX or CNAME pointers or IP addresses

References

  1. Federal Financial Institutions Examination Council. (2016, October 17). Cybersecurity Awareness. Retrieved March 5, 2017.
  1. Kim Zetter. (2015, January 4). The Biggest Security Threats We’ll Face in 2015. Retrieved March 5, 2017.