MITRE ATT&CKtactic
TA0001 Initial Access
- Domain
- enterprise
- Version
- 1.0
- Created
- 2018-10-17
Description
The adversary is trying to get into your network.
Initial Access consists of techniques that use various entry vectors to gain their initial foothold within a network. Techniques used to gain a foothold include targeted spearphishing and exploiting weaknesses on public-facing web servers. Footholds gained through initial access may allow for continued access, like valid accounts and use of external remote services, or may be limited-use due to changing passwords.
Related
Referenced by MITRE ATT&CK · tactic (22)
- T1669 Wi-Fi Networks technique
- T1566.004 Spearphishing Voice sub-technique
- T1659 Content Injection technique
- T1078.001 Default Accounts sub-technique
- T1078.002 Domain Accounts sub-technique
- T1078.003 Local Accounts sub-technique
- T1078.004 Cloud Accounts sub-technique
- T1195.001 Compromise Software Dependencies and Development Tools sub-technique
- T1195.002 Compromise Software Supply Chain sub-technique
- T1195.003 Compromise Hardware Supply Chain sub-technique
- T1566 Phishing technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1566.003 Spearphishing via Service sub-technique
- T1189 Drive-by Compromise technique
- T1190 Exploit Public-Facing Application technique
- T1195 Supply Chain Compromise technique
- T1199 Trusted Relationship technique
- T1200 Hardware Additions technique
- T1078 Valid Accounts technique
- T1091 Replication Through Removable Media technique
- T1133 External Remote Services technique