MITRE ATT&CKtactic

TA0043 Reconnaissance

Published 2020-10-02 Modified 2025-04-25 Official page ↗
Domain
enterprise
Version
1.0
Created
2020-10-02

Description

The adversary is trying to gather information they can use to plan future operations. Reconnaissance consists of techniques that involve adversaries actively or passively gathering information that can be used to support targeting. Such information may include details of the victim organization, infrastructure, or staff/personnel. This information can be leveraged by the adversary to aid in other phases of the adversary lifecycle, such as using gathered information to plan and execute Initial Access, to scope and prioritize post-compromise objectives, or to drive and lead further Reconnaissance efforts.

Related

Referenced by MITRE ATT&CK · tactic (46)

  • T1682 Query Public AI Services technique
  • T1681 Search Threat Vendor Data technique
  • T1598.004 Spearphishing Voice sub-technique
  • T1593.003 Code Repositories sub-technique
  • T1595.003 Wordlist Scanning sub-technique
  • T1589 Gather Victim Identity Information technique
  • T1589.001 Credentials sub-technique
  • T1589.002 Email Addresses sub-technique
  • T1589.003 Employee Names sub-technique
  • T1590 Gather Victim Network Information technique
  • T1590.001 Domain Properties sub-technique
  • T1590.002 DNS sub-technique
  • T1590.003 Network Trust Dependencies sub-technique
  • T1590.004 Network Topology sub-technique
  • T1590.005 IP Addresses sub-technique
  • T1590.006 Network Security Appliances sub-technique
  • T1591 Gather Victim Org Information technique
  • T1591.001 Determine Physical Locations sub-technique
  • T1591.002 Business Relationships sub-technique
  • T1591.003 Identify Business Tempo sub-technique
  • T1591.004 Identify Roles sub-technique
  • T1592 Gather Victim Host Information technique
  • T1592.001 Hardware sub-technique
  • T1592.002 Software sub-technique
  • T1592.003 Firmware sub-technique
  • T1592.004 Client Configurations sub-technique
  • T1593 Search Open Websites/Domains technique
  • T1593.001 Social Media sub-technique
  • T1593.002 Search Engines sub-technique
  • T1594 Search Victim-Owned Websites technique
Show all 46 ›