MITRE ATT&CK Framework

Question 1

1.

Answer 1

Reconnassiance

Question 2

2.

Answer 2

Resource Development

Question 3

3.

Answer 3

Initial Access

Question 4

4.

Answer 4

Execution

Question 5

5.

Answer 5

Persistance

Question 6

6.

Answer 6

Privilege Escalation

Question 7

7.

Answer 7

Defense Evasioin

Question 8

8.

Answer 8

Credential Access

Question 9

9.

Answer 9

Discovery

Question 10

10.

Answer 10

Lateral Movement

Question 11

11.

Answer 11

Collection

Question 12

12.

Answer 12

Command and Control

Question 13

13.

Answer 13

Exfiltration

Question 14

14.

Answer 14

Impact

Question 15

Gathering information about the target system or network.
Tools: Nmap, Shodan, Recon-ng

Answer 15

Reconnaissance

Question 16

Identifying resources that can be used in later stages of the attack.
Tools: Custom scripts, ExploitDB, Github

Answer 16

Resource Development

Question 17

Gaining initial foothold into the target system or network.
Tools: Phishing emails, Exploit kits, Remote access trojans (RATs)

Answer 17

Initial Access

Question 18

Running malicious code or commands on the target system.
Tools: Metasploit, PowerShell, Cobalt Strike

Answer 18

Execution

Question 19

Maintaining access to the target system or network after initial access.
Tools: Scheduled tasks, Registry modifications, Backdoors

Answer 19

Persistence

Question 20

Exploiting vulnerabilities to elevate privileges on the target system.
Tools: Mimikatz, PowerSploit, sudo exploitation

Answer 20

Privilege Escalation

Question 21

Techniques used to avoid detection by security measures.
Tools: Rootkits, Fileless malware, Anti-forensics tools

Answer 21

Defense Evasion

Question 22

Stealing credentials to gain access to systems or resources.
Tools: Mimikatz, Keyloggers, Credential dumping tools

Answer 22

Credential Access

Question 23

Gathering information about the target environment and network.
Tools: BloodHound, Windows Management Instrumentation (WMI), net commands

Answer 23

Discovery

Question 24

Moving laterally within the network to gain access to additional systems.
Tools: PsExec, SSH, Remote Desktop Protocol (RDP)

Answer 24

Lateral Movement

Question 25

Gathering data or information from target systems.
Tools: Data mining tools, Packet sniffers, Keyloggers

Answer 25

Collection

Question 26

Establishing and maintaining communication channels with compromised systems.
Tools: Reverse shells, Command and control (C2) frameworks (e.g., Cobalt Strike, Metasploit), DNS Tunneling.

Answer 26

Command and Control

Question 27

Extracting data from the target environment and sending it to an external location.
Tools: FTP, HTTP(S), DNS tunneling, Steganography

Answer 27

Exfiltration

Question 28

Actions that result in damage to the target system or network.
Tools: Ransomware, Data wiping tools, Denial-of-service (DoS) attacks

Answer 28

Impact