MITRE ATT&CK™

MITRE ATT&CK: Clipboard data

Introduction Copying data to a Windows or macOS system clipboard is a well-known time saver that many take advantage of, myself included. The problem with th

MITRE ATT&CK vulnerability spotlight: Access token manipulation

Introduction MITRE is a U.S. government federally-funded research and development center (FFRDC) which performs a large amount of research and assessment as

MITRE ATT&CK vulnerability series: Trusted relationship

Introduction What many who are not information security-savvy may think is that the attack surface of an organization is confined to simply the organization

MITRE ATT&CK vulnerability spotlight: Pass-the-hash

Introduction Since the first appearance of pass-the-hash (PtH) in the nineties, this lateral movement tactic has been helping attackers leverage credentials

MITRE ATT&CK vulnerability spotlight: Valid accounts

Introduction The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs cybersecurity

MITRE ATT&CK vulnerability spotlight: Obfuscated files or information

Introduction MITRE helps support the U.S. government’s R&D efforts by acting as a Federally Funded Research and Development Center (FFRDC), a non-profit

MITRE ATT&CK vulnerability spotlight: Valid accounts

Introduction The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs cybersecurity

MITRE ATT&CK vulnerability spotlight: Timestomping

MITRE Corporation is a non-profit and federally funded research and development center (FFRDC) that provides unbiased R&D and assessment services to the

MITRE ATT&CK vulnerability spotlight: DLL search order hijacking

Introduction The MITRE Corporation is a non-profit federally funded research and development center (FFRDC) of the United States government. As part of its e