Security · Flashcard
What separates the Stealth tactic from Defense Impairment in ATT&CK?
- AStealth blends in; Defense Impairment attacks the controls
- BStealth is pre-compromise; Defense Impairment is post-access
- CStealth applies to Mobile; Defense Impairment to Enterprise
- DStealth is a tactic; Defense Impairment is only a mitigation
Why this is the answer
ATT&CK v19 split the old Defense Evasion tactic along exactly this line: Stealth (TA0005) hides activity without modifying defenses, while Defense Impairment (TA0112) degrades or disables them outright. Both are post-compromise Enterprise tactics, and both are tactics — neither is Mobile-only nor a mitigation.
Official docs