GnoseedGnoseed
Security · Flashcard

What separates the Stealth tactic from Defense Impairment in ATT&CK?

Why this is the answer

ATT&CK v19 split the old Defense Evasion tactic along exactly this line: Stealth (TA0005) hides activity without modifying defenses, while Defense Impairment (TA0112) degrades or disables them outright. Both are post-compromise Enterprise tactics, and both are tactics — neither is Mobile-only nor a mitigation.

Read more in the docs
Study in Gnoseed →