Security · Flashcard
What separates the Stealth tactic from Defense Impairment in ATT&CK?
Why this is the answer
ATT&CK v19 split the old Defense Evasion tactic along exactly this line: Stealth (TA0005) hides activity without modifying defenses, while Defense Impairment (TA0112) degrades or disables them outright. Both are post-compromise Enterprise tactics, and both are tactics — neither is Mobile-only nor a mitigation.
Read more in the docs