Security · Flashcard

Which of these software entries does ATT&CK type as Malware rather than Tool?

Why this is the answer

ATT&CK reserves Tool for software a defender, pen tester, or red teamer could legitimately use — PsExec, Mimikatz, and Impacket all carry Type: TOOL. Cobalt Strike is typed MALWARE despite being a commercial product, because ATT&CK treats it as software intended for malicious use by adversaries.

More MITRE ATT&CK Tactics and Techniques flashcards

What does the acronym ATT&CK stand for?
What separates the Stealth tactic from Defense Impairment in ATT&CK?
What replaced the per-technique Detection notes in ATT&CK v18?

Back to the MITRE ATT&CK Tactics and Techniques deck (95 flashcards)