46 lines
2.5 KiB
JSON
46 lines
2.5 KiB
JSON
|
{
|
||
|
|
"type": "bundle",
|
||
|
|
"id": "bundle--6c66f19b-3e5d-4e66-98e0-6837f8837986",
|
||
|
|
"spec_version": "2.0",
|
||
|
|
"objects": [
|
||
|
|
{
|
||
|
|
"type": "attack-pattern",
|
||
|
|
"id": "attack-pattern--5d24bb1d-4487-4923-ae3a-8e679092ac7a",
|
||
|
|
"created": "2026-04-20T20:54:20.714Z",
|
||
|
|
"created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
|
||
|
|
"revoked": false,
|
||
|
|
"external_references": [
|
||
|
|
{
|
||
|
|
"source_name": "mitre-attack",
|
||
|
|
"url": "https://attack.mitre.org/techniques/T0846/001",
|
||
|
|
"external_id": "T0846.001"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"source_name": "NIST SP 800-82r3",
|
||
|
|
"description": "Keith Stouffer. (2023, September). Guide to Operational Technology (OT) Security. Retrieved April 22, 2026.",
|
||
|
|
"url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r3.pdf"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"object_marking_refs": [
|
||
|
|
"marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
|
||
|
|
],
|
||
|
|
"modified": "2026-04-23T19:41:07.822Z",
|
||
|
|
"name": "Port Scan",
|
||
|
|
"description": "Adversaries may perform a port scan on a system, device, or network to identify live hosts, enumerate open ports and running services, identify operating systems, and map out the network.(Citation: NIST SP 800-82r3) The results of a port scan may inform adversary [Discovery](https://attack.mitre.org/tactics/TA0102), [Lateral Movement](https://attack.mitre.org/tactics/TA0109), and vulnerability exploitation decisions ([Exploitation for Evasion](https://attack.mitre.org/techniques/T0820), [Exploitation for Privilege Escalation](https://attack.mitre.org/techniques/T0890), [Exploitation of Remote Services](https://attack.mitre.org/techniques/T0866)). \n\nSome common tools for executing a port scan include `nmap`, `netcat`, and the Advanced Port Scanner.\n",
|
||
|
|
"kill_chain_phases": [
|
||
|
|
{
|
||
|
|
"kill_chain_name": "mitre-ics-attack",
|
||
|
|
"phase_name": "discovery"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"x_mitre_attack_spec_version": "3.3.0",
|
||
|
|
"x_mitre_deprecated": false,
|
||
|
|
"x_mitre_domains": [
|
||
|
|
"ics-attack"
|
||
|
|
],
|
||
|
|
"x_mitre_is_subtechnique": true,
|
||
|
|
"x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
|
||
|
|
"x_mitre_version": "1.0"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|