This is a custom instance of the MITRE ATT&CK Website. The official website can be found at attack.mitre.org.

PRE Matrix

Below are the tactics and techniques representing the MITRE ATT&CK^® Matrix for Enterprise covering preparatory techniques. The Matrix contains information for the PRE platform.

View on the ATT&CK^® Navigator

Resource Development

10 techniques

7 techniques

Active Scanning ₍₃₎

Gather Victim Host Information ₍₄₎

Gather Victim Identity Information ₍₃₎

Gather Victim Network Information ₍₆₎

Gather Victim Org Information ₍₄₎

Phishing for Information ₍₃₎

Search Closed Sources ₍₂₎

Search Open Technical Databases ₍₅₎

Search Open Websites/Domains ₍₂₎

Search Victim-Owned Websites

Acquire Infrastructure ₍₆₎

Compromise Accounts ₍₂₎

Compromise Infrastructure ₍₆₎

Develop Capabilities ₍₄₎

Establish Accounts ₍₂₎

Obtain Capabilities ₍₆₎

Stage Capabilities ₍₅₎

Last modified: 01 April 2022

Resource Development

10 techniques

7 techniques

=	Active Scanning ₍₃₎
	Vulnerability Scanning Scanning IP Blocks Wordlist Scanning

=	Gather Victim Host Information ₍₄₎
	Software Client Configurations Firmware Hardware

=	Gather Victim Identity Information ₍₃₎
	Email Addresses Employee Names Credentials

=	Gather Victim Network Information ₍₆₎
	Network Security Appliances Network Trust Dependencies Network Topology Domain Properties IP Addresses DNS

=	Gather Victim Org Information ₍₄₎
	Business Relationships Determine Physical Locations Identify Business Tempo Identify Roles

=	Phishing for Information ₍₃₎
	Spearphishing Link Spearphishing Attachment Spearphishing Service

=	Search Closed Sources ₍₂₎
	Threat Intel Vendors Purchase Technical Data

=	Search Open Technical Databases ₍₅₎
	DNS/Passive DNS Digital Certificates Scan Databases CDNs WHOIS

=	Search Open Websites/Domains ₍₂₎
	Search Engines Social Media

Search Victim-Owned Websites

=	Acquire Infrastructure ₍₆₎
	Web Services Virtual Private Server Domains DNS Server Server Botnet

=	Compromise Accounts ₍₂₎
	Email Accounts Social Media Accounts

=	Compromise Infrastructure ₍₆₎
	Web Services Server Domains Botnet Virtual Private Server DNS Server

=	Develop Capabilities ₍₄₎
	Code Signing Certificates Digital Certificates Malware Exploits

=	Establish Accounts ₍₂₎
	Social Media Accounts Email Accounts

=	Obtain Capabilities ₍₆₎
	Code Signing Certificates Tool Exploits Vulnerabilities Malware Digital Certificates

=	Stage Capabilities ₍₅₎
	Upload Malware Install Digital Certificate Upload Tool Drive-by Target Link Target

Last modified: 01 April 2022