Currently viewing ATT&CK v7.2 which was live between July 8, 2020 and October 26, 2020. Learn more about the versioning system or see the live site.
Register to stream the next session of ATT&CKcon Power Hour November 12
TACTICS
PRE-ATT&CK
Enterprise
Mobile
  1. Home
  2. Tactics
  3. PRE-ATT&CK
  4. People Weakness Identification

People Weakness Identification

People weakness identification consists of identifying and analyzing weaknesses and vulnerabilities from the intelligence gathering phases which can be leveraged to gain access to target or intermediate target persons of interest or social trust relationships.

ID: TA0019
Created: 17 October 2018
Last Modified: 17 October 2018

Techniques

Techniques: 3
ID Name Description
T1297 Analyze organizational skillsets and deficiencies Understanding organizational skillsets and deficiencies could provide insight in to weakness in defenses, or opportunities for exploitation.
T1295 Analyze social and business relationships, interests, and affiliations Social media provides insight into the target's affiliations with groups and organizations. Certification information can explain their technical associations and professional associations. Personal information can provide data for exploitation or even blackmail.
T1296 Assess targeting options An adversary may assess a target's operational security (OPSEC) practices in order to identify targeting options. A target may share different information in different settings or be more of less cautious in different environments.