+Pre-compromise

Pre-compromise

Pre-compromise mitigations involve proactive measures and defenses implemented to prevent adversaries from successfully identifying and exploiting weaknesses during the Reconnaissance and Resource Development phases of an attack. These activities focus on reducing an organization's attack surface, identify adversarial preparation efforts, and increase the difficulty for attackers to conduct successful operations. This mitigation can be implemented through the following measures:

Limit Information Exposure:

  • Regularly audit and sanitize publicly available data, including job posts, websites, and social media.
  • Use tools like OSINT monitoring platforms (e.g., SpiderFoot, Recon-ng) to identify leaked information.

Protect Domain and DNS Infrastructure:

  • Enable DNSSEC and use WHOIS privacy protection.
  • Monitor for domain hijacking or lookalike domains using services like RiskIQ or DomainTools.

External Monitoring:

  • Use tools like Shodan, Censys to monitor your external attack surface.
  • Deploy external vulnerability scanners to proactively address weaknesses.

Threat Intelligence:

  • Leverage platforms like MISP, Recorded Future, or Anomali to track adversarial infrastructure, tools, and activity.

Content and Email Protections:

  • Use email security solutions like Proofpoint, Microsoft Defender for Office 365, or Mimecast.
  • Enforce SPF/DKIM/DMARC policies to protect against email spoofing.

Training and Awareness:

  • Educate employees on identifying phishing attempts, securing their social media, and avoiding information leaks.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
is related to Mitigations
blocks Active Scanning
blocks Gather Victim Org Information
blocks Cloud Accounts
blocks Vulnerabilities
blocks Artificial Intelligence
blocks Digital Certificates
blocks DNS Server
blocks Server
blocks Audio-Visual Content
blocks Code Signing Certificates
blocks Network Security Appliances
blocks Network Trust Dependencies
blocks DNS/Passive DNS
blocks Develop Capabilities
blocks Server
blocks Credentials
blocks Software
blocks Tool
blocks Domains
blocks Wordlist Scanning
blocks Generate Content
blocks Serverless
blocks Identify Business Tempo
blocks Written Content
blocks Code Signing Certificates
blocks Gather Victim Identity Information
blocks Search Open Technical Databases
blocks Establish Accounts
blocks IP Addresses
blocks Social Media Accounts
blocks Employee Names
blocks Search Victim-Owned Websites
blocks Query Public AI Services
blocks SEO Poisoning
blocks Digital Certificates
blocks Threat Intel Vendors
blocks Social Media Accounts
blocks Email Addresses
blocks Search Engines
blocks Serverless
blocks Malware
blocks Upload Malware
blocks Email Accounts
blocks Gather Victim Network Information
blocks Search Threat Vendor Data
blocks Drive-by Target
blocks Botnet
blocks CDNs
blocks Search Closed Sources
blocks Determine Physical Locations
blocks Web Services
blocks Botnet
blocks Scanning IP Blocks
blocks Virtual Private Server
blocks Purchase Technical Data
blocks Client Configurations
blocks Gather Victim Host Information
blocks Email Accounts
blocks Vulnerability Scanning
blocks Acquire Infrastructure
blocks Business Relationships
blocks Hardware
blocks DNS Server
blocks Web Services
blocks Network Topology
blocks Cloud Accounts
blocks Domains
blocks Domain Properties
blocks Install Digital Certificate
blocks Virtual Private Server
blocks Exploits
blocks Malware
blocks Compromise Accounts
blocks Obtain Capabilities
blocks Digital Certificates
blocks Firmware
blocks Malvertising
blocks Link Target
blocks WHOIS
blocks Exploits
blocks Stage Capabilities
blocks Network Devices
blocks Identify Roles
blocks Compromise Infrastructure
blocks Scan Databases
blocks Social Media
blocks Acquire Access
blocks Upload Tool
blocks AI Result Poisoning
  • MITREATTACK -

    EN: MITRE ATT&CK®, https://attack.mitre.org/. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. License: The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. See the Terms of Use for the disclaimers. ATT&CK® is a registered trademark of The MITRE Corporation. Converted into the GRCA format.

    DE: MITRE ATT&CK®, https://attack.mitre.org/. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE erlaubt die Nutzung für Forschung, Entwicklung und kommerzielle Zwecke, wenn jede Kopie den Urheberrechtsvermerk und die Lizenz enthält; maßgeblich ist der englische Wortlaut der Lizenz oben und die Terms of Use mit den Haftungsausschlüssen. ATT&CK® ist eine eingetragene Marke der MITRE Corporation. In das GRCA-Format umgewandelt.