CAPEC-497 — File Discovery
CAPEC-497: File Discovery
MITRE CAPEC attack pattern
| Status | Draft |
| Typical severity | Very Low |
| Likelihood of attack | High |
| Catalogue | CAPEC 3.9 (2023-01-24) |
Description
An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.
Where this sits in the chain
A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.
Weaknesses exploited: CWE-200
ATT&CK techniques: T1083
Prerequisites
- The adversary must know the location of these common key files.
Consequences
- Confidentiality: Read Data
Mitigations
- Leverage file protection mechanisms to render these files accessible only to authorized parties.