Skip to content

DS0035 Internet Scan

Information obtained (commonly via active network traffic probes or web crawling) regarding various types of resources and servers connected to the public Internet

Item Value
ID DS0035
Platforms PRE
Collection Layers OSINT
Version 1.0
Created 20 October 2021
Last Modified 20 October 2021

Data Components

Response Content

Logged network traffic in response to a scan showing both protocol header and body values

Domain ID Name
enterprise T1583 Acquire Infrastructure
enterprise T1583.003 Virtual Private Server
enterprise T1583.004 Server
enterprise T1583.006 Web Services
enterprise T1584 Compromise Infrastructure
enterprise T1584.003 Virtual Private Server
enterprise T1584.004 Server
enterprise T1584.006 Web Services
enterprise T1587 Develop Capabilities
enterprise T1587.003 Digital Certificates
enterprise T1592 Gather Victim Host Information
enterprise T1592.001 Hardware
enterprise T1592.002 Software
enterprise T1592.004 Client Configurations
enterprise T1588 Obtain Capabilities
enterprise T1588.004 Digital Certificates
enterprise T1608 Stage Capabilities
enterprise T1608.001 Upload Malware
enterprise T1608.002 Upload Tool
enterprise T1608.003 Install Digital Certificate
enterprise T1608.004 Drive-by Target
enterprise T1608.005 Link Target

Response Metadata

Contextual data about an Internet-facing resource gathered from a scan, such as running services or ports

Domain ID Name
enterprise T1583 Acquire Infrastructure
enterprise T1583.003 Virtual Private Server
enterprise T1583.004 Server
enterprise T1584 Compromise Infrastructure
enterprise T1584.003 Virtual Private Server
enterprise T1584.004 Server

References

Back to top