CAPEC Definitions
CAPEC Definitions / CAPEC-529
CAPEC-529: Malware-Directed Internal Reconnaissance
Adversary uses malware or a similarly controlled application installed inside an organizational perimeter to gather information about the composition, configuration, and security mechanisms of a targeted application, system or network.
Severity:Medium
Possibility:Medium
Extended Description
No Extended Description.
Mitigations
Keep patches up to date by installing weekly or daily if possible.
Identify programs that may be used to acquire peripheral information and block them by using a software restriction policy or tools that restrict program execution by using a process allowlist.
Relationships with other CAPECs
CAPEC-169: Footprinting
Prerequisites
The adversary must have internal, logical access to the target network and system.
Related Weaknesses
No related Weaknesses found.
